Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/3139342e3234362e33372e302f32342d3234203d3e203235313938.roa
File: 3139342e3234362e33372e302f32342d3234203d3e203235313938.roa (raw, json)
Hash identifier: Fa75HL0g7mwPOm6axvV9gTAwKUiL6a2tsS8pBgfWikk=
Subject key identifier: 79:54:31:D7:FC:30:84:CC:66:96:68:36:12:A8:D4:9E:B7:A8:AB:1F
Certificate issuer: /CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b
Certificate serial: 217680070ADCCD73577564B801C4E6D3A8665A0A
Authority key identifier: ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/3139342e3234362e33372e302f32342d3234203d3e203235313938.roa
Signing time: Sat 25 Jul 2026 12:51:39 +0000
ROA not before: Sat 25 Jul 2026 12:46:39 +0000
ROA not after: Sat 24 Jul 2027 12:51:39 +0000
asID: 25198
IP address blocks: 194.246.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl
rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:76:80:07:0a:dc:cd:73:57:75:64:b8:01:c4:e6:d3:a8:66:5a:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b
Validity
Not Before: Jul 25 12:46:39 2026 GMT
Not After : Jul 24 12:51:39 2027 GMT
Subject: CN=795431D7FC3084CC6696683612A8D49EB7A8AB1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8c:58:06:80:a2:88:c3:f0:27:4f:09:3e:c2:
3d:b1:07:ef:52:52:e2:e3:3a:be:02:60:2b:14:8a:
16:e6:35:2e:da:df:92:74:b8:ad:dc:72:c8:67:38:
aa:5c:84:8d:ed:a2:4e:0f:d2:28:c1:86:23:24:03:
eb:89:1a:d2:4a:a4:c5:06:38:6b:60:ec:41:c9:55:
3d:0b:fd:da:d6:6e:d5:f2:95:ca:e9:4a:fa:89:19:
4f:7c:3b:83:1a:b1:29:46:73:b4:a5:72:d2:29:53:
03:61:e2:2c:98:58:07:73:3e:5d:a0:29:82:80:92:
13:ae:68:d3:e3:60:d5:e5:41:93:4f:8b:48:65:a4:
1b:0b:8e:63:b7:0c:1d:08:57:a6:6a:89:8f:33:81:
e6:32:c7:47:2c:32:8f:53:0a:90:6b:55:8e:a7:47:
53:a5:78:61:49:d0:2c:ab:dd:c4:f9:13:fe:3d:9a:
0d:2b:09:a3:0b:2c:12:3f:40:9e:2b:a5:85:06:0e:
c2:9b:25:92:0c:6e:5a:49:5e:af:3a:26:c0:d9:d2:
69:79:44:91:8a:a3:d2:c1:c6:29:ba:31:e8:b7:d0:
85:73:a3:3e:ac:d6:fd:77:af:e7:69:e9:74:62:a7:
9c:cc:14:0b:c5:54:aa:30:ff:30:43:58:40:4c:12:
1a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:54:31:D7:FC:30:84:CC:66:96:68:36:12:A8:D4:9E:B7:A8:AB:1F
X509v3 Authority Key Identifier:
keyid:ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/3139342e3234362e33372e302f32342d3234203d3e203235313938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.246.37.0/24
Signature Algorithm: sha256WithRSAEncryption
55:40:76:f1:a8:08:db:e6:a9:ed:bc:4a:46:65:70:eb:cc:35:
b4:29:5d:a9:5e:74:f9:6c:fd:74:07:ec:8f:99:0c:0f:bc:4d:
4c:c0:ed:46:31:0b:c0:0a:5a:35:54:86:df:34:55:29:ae:5a:
fe:d8:24:e8:92:39:f6:a8:07:cd:b2:d0:b4:b2:f8:b5:a7:b0:
4f:83:88:46:2b:6a:3e:9c:95:49:19:b0:4e:ba:f2:9f:b9:2f:
da:17:04:c6:1e:91:e6:b7:bf:a5:5c:54:76:c4:06:b0:3b:46:
84:03:50:f2:a7:8a:47:13:f1:3d:84:30:b1:ce:aa:5f:2f:d1:
fc:d3:c2:34:d8:80:e2:86:57:31:39:01:64:39:c1:d2:d1:b7:
6b:f5:8c:f3:9b:13:62:33:b6:0c:2b:7d:70:f7:aa:17:5c:64:
1d:13:e5:ad:91:b7:b6:3f:e0:60:4c:5f:f3:f2:fe:61:72:65:
6d:7c:8f:22:14:15:f4:7c:5b:9b:1a:21:f0:17:1d:27:cd:fe:
e9:22:22:66:8f:78:2b:29:9d:73:07:19:7d:4d:de:a3:d7:29:
8c:08:15:67:31:0d:fc:50:c9:54:87:92:ec:40:c8:ae:78:58:
03:8f:ae:61:bf:58:f6:a8:57:27:c7:95:96:7f:78:72:db:0e:
f6:8b:d9:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:05:06 2026 by rpki-client