Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/3139342e33312e3139372e302f32342d3234203d3e20383334.roa
File: 3139342e33312e3139372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 5xlOHrC9cQ2pMdiC9jU0zHtgYmHcu7FKSMzeO+SOiwQ=
Subject key identifier: 30:38:4F:72:44:FD:91:11:D6:7F:A1:86:D5:3F:FF:02:D5:E8:27:28
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 48E0BE8F095D94F4C3746C45F4776283DB40DAFA
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/3139342e33312e3139372e302f32342d3234203d3e20383334.roa
Signing time: Sun 20 Sep 2026 00:04:59 +0000
ROA not before: Sat 19 Sep 2026 23:59:59 +0000
ROA not after: Sun 19 Sep 2027 00:04:59 +0000
asID: 834
IP address blocks: 194.31.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 00:40:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:e0:be:8f:09:5d:94:f4:c3:74:6c:45:f4:77:62:83:db:40:da:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Sep 19 23:59:59 2026 GMT
Not After : Sep 19 00:04:59 2027 GMT
Subject: CN=30384F7244FD9111D67FA186D53FFF02D5E82728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:bd:0a:f5:df:03:dd:e3:a7:d1:b2:84:b5:df:
8e:20:06:9e:23:c0:59:29:fc:79:9c:db:25:5a:0b:
cb:4e:47:d7:da:e6:3e:ef:6e:1f:c7:0d:80:e1:a1:
56:55:0e:87:a0:d7:e6:cc:62:37:c3:46:2e:84:53:
ba:55:46:04:da:25:81:ec:a9:f3:8d:73:08:32:c0:
e1:d5:4d:5d:c9:27:3d:17:b0:15:44:61:7f:fb:f7:
9f:c3:e9:bb:0e:a6:72:fc:0b:94:7c:02:a8:4c:d1:
62:c6:8a:78:bb:9b:4e:47:03:5d:4a:1f:73:8e:be:
30:14:71:0b:db:82:d9:4f:cf:91:69:40:2d:e4:42:
ad:de:8c:88:15:2d:fb:a9:09:a7:3d:4f:6b:5f:bf:
f8:c0:b1:84:d8:60:52:d7:4d:20:dc:f4:7e:ed:bc:
86:8d:b7:4b:14:ba:31:18:08:8e:65:0f:ec:59:f8:
3a:45:fa:23:31:15:d0:b9:7b:bb:f6:0e:af:28:67:
36:22:80:3d:f9:f3:9d:0b:61:cd:cd:d6:f2:01:07:
39:69:bd:fa:6b:d5:a6:11:cf:f1:8c:74:96:1d:92:
db:29:d9:35:5f:bf:00:88:bb:28:94:50:46:6e:f8:
6c:30:79:67:1b:bc:16:83:aa:3b:a2:9a:fc:80:51:
10:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:38:4F:72:44:FD:91:11:D6:7F:A1:86:D5:3F:FF:02:D5:E8:27:28
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/3139342e33312e3139372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.197.0/24
Signature Algorithm: sha256WithRSAEncryption
12:f1:a7:c1:b4:3b:09:b8:4f:ed:fc:25:72:7e:78:4d:14:d0:
2c:92:f0:fe:81:5b:f9:4f:63:76:1c:5f:a4:83:ad:20:40:f3:
db:f7:7c:98:45:9c:ad:dd:a0:f6:40:f6:24:73:6d:50:9d:16:
a7:c7:10:3c:66:9c:c8:ab:5c:f7:e7:34:4f:a2:24:4c:dd:e3:
e1:5e:f8:a7:8e:fd:9c:1a:55:40:94:42:db:ca:ab:8d:3e:ee:
b5:b9:f1:64:7c:21:16:d0:11:a0:ea:ef:55:62:cb:59:56:1b:
70:6f:b4:84:b4:c6:f3:a5:ea:96:de:78:fe:e6:02:d8:db:e0:
78:3c:1a:0e:6d:d9:54:36:e9:79:a6:d8:ac:f2:77:c5:66:4b:
c6:8a:38:59:ea:3b:32:9b:6f:55:ff:ea:0d:80:af:ad:53:34:
17:e9:56:35:65:b2:41:cd:c2:67:39:81:e7:b4:be:6c:cb:9f:
77:03:10:44:b8:5b:bf:96:24:4f:28:d3:d4:ce:15:01:a1:c8:
fe:c5:80:3d:d8:7f:c6:3a:68:fc:6f:d7:b4:78:83:a7:1b:44:
29:61:78:e6:f7:22:9c:d5:7e:45:7c:54:6d:79:78:33:2e:2d:
24:34:52:31:97:d2:c2:8e:af:d5:71:29:ce:bc:1e:2a:a6:ac:
a8:4e:30:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:43:50 2026 by rpki-client