Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/3134312e39382e34322e302f32342d3234203d3e203432383331.roa
File: 3134312e39382e34322e302f32342d3234203d3e203432383331.roa (raw, json)
Hash identifier: P4AuBQsYLVnrIyTEGNsNBdHkEYx0SPbatkNPI79H8KA=
Subject key identifier: 10:97:B2:E5:32:68:55:23:1C:A9:68:18:F9:BB:D9:92:37:37:13:65
Certificate issuer: /CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810
Certificate serial: 6613E25B231F780C1E9F5FA2FC6D0366BDA0A6F5
Authority key identifier: 7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/3134312e39382e34322e302f32342d3234203d3e203432383331.roa
Signing time: Wed 26 Aug 2026 13:49:30 +0000
ROA not before: Wed 26 Aug 2026 13:44:30 +0000
ROA not after: Wed 25 Aug 2027 13:49:30 +0000
asID: 42831
IP address blocks: 141.98.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl
rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft
rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 22:59:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:13:e2:5b:23:1f:78:0c:1e:9f:5f:a2:fc:6d:03:66:bd:a0:a6:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810
Validity
Not Before: Aug 26 13:44:30 2026 GMT
Not After : Aug 25 13:49:30 2027 GMT
Subject: CN=1097B2E5326855231CA96818F9BBD99237371365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5b:10:3d:6d:23:96:02:59:d5:14:d8:70:13:
02:73:49:c3:5f:a0:eb:76:e3:53:49:69:6a:85:dc:
0f:89:52:1f:2d:bf:2d:b2:ea:ab:03:1b:53:39:f7:
48:36:4f:bf:ef:29:67:71:f1:67:80:0e:52:9a:c9:
1d:a8:09:6d:db:07:13:f1:78:55:72:75:1a:fe:1e:
8b:37:9d:eb:8b:e2:cd:8e:6b:2e:37:c8:48:48:37:
ae:fe:8c:1d:8f:bb:8e:40:21:e5:2d:88:69:d2:2e:
af:43:48:2a:f9:4b:0c:35:93:1c:38:be:5b:9c:24:
10:fb:fa:69:2e:0b:30:93:42:70:4f:3f:c8:72:54:
d4:cf:8a:b6:6e:ad:72:43:16:67:d7:ce:81:cf:02:
c7:f1:82:9a:c6:4f:40:d7:42:14:d3:8f:12:41:3b:
c0:8f:d4:a8:1d:8b:b1:87:c9:be:1d:8c:39:a0:c7:
70:cb:16:71:b0:64:52:6e:19:61:cc:de:fb:24:ca:
df:61:40:62:e0:8e:47:64:1d:61:8a:99:4a:37:40:
00:da:87:e5:40:19:9d:86:5b:28:d8:0a:e5:86:30:
41:5f:f0:bc:c4:54:3e:c9:f4:95:e7:f7:a6:cb:3a:
35:ac:9c:c2:10:fc:30:97:5b:9e:05:16:86:f4:37:
a2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:97:B2:E5:32:68:55:23:1C:A9:68:18:F9:BB:D9:92:37:37:13:65
X509v3 Authority Key Identifier:
keyid:7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/3134312e39382e34322e302f32342d3234203d3e203432383331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.42.0/24
Signature Algorithm: sha256WithRSAEncryption
23:8a:1c:ee:ce:b6:c3:e8:2c:81:2f:61:38:9d:be:2d:72:88:
b4:1f:ac:75:30:8c:9e:66:4d:6e:b0:86:e8:d8:38:ac:e7:18:
16:a0:e0:aa:6b:99:c4:f0:bc:12:8b:ce:97:44:d6:96:aa:2e:
c7:b5:ff:d3:93:f3:0f:6a:9e:f7:d5:6a:b5:8d:7a:e3:81:c8:
5e:88:83:79:5b:02:b2:96:55:6e:19:ea:f7:6e:62:bc:3c:84:
c9:15:28:77:5a:04:67:17:11:96:e6:a1:72:a4:11:0a:28:97:
65:25:a4:1d:ee:b0:7a:c0:88:53:01:9f:34:ff:a2:a2:a8:d4:
9d:66:6a:b9:a9:8e:25:c2:17:a9:d3:11:56:bf:71:92:f7:1e:
57:72:97:ac:74:95:48:6c:63:c3:43:97:91:9e:3d:33:7b:43:
d5:12:ac:7d:30:cd:c2:8f:0a:00:86:e8:8c:8c:41:9a:dd:9d:
9f:75:61:e0:de:80:6f:17:4e:c9:4f:66:31:f9:c7:d1:51:ac:
a0:88:b0:73:45:ee:9c:0e:51:87:f2:32:ca:de:78:ac:d3:b0:
46:0d:3e:f6:3f:16:c9:59:07:91:24:f9:48:bd:58:4e:0e:1e:
db:3a:9b:ab:47:ef:dc:6a:18:5b:d0:d4:f2:bf:04:5c:c2:c5:
76:81:59:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:33:51 2026 by rpki-client