Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/3139332e32322e3235332e302f32342d3234203d3e203331313834.roa
File: 3139332e32322e3235332e302f32342d3234203d3e203331313834.roa (raw, json)
Hash identifier: dle7TOY5qR1v+dBegXLBchLz5ktliGdr7QiAJ0BFI6Y=
Subject key identifier: 66:D3:D9:53:82:C7:43:27:A2:B9:A0:43:4D:95:DC:66:11:53:16:8A
Certificate issuer: /CN=72f3ee169f9bd71f78a42d1a72fe0f2a824822d1
Certificate serial: 6A8ACC1611F032529A8D408B0C66A6862FE9917D
Authority key identifier: 72:F3:EE:16:9F:9B:D7:1F:78:A4:2D:1A:72:FE:0F:2A:82:48:22:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvPuFp-b1x94pC0acv4PKoJIItE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/3139332e32322e3235332e302f32342d3234203d3e203331313834.roa
Signing time: Wed 01 Apr 2026 10:20:20 +0000
ROA not before: Wed 01 Apr 2026 10:15:20 +0000
ROA not after: Wed 31 Mar 2027 10:20:20 +0000
asID: 31184
IP address blocks: 193.22.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.crl
rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft
rsync://rpki.ripe.net/repository/DEFAULT/cvPuFp-b1x94pC0acv4PKoJIItE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 20:48:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:8a:cc:16:11:f0:32:52:9a:8d:40:8b:0c:66:a6:86:2f:e9:91:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72f3ee169f9bd71f78a42d1a72fe0f2a824822d1
Validity
Not Before: Apr 1 10:15:20 2026 GMT
Not After : Mar 31 10:20:20 2027 GMT
Subject: CN=66D3D95382C74327A2B9A0434D95DC661153168A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:86:dd:42:28:81:c2:54:72:94:05:53:51:2d:
39:4c:9e:18:32:1a:3f:14:52:46:43:4f:93:9d:45:
a6:74:97:2b:0a:76:b5:00:c4:18:d8:b3:75:b9:d4:
54:e9:ea:a6:24:c5:a7:a9:e0:d6:39:ac:34:0d:7a:
d5:fd:f3:8c:c8:e1:5c:0e:7d:a6:23:28:0c:db:ea:
90:52:bf:a8:98:08:e7:cc:77:e2:a7:74:f3:18:a5:
6c:9c:eb:6a:6c:95:dc:67:05:96:21:2b:6d:99:84:
c2:46:57:ba:66:90:61:f0:70:1a:60:7c:dd:5c:9b:
84:3f:4a:72:42:06:30:5e:da:6e:36:ff:b4:15:b5:
3d:a4:8a:48:d8:64:bf:f1:9c:c8:59:d7:c9:52:23:
35:d9:04:f3:e8:4b:2e:34:3c:ca:73:e6:0a:c0:de:
d8:f1:57:cf:f8:83:87:f9:0c:48:c5:53:9f:6b:e1:
9b:8b:6a:8e:c3:9b:02:6d:ae:5e:52:ec:55:d7:b4:
a7:94:81:9f:4b:bc:0a:53:13:30:ce:35:69:8f:2c:
27:0e:a9:e6:80:79:d2:b4:bf:ab:cc:01:40:43:4a:
e0:4f:81:0a:8c:17:c3:d1:b1:e2:fd:b0:9d:27:8c:
dd:61:0c:5a:5e:cb:98:c8:a5:5f:15:6e:a2:b6:9f:
07:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D3:D9:53:82:C7:43:27:A2:B9:A0:43:4D:95:DC:66:11:53:16:8A
X509v3 Authority Key Identifier:
keyid:72:F3:EE:16:9F:9B:D7:1F:78:A4:2D:1A:72:FE:0F:2A:82:48:22:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvPuFp-b1x94pC0acv4PKoJIItE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/3139332e32322e3235332e302f32342d3234203d3e203331313834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.253.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:a5:2a:d7:80:80:aa:30:d3:50:18:8e:e9:4b:23:5c:8b:99:
0d:08:41:6e:96:99:73:de:f3:73:42:06:23:7f:fe:62:ba:30:
c7:1f:d8:75:07:c1:cc:13:6e:41:ee:55:e3:71:40:ba:2e:7c:
10:b4:83:dd:d2:56:14:1e:c5:80:51:ed:2b:8d:42:78:6e:1f:
fa:a2:39:41:92:fb:25:ac:d5:46:43:0a:3e:c9:d6:67:3e:19:
51:87:41:91:c1:4a:c2:45:f7:90:ed:a1:9d:63:a5:1c:ea:d1:
aa:42:1d:71:fc:36:4e:f6:25:d0:e1:38:76:6d:a8:77:b0:b1:
8e:4d:13:6b:a4:a6:15:d3:e9:0c:5b:86:7e:d9:9d:6c:73:80:
ca:cd:23:8f:4e:00:46:c9:98:d7:f1:61:b3:5f:52:1f:3f:22:
4e:ca:f7:29:41:55:93:0a:ff:eb:eb:70:83:85:5c:dd:cf:55:
3c:c4:60:47:62:80:6d:6a:17:40:14:9b:87:3b:60:03:aa:89:
26:06:ae:15:05:f6:60:6c:df:9c:65:a2:9f:cb:7f:6e:bd:74:
4a:6c:90:a8:ea:98:af:eb:e7:e6:a5:90:99:e9:aa:3e:81:7b:
d7:2d:c4:af:9a:82:f8:3f:23:b9:96:44:47:3e:85:98:6c:e6:
e2:3e:79:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:21:51 2026 by rpki-client