Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/3139342e33312e3139362e302f32342d3234203d3e20313939373337.roa
File: 3139342e33312e3139362e302f32342d3234203d3e20313939373337.roa (raw, json)
Hash identifier: qc608O9yB+6tqsDBDhoINI3nGVPIPfhQ49+yA4p+itg=
Subject key identifier: D7:B0:1A:E5:8C:A6:84:D8:98:D5:39:85:36:EB:B1:D6:D2:79:40:F1
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 60A3B5CD540D3EBB4DC08D102A7F05FF025CCB8F
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/3139342e33312e3139362e302f32342d3234203d3e20313939373337.roa
Signing time: Wed 01 Apr 2026 11:46:57 +0000
ROA not before: Wed 01 Apr 2026 11:41:57 +0000
ROA not after: Wed 31 Mar 2027 11:46:57 +0000
asID: 199737
IP address blocks: 194.31.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:07:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:a3:b5:cd:54:0d:3e:bb:4d:c0:8d:10:2a:7f:05:ff:02:5c:cb:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Apr 1 11:41:57 2026 GMT
Not After : Mar 31 11:46:57 2027 GMT
Subject: CN=D7B01AE58CA684D898D5398536EBB1D6D27940F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:1f:e6:6a:08:6a:0a:dd:43:43:81:94:36:4d:
3d:ca:73:67:ba:7c:28:18:7f:cd:ab:77:3e:55:06:
c3:94:76:e4:c6:0c:b3:f5:7c:7d:ee:e2:ab:e1:1f:
6d:2e:b8:8b:fc:d8:28:b0:f1:86:bf:d3:51:6d:84:
e3:4b:7a:f4:cb:4a:9c:39:4c:f4:e0:af:de:21:ed:
d5:66:87:0b:1c:f2:ac:90:a8:a1:d8:0e:f3:84:29:
77:41:2b:65:05:e9:d8:67:80:db:08:3e:76:6b:66:
98:d3:f5:36:17:df:7b:58:12:c0:47:f5:2f:a7:19:
49:55:79:b2:5b:8e:47:51:32:ff:97:ac:00:6f:a5:
56:56:b6:a8:4c:56:f1:03:70:64:51:64:3a:50:86:
8b:be:fc:37:4d:7d:a7:92:a4:6f:20:08:47:a0:9c:
9c:21:3d:f5:3b:09:ec:80:ca:d1:81:a3:70:09:7d:
81:b9:5a:ed:ef:09:72:16:04:02:51:52:c2:b1:5c:
4f:9d:28:0a:b3:3d:77:be:73:12:ff:ae:c1:73:0c:
71:e5:b7:72:07:08:a7:82:1e:2e:35:c4:13:37:14:
46:50:de:94:29:c4:a0:47:72:4e:d9:8b:92:92:75:
b8:6b:8b:a0:4b:33:15:ee:87:a7:5d:02:d9:bb:66:
a3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:B0:1A:E5:8C:A6:84:D8:98:D5:39:85:36:EB:B1:D6:D2:79:40:F1
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/3139342e33312e3139362e302f32342d3234203d3e20313939373337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.196.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:59:bb:4f:bb:eb:c5:9c:5d:a6:41:ff:0d:b4:38:56:a8:6c:
3e:7f:de:f0:f2:4c:48:a9:7c:ac:86:6b:d3:ef:e9:af:c3:a2:
0f:e6:e7:6d:c9:c1:25:ff:0f:89:6b:97:2b:14:7f:39:14:79:
f7:c2:41:f0:48:b7:06:d5:3b:3f:5e:f6:51:0a:8f:ad:c0:11:
67:39:d6:78:8d:ca:8e:97:12:53:da:09:d5:2b:4a:ec:57:7d:
a6:17:3c:c9:78:6e:0c:73:7a:e1:bb:2e:f7:59:79:9b:2a:f4:
1e:49:8a:ea:56:9b:86:fc:98:92:18:c2:f1:40:53:8b:c9:bc:
2d:e7:b6:c0:59:1f:27:c2:5a:cd:b0:43:19:42:a0:e8:7c:c1:
62:84:da:24:c1:81:60:c1:54:d7:ab:9b:73:c7:b6:a8:2d:40:
09:a6:64:2b:aa:70:00:95:6c:b8:f1:b5:57:03:a0:a3:bf:d1:
13:5b:16:f7:7c:f4:57:3f:77:f7:a1:25:75:48:b6:65:47:37:
fa:c0:23:9b:a2:07:e1:d5:a1:ed:93:9e:a4:e8:3d:fa:89:4f:
59:e3:6b:75:4b:0a:5e:f4:9f:5a:ba:06:6e:fa:77:7a:69:c3:
da:1b:20:a3:bc:04:52:ad:f3:00:15:24:a3:30:f0:19:5d:02:
b4:7a:e4:f3
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUYKO1zVQNPrtNwI0QKn8F/wJcy48wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTk0MjBlNmM2ZjI0YjBlNDIyZGE3ZmU3ZTQyMGVmNTAz
NTRmNDVjNjAeFw0yNjA0MDExMTQxNTdaFw0yNzAzMzExMTQ2NTdaMDMxMTAvBgNV
BAMTKEQ3QjAxQUU1OENBNjg0RDg5OEQ1Mzk4NTM2RUJCMUQ2RDI3OTQwRjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyH+ZqCGoK3UNDgZQ2TT3Kc2e6
fCgYf82rdz5VBsOUduTGDLP1fH3u4qvhH20uuIv82Ciw8Ya/01FthONLevTLSpw5
TPTgr94h7dVmhwsc8qyQqKHYDvOEKXdBK2UF6dhngNsIPnZrZpjT9TYX33tYEsBH
9S+nGUlVebJbjkdRMv+XrABvpVZWtqhMVvEDcGRRZDpQhou+/DdNfaeSpG8gCEeg
nJwhPfU7CeyAytGBo3AJfYG5Wu3vCXIWBAJRUsKxXE+dKAqzPXe+cxL/rsFzDHHl
t3IHCKeCHi41xBM3FEZQ3pQpxKBHck7Zi5KSdbhri6BLMxXuh6ddAtm7ZqPbAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQU17Aa5YymhNiY1TmFNuux1tJ5QPEwHwYDVR0j
BBgwFoAUqUIObG8ksOQi2n/n5CDvUDVPRcYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWY5ODIzZDAtMDg1NS00MWYyLWFjNDYtNTlhMmU5OGRh
NzM2LzEvQTk0MjBFNkM2RjI0QjBFNDIyREE3RkU3RTQyMEVGNTAzNTRGNDVDNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FVSU9iRzhrc09RaTJuX241Q0R2VURW
UFJjWS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMWY5ODIzZDAt
MDg1NS00MWYyLWFjNDYtNTlhMmU5OGRhNzM2LzEvMzEzOTM0MmUzMzMxMmUzMTM5
MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM5MzkzNzMzMzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADCH8QwDQYJKoZIhvcNAQELBQADggEBAJ5Zu0+768WcXaZB/w20OFaobD5/3vDy
TEipfKyGa9Pv6a/Dog/m523JwSX/D4lrlysUfzkUeffCQfBItwbVOz9e9lEKj63A
EWc51niNyo6XElPaCdUrSuxXfaYXPMl4bgxzeuG7LvdZeZsq9B5JiupWm4b8mJIY
wvFAU4vJvC3ntsBZHyfCWs2wQxlCoOh8wWKE2iTBgWDBVNerm3PHtqgtQAmmZCuq
cACVbLjxtVcDoKO/0RNbFvd89Fc/d/ehJXVItmVHN/rAI5uiB+HVoe2TnqToPfqJ
T1nja3VLCl70n1q6Bm76d3ppw9obIKO8BFKt8wAVJKMw8BldArR65PM=
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:43:53 2026 by rpki-client