Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/3139332e33362e3136332e302f32342d3234203d3e2039333034.roa
File: 3139332e33362e3136332e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier: KSvy0t5mxMlfAw5CgGOEfh8lWKc2ZpHw/aFvgaVIuIU=
Subject key identifier: BB:34:11:41:29:84:90:87:D5:17:A5:98:C1:DA:0C:4F:A2:B9:7A:F5
Certificate issuer: /CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8
Certificate serial: 011EACA3D21030A7674DB55277A94FC9B996BA67
Authority key identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/3139332e33362e3136332e302f32342d3234203d3e2039333034.roa
Signing time: Tue 08 Sep 2026 06:25:20 +0000
ROA not before: Tue 08 Sep 2026 06:20:20 +0000
ROA not after: Tue 07 Sep 2027 06:25:20 +0000
asID: 9304
IP address blocks: 193.36.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl
rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 11:51:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:1e:ac:a3:d2:10:30:a7:67:4d:b5:52:77:a9:4f:c9:b9:96:ba:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8
Validity
Not Before: Sep 8 06:20:20 2026 GMT
Not After : Sep 7 06:25:20 2027 GMT
Subject: CN=BB34114129849087D517A598C1DA0C4FA2B97AF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:80:39:ee:a6:8e:d5:33:9b:44:2f:ae:bb:a7:
fe:bb:5c:38:f4:16:a8:2f:a6:8a:3f:51:86:9c:7a:
fc:93:f0:f8:41:f9:e4:53:3d:68:ce:53:f6:67:b1:
65:ca:a6:9e:2f:f0:69:d1:ce:44:84:87:f2:b8:3c:
c6:52:21:ad:93:3d:de:36:01:f8:c0:cd:46:c9:53:
9f:f5:19:8d:fc:15:78:94:40:9d:36:9d:02:d0:52:
cf:16:47:2f:b7:8c:69:01:bb:f8:91:b7:29:07:cc:
e6:1a:15:b0:fd:6a:f2:aa:2b:12:94:09:18:6a:ee:
a5:d8:89:cd:c8:bf:f7:cb:2b:71:f5:d9:1f:6c:e3:
3e:1b:00:81:18:d8:c7:06:3a:87:8a:ca:58:e1:70:
c9:ab:44:88:ec:2e:05:90:84:3b:18:f4:50:69:b7:
f7:92:dc:2e:6f:85:44:7c:24:cd:18:03:68:03:7d:
f3:a6:5a:94:a6:96:2e:3c:0d:c7:dd:35:fb:33:e0:
0b:25:8f:c2:b3:c9:13:19:df:55:86:23:29:61:cc:
14:40:96:b9:e2:c6:f7:85:7b:4e:5c:ac:89:e2:b0:
ac:03:ce:eb:f8:09:58:77:24:2b:7a:59:3b:48:35:
53:43:6d:8f:c1:82:ab:aa:12:1a:d9:48:81:9e:57:
e4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:34:11:41:29:84:90:87:D5:17:A5:98:C1:DA:0C:4F:A2:B9:7A:F5
X509v3 Authority Key Identifier:
keyid:7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/3139332e33362e3136332e302f32342d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.163.0/24
Signature Algorithm: sha256WithRSAEncryption
23:96:ff:e2:58:b0:53:cc:08:47:83:89:e9:ed:22:01:ef:ad:
ad:c6:30:c9:35:98:c1:d3:b0:dd:fb:02:66:8f:20:50:b3:d5:
d4:02:ea:12:dc:80:53:c7:bb:36:04:d1:3f:d5:51:1b:67:20:
c9:31:51:98:89:1d:11:50:d0:13:49:7d:7f:31:ea:d3:da:5f:
b5:31:69:1b:94:dc:ea:b8:71:7b:2e:0e:ac:9d:ab:30:69:f7:
70:77:31:81:e9:22:e4:a1:5b:ff:18:42:d5:d2:45:b0:48:5e:
ac:d1:4e:cf:4c:aa:f9:c3:43:4d:b8:c6:f2:60:18:0d:d3:27:
74:68:5c:45:8d:ad:73:0f:b6:60:0a:03:82:bd:db:76:d3:a4:
18:33:26:78:06:23:29:69:a3:e0:3c:17:6e:c3:db:8d:4e:db:
5b:ee:6a:fc:16:ec:c6:8b:49:8f:83:9b:af:0a:bb:da:a3:99:
6b:81:d0:e8:7e:d6:cc:ce:0c:fe:df:6a:ad:e9:62:8f:01:de:
7a:dc:c9:1c:0a:a3:ae:65:0a:69:4b:ce:0f:41:42:60:a4:66:
d3:5c:09:26:b7:01:3d:7f:1b:9d:52:7c:9f:0c:bf:62:8b:d2:
93:d1:2d:dd:6f:ce:e3:3b:93:9e:f0:68:fd:7e:a1:a2:9b:17:
2b:08:ab:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 04:13:53 2026 by rpki-client