Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/3139332e33362e3136332e302f32342d3234203d3e203235313938.roa
File: 3139332e33362e3136332e302f32342d3234203d3e203235313938.roa (raw, json)
Hash identifier: ZSbvr1icFvad2j+vTPTuuGZXt620GEw9E83QKYYb0oA=
Subject key identifier: E3:6A:71:14:21:AB:B9:D6:78:CC:49:54:2B:48:A4:6D:46:F6:22:CE
Certificate issuer: /CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8
Certificate serial: 422015480B67E4F7DDD7BCA31758A25D72CD57B8
Authority key identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/3139332e33362e3136332e302f32342d3234203d3e203235313938.roa
Signing time: Sat 25 Jul 2026 12:51:34 +0000
ROA not before: Sat 25 Jul 2026 12:46:34 +0000
ROA not after: Sat 24 Jul 2027 12:51:34 +0000
asID: 25198
IP address blocks: 193.36.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl
rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 02:34:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:20:15:48:0b:67:e4:f7:dd:d7:bc:a3:17:58:a2:5d:72:cd:57:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8
Validity
Not Before: Jul 25 12:46:34 2026 GMT
Not After : Jul 24 12:51:34 2027 GMT
Subject: CN=E36A711421ABB9D678CC49542B48A46D46F622CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:db:d4:db:43:d6:52:88:e7:ac:02:81:4f:51:
47:c7:6c:4f:58:0f:38:c1:65:98:14:73:b3:16:5a:
dd:b1:55:a4:3f:af:d2:5c:23:7c:d3:bf:f2:33:41:
f1:4e:30:b9:4f:16:6e:f7:75:91:2f:24:ba:2d:25:
d2:93:6a:d9:f7:c2:e7:ea:73:8f:08:c8:42:77:50:
1a:bc:64:a8:25:d6:f6:86:3d:3a:af:5a:3b:a4:be:
72:de:0d:1c:bd:e4:c3:a5:7a:e2:bb:dc:df:b7:08:
a2:49:bc:64:aa:e0:fa:ca:ac:09:fd:e0:2a:94:af:
c8:b0:a7:41:46:0d:75:80:d6:a2:51:2a:8a:e3:7a:
c0:7d:dd:2d:70:c7:fa:29:f1:81:dc:89:c7:01:aa:
a2:af:c4:86:21:c9:f8:bd:d0:a5:17:12:7a:9c:25:
68:d1:c1:8b:b5:c7:09:df:b6:a5:f1:2b:13:bb:99:
9e:ea:48:42:3e:8f:c8:45:d1:67:68:82:72:ce:e1:
1f:12:14:7d:8f:fb:4c:99:29:ef:98:88:2d:86:33:
aa:12:70:92:f0:5e:08:f4:d6:2a:74:2b:da:d0:eb:
54:5c:b1:71:3a:fa:d4:c2:58:c0:d3:99:b2:53:8b:
21:0a:bf:e6:f6:83:02:60:4e:32:9a:68:8a:b8:3d:
a2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:6A:71:14:21:AB:B9:D6:78:CC:49:54:2B:48:A4:6D:46:F6:22:CE
X509v3 Authority Key Identifier:
keyid:7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/3139332e33362e3136332e302f32342d3234203d3e203235313938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.163.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:40:06:d7:78:8b:64:bb:cf:84:6c:e0:a5:50:3c:e2:e2:20:
ba:6f:ac:61:eb:a2:fb:aa:e8:3c:d0:1e:7f:9e:42:b3:3a:01:
88:01:c1:f3:a6:b9:d5:f7:2c:17:09:08:18:29:c6:19:27:13:
24:6b:ef:16:72:64:83:eb:7a:cb:16:29:fb:ea:d8:01:c4:23:
b4:09:45:01:e3:74:e3:14:8e:4b:f8:33:6f:fa:7b:9d:a3:84:
93:ac:c1:e0:f7:8f:6b:4d:e6:56:93:f1:ef:62:0d:a0:23:98:
ef:15:ab:14:17:80:57:88:c0:a5:b3:e0:85:8c:5f:4e:9c:79:
7b:9b:7f:b9:c0:17:b4:43:ed:f9:d6:a4:04:1b:65:04:ba:2f:
b2:67:21:95:81:d3:71:ad:6c:93:a0:89:20:ad:aa:ee:93:70:
df:7f:53:9c:58:c2:b0:b2:67:cd:de:35:32:2a:88:b7:c2:eb:
71:96:06:b0:11:58:87:5c:d5:f0:ef:72:5e:3a:30:af:41:42:
95:5e:68:32:4b:a7:04:68:8f:4f:ba:87:5b:25:a4:41:3e:bd:
97:82:d8:e5:c3:cd:8a:51:5b:ac:d0:8f:e6:18:12:2f:dd:ed:
f1:c3:86:92:4c:d4:95:4c:11:a1:13:d7:1d:e4:f8:29:93:e9:
ac:a5:df:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:58:45 2026 by rpki-client