Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/3132382e302e35392e302f32342d3234203d3e20313938323530.roa
File: 3132382e302e35392e302f32342d3234203d3e20313938323530.roa (raw, json)
Hash identifier: HQOaTubiLyt9o9/oqgP6VvkM/3rMQhzKMyX8Wbjhrbg=
Subject key identifier: 4C:AA:A6:03:12:1C:D4:F5:DE:98:66:2D:D7:C1:D6:A4:F9:A6:0B:A6
Certificate issuer: /CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8
Certificate serial: 5FE5AE871127B6F2E91C6BEC2846C1D30ED71774
Authority key identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/3132382e302e35392e302f32342d3234203d3e20313938323530.roa
Signing time: Mon 13 Apr 2026 13:25:16 +0000
ROA not before: Mon 13 Apr 2026 13:20:16 +0000
ROA not after: Mon 12 Apr 2027 13:25:16 +0000
asID: 198250
IP address blocks: 128.0.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl
rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 16:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:e5:ae:87:11:27:b6:f2:e9:1c:6b:ec:28:46:c1:d3:0e:d7:17:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8
Validity
Not Before: Apr 13 13:20:16 2026 GMT
Not After : Apr 12 13:25:16 2027 GMT
Subject: CN=4CAAA603121CD4F5DE98662DD7C1D6A4F9A60BA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d1:49:da:dd:3d:6e:ca:7e:a3:a6:39:b8:19:
6f:a4:34:66:c0:d3:3c:7f:8b:6c:71:5a:72:1c:9d:
b8:d3:f8:c4:2d:62:12:34:ec:89:79:a1:e4:ba:f0:
f8:9c:3a:2a:f9:fa:99:49:ee:09:49:7c:b7:57:60:
64:5b:0e:f5:ba:c9:43:02:3c:d5:76:ff:8a:cd:fb:
73:ca:8d:97:da:28:0e:b1:78:4b:d9:2d:3f:91:c0:
5d:44:51:3a:4a:a3:56:59:00:34:f1:11:a8:ac:36:
ea:80:94:f5:a0:b6:ed:84:2c:b9:78:d5:8f:d5:a0:
59:6f:5f:7d:0f:de:d3:30:73:38:61:33:91:b4:0a:
f4:b6:0f:f4:f6:57:92:c2:f3:80:30:8e:74:27:82:
bc:dd:b3:fd:e8:56:0b:01:cb:6c:07:bc:44:84:41:
6f:93:83:2f:51:02:5a:17:30:7a:f8:bd:c9:ca:ce:
78:92:a1:70:6b:5c:ab:cf:de:98:6c:0b:23:78:64:
c4:e6:20:89:3e:2e:1e:0f:dd:fc:65:b1:7c:64:07:
66:d9:89:6a:34:d8:31:4f:d1:b5:6e:53:bf:6e:ff:
c2:cb:75:d7:92:18:6f:92:d5:98:c4:80:68:e7:a9:
22:71:ef:6a:9a:86:1c:58:f1:11:6b:47:38:5f:d7:
e2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:AA:A6:03:12:1C:D4:F5:DE:98:66:2D:D7:C1:D6:A4:F9:A6:0B:A6
X509v3 Authority Key Identifier:
keyid:7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/3132382e302e35392e302f32342d3234203d3e20313938323530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.0.59.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:52:82:a0:a8:4a:cb:a7:05:85:0c:22:9e:62:63:34:57:7d:
d2:d9:d4:4c:ed:67:59:d6:2d:6c:1a:73:bd:0f:71:84:b4:2a:
24:9a:c7:e3:64:51:3f:b9:41:ef:fa:5d:cc:e4:27:89:50:3d:
f4:6c:e0:68:af:76:34:d5:b7:28:9a:d7:25:59:77:4a:d5:04:
f6:f8:af:96:cf:d5:5b:e5:01:c1:ef:26:0e:3a:85:17:63:d9:
6e:14:1b:04:19:25:ac:ab:67:9a:25:c0:9d:4c:cd:cc:fc:e4:
43:fa:2c:f0:51:24:71:93:65:17:e8:fe:93:0b:26:6c:9f:97:
0e:06:c5:97:d4:84:64:1a:15:77:7d:38:31:e0:55:af:27:df:
c7:d2:cc:d0:6e:0c:52:8e:4b:74:af:a0:2c:9c:4c:4c:84:f7:
73:44:e1:3c:f7:05:fc:88:5e:ff:66:de:7d:f8:5f:63:bc:0a:
03:cb:aa:98:1e:f8:8f:fc:88:59:7e:2c:2e:ec:db:7f:cb:e7:
66:09:67:ee:d4:81:21:93:ed:b7:1b:f8:74:53:3f:ca:5d:ae:
1a:ba:3b:d2:4f:4b:6d:88:8b:f6:d5:c7:ed:58:26:90:f3:88:
31:ed:3b:ce:0f:72:ad:01:a4:ee:03:60:d0:ca:0f:16:85:d6:
7d:9d:59:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:32 2026 by rpki-client