Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/4/3139332e3130362e36352e302f32342d3234203d3e203630383630.roa
File: 3139332e3130362e36352e302f32342d3234203d3e203630383630.roa (raw, json)
Hash identifier: fqNRaoLtdl8BsIrfiu4PvyRr6AhuFheEHGA8K066NQ0=
Subject key identifier: 35:FD:4F:57:B5:D4:44:54:4A:59:D6:CC:C6:B6:51:4A:C1:08:08:46
Certificate issuer: /CN=d18f31b98ed35ec23be81c3fffefd1a354dad96a
Certificate serial: 4AB404C7AF474730651ABD29E0946436EEC207D3
Authority key identifier: D1:8F:31:B9:8E:D3:5E:C2:3B:E8:1C:3F:FF:EF:D1:A3:54:DA:D9:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Y8xuY7TXsI76Bw__-_Ro1Ta2Wo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/4/3139332e3130362e36352e302f32342d3234203d3e203630383630.roa
Signing time: Thu 12 Feb 2026 19:49:22 +0000
ROA not before: Thu 12 Feb 2026 19:44:22 +0000
ROA not after: Thu 11 Feb 2027 19:49:22 +0000
asID: 60860
IP address blocks: 193.106.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/4/D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.crl
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/4/D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Y8xuY7TXsI76Bw__-_Ro1Ta2Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:b4:04:c7:af:47:47:30:65:1a:bd:29:e0:94:64:36:ee:c2:07:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d18f31b98ed35ec23be81c3fffefd1a354dad96a
Validity
Not Before: Feb 12 19:44:22 2026 GMT
Not After : Feb 11 19:49:22 2027 GMT
Subject: CN=35FD4F57B5D444544A59D6CCC6B6514AC1080846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7d:af:1d:aa:e3:3a:84:15:3a:1b:32:be:fe:
d1:0e:c0:5c:78:0a:5f:5b:b4:8e:0c:b6:ad:4f:f2:
7f:56:b1:7d:c4:bf:07:35:20:ca:b4:ce:27:d0:07:
da:43:02:a5:21:15:76:d8:e5:24:90:0b:40:4c:b6:
c3:b1:8f:8b:18:10:4e:1b:35:85:2d:4b:0b:ed:01:
6f:2f:37:22:f1:d3:87:d3:0b:54:3c:56:47:c4:60:
36:f6:d5:7e:8f:de:c4:b6:39:53:23:17:0c:ac:98:
52:88:d1:ee:ce:8f:17:36:43:07:a2:27:b0:7f:50:
fe:2c:02:52:8e:81:05:f6:df:11:00:29:0a:08:78:
8c:3c:a1:ff:5a:63:b9:7a:22:f8:ba:2b:93:8d:5c:
45:1e:1d:48:3d:92:86:3f:ee:bf:be:c5:cc:8e:58:
37:aa:80:4a:bd:e3:73:8d:6a:32:ee:87:5c:0f:5d:
8a:74:37:8a:ab:0d:2a:bd:58:b5:52:a0:e7:49:6e:
83:ba:81:c0:a6:20:4d:d0:f1:76:6e:a3:c5:ae:6a:
23:b9:63:a9:85:54:7e:4c:19:05:af:49:07:da:87:
2a:19:7d:69:29:bc:12:bd:d2:fb:3c:db:56:58:2c:
2b:0e:96:1d:81:42:76:9f:70:a5:08:65:6f:2a:aa:
bc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:FD:4F:57:B5:D4:44:54:4A:59:D6:CC:C6:B6:51:4A:C1:08:08:46
X509v3 Authority Key Identifier:
keyid:D1:8F:31:B9:8E:D3:5E:C2:3B:E8:1C:3F:FF:EF:D1:A3:54:DA:D9:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/4/D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Y8xuY7TXsI76Bw__-_Ro1Ta2Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/4/3139332e3130362e36352e302f32342d3234203d3e203630383630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.65.0/24
Signature Algorithm: sha256WithRSAEncryption
24:03:ba:8f:19:89:3d:ad:c9:3c:c7:f1:2b:5c:02:30:59:be:
54:fd:24:b2:4f:a2:0d:0c:eb:31:04:f9:ea:8f:32:17:54:2a:
6d:dc:6d:78:9e:98:87:ac:de:ac:13:d8:37:25:ad:90:9f:1b:
62:b4:08:98:b0:1b:10:35:0a:93:bc:dc:9f:a3:cc:25:68:af:
8a:ab:89:92:df:94:25:59:c7:2c:e5:2b:06:82:c4:80:92:ba:
01:9a:b4:5d:f9:be:da:e8:ab:02:e6:c1:c1:16:dc:ac:c7:e2:
36:53:5a:96:10:db:ee:91:91:d9:d7:ec:57:9e:90:a6:3d:56:
9a:d1:09:52:86:e5:e8:40:c4:23:25:88:20:f6:37:a7:6b:e7:
93:96:f7:bb:40:21:f8:74:64:63:84:74:27:a1:5d:9f:d3:4c:
15:3d:2c:bb:56:0f:92:d6:1d:ce:b1:51:8d:d5:f1:33:c6:41:
1c:cb:aa:ae:3d:a2:b6:c4:45:3a:7b:93:53:d1:2b:7d:69:40:
99:b5:7b:20:74:05:e4:32:03:06:c1:08:07:83:da:36:30:d7:
2a:41:92:0d:c2:82:11:b4:c9:1b:c8:c7:e4:25:6f:42:30:c3:
a9:66:80:57:b2:8f:c2:7f:fc:b2:ca:9c:6c:f0:60:46:05:d4:
88:18:27:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:30:09 2026 by rpki-client