Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3139332e3130392e3139382e302f32342d3234203d3e20383334.roa
File: 3139332e3130392e3139382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: jYtm0GOdPg5U/zoyW1NOvoiuPAMUnapCWttu6QUn+SQ=
Subject key identifier: CF:0E:51:94:2E:80:44:D1:DC:12:FE:AC:BA:92:96:79:31:2C:0E:6A
Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d
Certificate serial: 248DB2E977D74BBC1880C9F5577F053D88F3E45E
Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3139332e3130392e3139382e302f32342d3234203d3e20383334.roa
Signing time: Tue 02 Jun 2026 12:52:30 +0000
ROA not before: Tue 02 Jun 2026 12:47:30 +0000
ROA not after: Tue 01 Jun 2027 12:52:30 +0000
asID: 834
IP address blocks: 193.109.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl
rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:8d:b2:e9:77:d7:4b:bc:18:80:c9:f5:57:7f:05:3d:88:f3:e4:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d
Validity
Not Before: Jun 2 12:47:30 2026 GMT
Not After : Jun 1 12:52:30 2027 GMT
Subject: CN=CF0E51942E8044D1DC12FEACBA929679312C0E6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2e:0c:da:26:92:4a:de:40:d4:ec:d4:68:54:
84:30:05:b3:b3:87:17:f8:14:55:5f:e1:aa:e6:3e:
3f:49:e6:e2:27:75:d5:cd:eb:f9:3c:13:bc:0f:62:
a5:9b:fb:47:23:34:c9:d9:d4:e5:4f:48:e3:d7:8f:
8b:96:7b:2a:9e:3f:e3:71:f2:dc:8c:0b:6a:bc:e8:
69:3a:58:aa:ce:17:c0:b0:5a:6f:6c:a7:b0:86:1a:
e4:ca:83:6e:1a:76:84:f2:87:06:35:93:f5:da:0d:
b4:49:45:f7:a2:2c:e5:0d:00:6f:60:67:46:b4:ad:
57:ae:72:5e:c7:13:e9:3a:b0:f5:fc:bd:b0:92:2b:
67:a1:00:49:bd:fa:b2:13:c7:41:30:05:2a:3d:87:
b1:22:e8:50:5c:f2:37:ea:6a:d6:50:73:06:20:f7:
c3:16:9c:c0:a0:dd:5b:50:43:2e:76:d0:5f:54:f4:
0a:02:40:76:58:7e:97:46:45:df:b8:8e:41:4e:24:
55:ea:ac:6e:2c:0e:5f:30:55:14:69:b4:18:40:82:
f1:5c:6b:49:a9:0c:a2:e5:a9:2a:8d:03:7e:8c:de:
ec:ed:79:96:87:a6:0d:3f:a6:9f:b5:97:50:43:83:
c1:c3:f7:29:c1:31:11:a1:9a:49:96:d6:0a:a1:89:
8e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:0E:51:94:2E:80:44:D1:DC:12:FE:AC:BA:92:96:79:31:2C:0E:6A
X509v3 Authority Key Identifier:
keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3139332e3130392e3139382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.198.0/24
Signature Algorithm: sha256WithRSAEncryption
41:e6:d8:04:88:ce:cb:7e:0a:29:73:98:6a:a0:e5:cc:bd:47:
c0:e1:71:63:e0:05:3e:dd:fe:7d:43:bb:3f:4d:2f:61:ee:fd:
18:bb:5a:a4:f6:4a:f9:bd:6c:fc:bf:6c:54:a6:c9:6e:df:09:
bb:43:3c:40:3f:55:91:b3:d6:45:56:10:6e:7e:ae:56:4f:41:
7b:79:7b:7e:05:e1:a0:ef:22:12:cc:b5:67:0a:e5:b6:c3:71:
66:f2:68:46:86:82:10:de:bd:05:94:2e:d7:fa:1d:4c:86:0e:
b3:ab:ff:06:18:bc:cc:7b:22:39:24:cd:a9:c0:17:b5:2e:63:
59:f7:28:e5:1d:35:74:4a:18:e5:63:69:50:00:09:48:32:54:
6c:5f:a4:70:c9:59:b3:95:45:b6:62:8f:69:7a:1c:8d:3a:4c:
78:88:89:3b:f3:9d:5e:ac:26:32:f9:c1:de:00:8f:0a:5c:d1:
14:ea:32:99:f7:2d:55:70:cb:7d:52:6c:b7:9f:0c:a9:1c:3f:
62:ef:16:3f:37:d6:e6:e8:53:12:81:35:ed:25:18:8d:6d:61:
24:46:17:61:e4:b4:ca:37:47:fd:f1:c5:c2:a1:c8:28:64:3b:
d7:4a:04:6b:9b:33:80:ec:49:0c:85:a9:30:6f:d2:e1:92:62:
83:bb:21:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:52:49 2026 by rpki-client