Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/38312e3139392e32382e302f32342d3234203d3e20383334.roa
File: 38312e3139392e32382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: EaFSPc5f4++qCDszznUpM3YrjVHSde7BhTz3eA4Q3/I=
Subject key identifier: 71:46:A8:84:53:BF:55:92:31:70:2E:CA:61:AE:65:AD:AA:1A:A4:BC
Certificate issuer: /CN=b7c75b0ee5281d7520b6724e8cc3ccf0a871ce8f
Certificate serial: 3413449ADA84724429E950718F3A2BAEC9045268
Authority key identifier: B7:C7:5B:0E:E5:28:1D:75:20:B6:72:4E:8C:C3:CC:F0:A8:71:CE:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/38312e3139392e32382e302f32342d3234203d3e20383334.roa
Signing time: Fri 18 Sep 2026 00:07:45 +0000
ROA not before: Fri 18 Sep 2026 00:02:45 +0000
ROA not after: Fri 17 Sep 2027 00:07:45 +0000
asID: 834
IP address blocks: 81.199.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.crl
rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft
rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:06:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:13:44:9a:da:84:72:44:29:e9:50:71:8f:3a:2b:ae:c9:04:52:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7c75b0ee5281d7520b6724e8cc3ccf0a871ce8f
Validity
Not Before: Sep 18 00:02:45 2026 GMT
Not After : Sep 17 00:07:45 2027 GMT
Subject: CN=7146A88453BF559231702ECA61AE65ADAA1AA4BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8c:2e:8f:83:ff:fd:b1:c0:c1:c0:c6:d3:be:
b8:45:0e:a8:4b:a5:5c:40:84:39:fa:4f:8f:43:d6:
c0:44:58:c0:92:14:a1:70:23:7f:ea:97:6d:cf:18:
4d:c8:e2:83:71:f6:9a:0d:67:5d:e9:e7:47:62:73:
1e:ce:94:77:8b:fc:9b:60:af:32:b0:59:ca:6c:0a:
a6:9f:40:9b:93:71:6d:79:14:94:43:20:3c:cb:0b:
64:56:9e:c2:8e:c6:6b:2d:e6:57:f3:b3:00:03:55:
01:59:d1:78:3a:69:3b:7f:4a:da:5a:c5:fe:d6:59:
9b:c6:b9:be:e4:50:93:6e:68:f5:7c:3e:4d:0b:cf:
66:68:d8:8a:4a:1a:53:71:be:7c:ec:cc:73:f2:12:
31:1d:c9:8f:67:e8:3d:34:f9:13:9f:ad:c2:72:d3:
5b:b6:14:b7:9d:31:3c:d8:07:50:1c:d3:7b:e2:ba:
f8:a3:e8:d1:0e:02:dc:bf:52:e6:36:5e:72:86:d3:
d5:5d:56:b7:c4:26:6e:f9:f8:5a:5d:91:ed:55:f8:
e7:b1:0b:d9:97:ce:1b:58:f4:d4:dd:90:f9:79:d9:
a8:41:1e:4c:2a:ed:45:f1:92:a5:0c:63:ce:e1:e1:
20:de:84:c7:a9:66:1b:3f:9f:02:19:cd:6e:e0:a3:
22:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:46:A8:84:53:BF:55:92:31:70:2E:CA:61:AE:65:AD:AA:1A:A4:BC
X509v3 Authority Key Identifier:
keyid:B7:C7:5B:0E:E5:28:1D:75:20:B6:72:4E:8C:C3:CC:F0:A8:71:CE:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/38312e3139392e32382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.199.28.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:66:cc:4e:b2:28:86:a0:e8:ef:3c:5e:96:b4:07:e0:b2:c6:
02:18:e0:4b:cf:01:a9:25:8b:66:fc:34:a9:f8:ae:81:8c:50:
6b:99:87:7c:ba:44:69:a4:99:4d:97:c4:a3:09:11:9e:52:f5:
68:19:65:0a:f5:17:a5:a7:17:ff:44:81:04:31:85:fa:57:97:
24:94:c1:03:41:27:17:c8:8c:f1:26:8b:05:ee:39:79:a0:ed:
20:dd:44:b2:3c:8f:d7:a0:be:1a:0a:c4:c6:c4:fa:8c:c8:6f:
52:d8:49:46:e7:e6:9c:17:5e:51:20:67:40:eb:14:e3:0d:4d:
70:e4:52:4c:be:88:d5:ef:9d:0d:ad:f7:b1:dd:02:e7:08:73:
0a:af:f5:ea:63:51:24:cc:e4:a8:31:5e:0d:1a:b1:b1:cd:10:
0b:fa:2a:18:8f:98:d2:e8:e1:c6:2b:82:10:a2:01:04:68:ff:
3d:f7:ef:e8:6d:a0:fa:78:ae:1f:45:94:01:03:9e:04:d0:c8:
f9:09:fd:a8:d7:df:40:0b:a2:13:1a:18:c1:bb:4f:f6:49:c6:
7a:48:69:a1:2b:56:14:07:b0:f6:8e:18:c8:ff:37:e3:e3:52:
78:41:66:8a:86:ff:af:0f:e3:64:e5:6b:5e:76:e8:37:cd:95:
c9:5a:44:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:36:00 2026 by rpki-client