Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139342e33342e3235352e302f32342d3234203d3e20313431393638.roa
File: 3139342e33342e3235352e302f32342d3234203d3e20313431393638.roa (raw, json)
Hash identifier: UaW07UBNrgMmd4woNB5LOC9gCF0XD9b1GvhPJvMkF/k=
Subject key identifier: A8:FD:E0:CF:F6:0A:FE:0D:94:6E:05:B2:51:2D:7D:7E:B3:FD:AE:97
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 56FB4DE896427EF1C35275C1BCFAC9E70086566D
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139342e33342e3235352e302f32342d3234203d3e20313431393638.roa
Signing time: Fri 25 Sep 2026 14:49:35 +0000
ROA not before: Fri 25 Sep 2026 14:44:35 +0000
ROA not after: Fri 24 Sep 2027 14:49:35 +0000
asID: 141968
IP address blocks: 194.34.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:fb:4d:e8:96:42:7e:f1:c3:52:75:c1:bc:fa:c9:e7:00:86:56:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: Sep 25 14:44:35 2026 GMT
Not After : Sep 24 14:49:35 2027 GMT
Subject: CN=A8FDE0CFF60AFE0D946E05B2512D7D7EB3FDAE97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:81:bf:11:48:78:de:f5:0a:94:c1:d4:31:aa:
87:8c:9b:83:00:ec:4f:f5:ce:be:bb:47:c7:55:f0:
a3:95:56:9e:95:61:88:99:bc:1b:c8:46:8b:fb:e3:
a7:19:9b:80:da:99:38:1b:63:54:c5:82:50:d1:0d:
bc:91:a7:7c:c4:96:f6:3c:ee:66:d5:3d:9f:fd:fd:
7d:db:3e:bb:35:62:9a:22:5c:53:14:b2:8f:90:4e:
7d:4b:86:b5:cc:4e:2a:07:f2:ed:3b:83:5d:41:67:
35:12:53:ce:c9:5b:a7:6e:d7:fa:88:75:4f:7b:11:
b0:9a:87:21:85:14:9f:80:92:7a:31:3e:1e:0e:82:
fc:18:96:ad:9c:9a:42:81:e5:53:40:4e:87:43:6d:
69:53:f6:a6:15:d9:49:c0:2f:c5:eb:d9:8c:fb:b6:
bf:1b:e9:42:2f:0a:93:bf:56:3c:73:d3:18:d9:db:
f9:3d:1d:6e:77:f6:63:02:24:8c:a8:7f:2f:94:f6:
21:78:18:ec:06:7d:45:4f:71:c0:f6:6b:6a:af:e9:
c2:78:38:50:e0:32:0e:74:a8:80:96:1e:7a:cb:77:
5e:88:a1:0b:39:a8:de:df:6c:37:33:14:2a:40:48:
c7:8d:b7:9e:3f:b7:e9:87:28:82:43:92:3e:d9:03:
70:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:FD:E0:CF:F6:0A:FE:0D:94:6E:05:B2:51:2D:7D:7E:B3:FD:AE:97
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139342e33342e3235352e302f32342d3234203d3e20313431393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.34.255.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:68:80:46:97:48:07:26:e8:b2:39:af:cb:6e:45:2a:b1:e8:
4f:b6:49:a6:d3:37:3b:a6:a7:7a:c9:51:5b:33:f6:7e:da:90:
c5:df:95:9c:3a:b6:77:ac:7f:ab:26:81:94:29:4b:96:5d:52:
d3:19:d5:ef:67:68:f9:f3:45:cf:14:e8:53:bb:97:5d:73:a6:
2b:51:0d:56:f4:29:13:a2:3b:0c:ec:93:52:3d:6c:f3:24:1d:
dd:91:e3:f9:f0:b6:81:86:b4:b5:cb:f1:e4:0d:41:98:9e:e2:
06:f9:e1:01:38:33:fd:9c:9a:95:b2:86:b6:5c:00:f5:8d:08:
2d:50:1e:4c:ca:4d:26:35:df:76:0d:34:e5:6b:26:dd:c8:ac:
fb:5b:65:48:de:0c:6c:b6:f1:97:9a:76:90:df:5b:99:f5:74:
56:05:b8:78:fe:fd:6b:94:7c:bb:2f:47:a9:20:95:04:17:da:
80:3e:5c:d8:f9:9a:d5:62:8d:00:b8:50:76:39:6a:57:f3:98:
60:d6:e7:cf:56:be:70:df:8a:ff:73:00:0c:f4:54:b0:5d:64:
37:57:47:54:86:d7:1d:9d:66:7b:6a:1a:8f:41:b9:45:7d:33:
00:6f:21:29:f9:96:7b:3c:b7:99:a8:c1:ab:4d:47:43:2a:6a:
5b:12:b7:50
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUVvtN6JZCfvHDUnXBvPrJ5wCGVm0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGQ3ZmZhZTMwMGRlZjA4NzZiZjg0ODkwZmI2ZWExN2Jl
ODQxYTRkMzAeFw0yNjA5MjUxNDQ0MzVaFw0yNzA5MjQxNDQ5MzVaMDMxMTAvBgNV
BAMTKEE4RkRFMENGRjYwQUZFMEQ5NDZFMDVCMjUxMkQ3RDdFQjNGREFFOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSgb8RSHje9QqUwdQxqoeMm4MA
7E/1zr67R8dV8KOVVp6VYYiZvBvIRov746cZm4DamTgbY1TFglDRDbyRp3zElvY8
7mbVPZ/9/X3bPrs1YpoiXFMUso+QTn1LhrXMTioH8u07g11BZzUSU87JW6du1/qI
dU97EbCahyGFFJ+AknoxPh4OgvwYlq2cmkKB5VNATodDbWlT9qYV2UnAL8Xr2Yz7
tr8b6UIvCpO/Vjxz0xjZ2/k9HW539mMCJIyofy+U9iF4GOwGfUVPccD2a2qv6cJ4
OFDgMg50qICWHnrLd16IoQs5qN7fbDczFCpASMeNt54/t+mHKIJDkj7ZA3DRAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUqP3gz/YK/g2UbgWyUS19frP9rpcwHwYDVR0j
BBgwFoAUDX/64wDe8Idr+EiQ+26he+hBpNMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODExM2RkYTYtN2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4
Y2ExLzEvMEQ3RkZBRTMwMERFRjA4NzZCRjg0ODkwRkI2RUExN0JFODQxQTREMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RYXzY0d0RlOElkci1FaVEtMjZoZS1o
QnBOTS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODExM2RkYTYt
N2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4Y2ExLzEvMzEzOTM0MmUzMzM0MmUzMjM1
MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzOTM2Mzgucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADCIv8wDQYJKoZIhvcNAQELBQADggEBAKRogEaXSAcm6LI5r8tuRSqx6E+2SabT
Nzump3rJUVsz9n7akMXflZw6tnesf6smgZQpS5ZdUtMZ1e9naPnzRc8U6FO7l11z
pitRDVb0KROiOwzsk1I9bPMkHd2R4/nwtoGGtLXL8eQNQZie4gb54QE4M/2cmpWy
hrZcAPWNCC1QHkzKTSY133YNNOVrJt3IrPtbZUjeDGy28ZeadpDfW5n1dFYFuHj+
/WuUfLsvR6kglQQX2oA+XNj5mtVijQC4UHY5alfzmGDW589WvnDfiv9zAAz0VLBd
ZDdXR1SG1x2dZntqGo9BuUV9MwBvISn5lns8t5mowatNR0MqalsSt1A=
-----END CERTIFICATE-----
Generated at Mon Sep 28 21:19:20 2026 by rpki-client