Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/3134362e31392e3136372e302f32342d3234203d3e20313532363732.roa
File: 3134362e31392e3136372e302f32342d3234203d3e20313532363732.roa (raw, json)
Hash identifier: /pttCsH3EqNiBOKmYU2SEK0bSx+Q89rOic38LmDTjfU=
Subject key identifier: 0C:35:A7:0D:CA:03:FD:F2:6C:23:48:C6:D6:2C:EA:F0:AF:32:76:0E
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 239B8ACE5B8693D9CAF876D385A39FB981CCAC69
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/3134362e31392e3136372e302f32342d3234203d3e20313532363732.roa
Signing time: Mon 01 Jun 2026 06:47:20 +0000
ROA not before: Mon 01 Jun 2026 06:42:20 +0000
ROA not after: Mon 31 May 2027 06:47:20 +0000
asID: 152672
IP address blocks: 146.19.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 15:22:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:9b:8a:ce:5b:86:93:d9:ca:f8:76:d3:85:a3:9f:b9:81:cc:ac:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Jun 1 06:42:20 2026 GMT
Not After : May 31 06:47:20 2027 GMT
Subject: CN=0C35A70DCA03FDF26C2348C6D62CEAF0AF32760E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:15:54:90:da:ce:45:37:73:b2:7e:03:c9:d1:
16:0b:5f:c0:43:fb:ce:b3:19:a7:c3:29:14:3a:f1:
4f:b2:ec:cd:b1:9e:e3:ab:53:d0:97:32:29:d5:09:
7d:37:bb:0d:8b:cd:1f:33:ac:0b:c1:12:f7:db:77:
91:1a:82:5c:91:56:85:74:5d:e9:6a:1e:85:0e:23:
25:7d:ed:88:fe:a5:65:c3:f6:05:ca:8f:0b:a9:ed:
d6:85:16:fe:74:1f:2f:89:97:47:af:59:31:f4:d0:
24:e5:b7:61:b5:60:e2:4e:81:6f:f2:10:74:00:60:
00:bc:95:43:7b:46:17:96:86:2e:98:6a:63:28:0a:
6a:31:8e:07:e1:be:5a:29:15:17:c9:12:fc:5e:5e:
a4:87:0b:bd:72:eb:7e:e0:18:e3:71:73:fc:1f:a7:
a8:f2:3e:84:e7:c9:0b:6f:e2:e4:3e:4a:47:94:4c:
4f:14:55:31:71:9c:cd:57:4c:b2:9c:f5:2d:e6:81:
4d:c8:e1:5e:7d:f8:35:36:35:d3:c4:ea:e8:5d:0f:
e5:e0:22:52:de:b1:c9:97:29:6b:e8:02:da:aa:69:
64:e4:ef:05:88:8f:b4:66:cb:b0:3b:f0:c6:4f:11:
e8:34:2d:df:e4:14:43:27:29:02:b5:70:fb:7d:8d:
0f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:35:A7:0D:CA:03:FD:F2:6C:23:48:C6:D6:2C:EA:F0:AF:32:76:0E
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/3134362e31392e3136372e302f32342d3234203d3e20313532363732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.167.0/24
Signature Algorithm: sha256WithRSAEncryption
85:00:44:72:4b:b6:df:2c:8b:e0:f1:fd:04:b5:a9:14:6f:00:
11:88:e5:9e:de:2f:85:6f:62:e9:8f:66:96:6c:5a:da:de:45:
86:9d:25:8d:84:33:2a:4a:29:3e:8c:fa:b3:42:87:07:08:d7:
09:ae:2b:da:71:53:df:63:23:57:eb:57:2a:46:fc:72:65:f0:
49:05:50:bc:bb:4c:62:48:7d:3b:ff:be:59:98:64:9f:84:c3:
4c:67:1a:38:6a:d1:17:7a:87:ad:2c:63:67:27:14:2c:20:1d:
77:e8:a5:f0:61:b4:6a:53:c1:10:cb:79:13:e9:d4:bd:9e:3d:
37:16:60:53:be:f9:59:60:a6:a5:b3:18:cd:77:d0:65:23:22:
db:f4:c9:68:ba:31:34:7b:28:1c:9b:06:34:7b:7c:4c:59:e9:
d7:6b:72:61:0a:c4:dd:d2:7f:4a:31:94:86:cb:52:f0:55:63:
e6:1d:20:fc:f7:60:f1:86:0a:38:c0:b7:36:ab:56:2d:4d:78:
0d:61:c3:fa:b8:87:bb:c9:8d:c4:35:bd:47:9f:8b:07:73:86:
89:aa:91:79:3e:45:9f:9a:e7:f5:83:59:6c:f7:fc:39:05:a6:
13:c1:2c:d2:82:7d:ba:db:e8:04:84:2f:09:3e:77:35:0e:dc:
a0:71:6b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:47:14 2026 by rpki-client