Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/3/3139332e3130372e38322e302f32342d3234203d3e203630383630.roa
File: 3139332e3130372e38322e302f32342d3234203d3e203630383630.roa (raw, json)
Hash identifier: x3oBjxqc7sXsiScFg8HANPn6SPGL7AD0sdvQlu75w7g=
Subject key identifier: E5:C3:12:B7:6A:9A:72:AD:AA:BA:1B:B4:0C:05:29:5A:C0:81:BE:C6
Certificate issuer: /CN=e0ebc3e188e35d38bc8dcc686ca276c65d6da2af
Certificate serial: 4E270C9A031CD3541A11F0C7191D0AEFD189BAB2
Authority key identifier: E0:EB:C3:E1:88:E3:5D:38:BC:8D:CC:68:6C:A2:76:C6:5D:6D:A2:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4OvD4YjjXTi8jcxobKJ2xl1toq8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/3/3139332e3130372e38322e302f32342d3234203d3e203630383630.roa
Signing time: Thu 12 Feb 2026 19:47:36 +0000
ROA not before: Thu 12 Feb 2026 19:42:36 +0000
ROA not after: Thu 11 Feb 2027 19:47:36 +0000
asID: 60860
IP address blocks: 193.107.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/3/E0EBC3E188E35D38BC8DCC686CA276C65D6DA2AF.crl
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/3/E0EBC3E188E35D38BC8DCC686CA276C65D6DA2AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/4OvD4YjjXTi8jcxobKJ2xl1toq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 03:48:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:27:0c:9a:03:1c:d3:54:1a:11:f0:c7:19:1d:0a:ef:d1:89:ba:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0ebc3e188e35d38bc8dcc686ca276c65d6da2af
Validity
Not Before: Feb 12 19:42:36 2026 GMT
Not After : Feb 11 19:47:36 2027 GMT
Subject: CN=E5C312B76A9A72ADAABA1BB40C05295AC081BEC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cf:a5:f0:6a:01:44:92:5a:97:f3:fa:50:f4:
5e:7f:62:c4:95:7f:e0:e9:79:8a:d8:11:f1:fc:3c:
44:3e:a4:39:5a:06:cf:ed:a0:56:75:9a:0d:a7:c7:
26:0f:64:75:eb:c6:e0:a9:73:3b:d9:6e:e6:60:3a:
d0:c2:79:1c:3f:2c:d0:7b:be:36:a2:52:d3:fb:e7:
74:d1:e0:40:46:f2:35:8d:c2:bd:4a:7f:93:64:1a:
2c:d4:4c:25:90:d9:96:6d:a8:07:39:56:d1:e2:cf:
dd:ee:44:fa:19:1a:b2:d9:11:61:85:67:9a:52:de:
a1:7c:ec:be:41:f9:1b:60:5b:46:d3:fb:65:a6:6d:
ed:4f:f6:d1:6a:d0:57:07:4c:96:b5:92:32:14:85:
fc:40:46:da:e3:0a:0e:ef:8e:71:22:13:25:8f:48:
a1:73:b9:e8:51:c2:10:bf:6e:10:11:9d:46:5b:86:
ea:71:32:af:76:b9:b8:0a:66:c2:b2:5f:66:a3:c5:
48:dd:7d:ea:34:f0:4c:f7:07:e9:bb:b3:2c:05:18:
f4:b0:eb:7a:b3:68:57:b8:2d:27:4f:74:27:db:5d:
49:3d:05:8d:0e:bf:0a:d5:c2:bb:db:9f:72:f4:4c:
f9:03:43:55:d4:1c:f5:50:e5:7a:a9:e1:69:15:da:
33:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C3:12:B7:6A:9A:72:AD:AA:BA:1B:B4:0C:05:29:5A:C0:81:BE:C6
X509v3 Authority Key Identifier:
keyid:E0:EB:C3:E1:88:E3:5D:38:BC:8D:CC:68:6C:A2:76:C6:5D:6D:A2:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/3/E0EBC3E188E35D38BC8DCC686CA276C65D6DA2AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OvD4YjjXTi8jcxobKJ2xl1toq8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/3/3139332e3130372e38322e302f32342d3234203d3e203630383630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.107.82.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:51:2c:fd:cd:94:21:83:13:4b:3d:56:dc:1f:31:47:e4:32:
8b:2e:8d:1d:bb:4e:5e:c5:ed:fb:37:25:33:3b:88:05:b9:63:
82:35:f8:32:5c:73:8e:3e:e4:df:bf:1c:84:1a:49:db:91:b4:
49:52:34:db:25:5f:42:fa:18:b4:f3:43:fb:c0:53:d8:7f:74:
7d:44:25:d9:14:e7:10:84:38:b6:df:4b:bb:0c:69:df:dc:e9:
ee:f2:78:f1:0c:ee:64:1c:90:34:3d:fe:52:5f:29:6a:72:e3:
ad:11:7f:af:1c:02:33:76:62:b1:a5:c0:d8:b0:07:10:4c:c9:
c9:c2:f1:06:be:26:07:fd:a6:69:f9:42:a6:65:66:41:2c:c5:
f0:c2:2a:2f:ce:97:38:41:15:22:62:60:91:92:fe:aa:48:a1:
ac:05:b8:c0:e4:44:79:da:ed:5e:de:f5:69:0d:6c:9e:a6:3a:
2b:ac:f0:3a:d6:56:9f:7e:d8:32:91:0f:19:f8:2d:c9:59:7b:
a3:9d:ec:d8:5c:36:bc:61:03:94:55:3e:20:e5:1b:b3:cd:48:
04:ce:d2:33:1c:82:1c:b9:56:34:38:20:5f:cb:9b:7f:ff:dc:
13:a4:fb:dd:69:0b:33:b0:dc:f1:18:4a:e9:73:ad:2b:b6:4b:
2f:ba:d1:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:13:15 2026 by rpki-client