Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/3134312e3139332e3232382e302f32342d3234203d3e20323134323038.roa
File: 3134312e3139332e3232382e302f32342d3234203d3e20323134323038.roa (raw, json)
Hash identifier: ifyEdtBW0BhdKWJrpJ6bYfBeNzyrtZtj9JtftvgAsco=
Subject key identifier: 9F:42:0C:6A:7E:6B:A0:27:0E:7A:BA:B5:C1:89:EF:C8:ED:70:A1:21
Certificate issuer: /CN=5ecb4cadbbadd500f49ca697d566a2761e017608
Certificate serial: 76AC209F5ED18E220F8D1E9EDF176490E4116073
Authority key identifier: 5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/3134312e3139332e3232382e302f32342d3234203d3e20323134323038.roa
Signing time: Mon 08 Jun 2026 13:47:30 +0000
ROA not before: Mon 08 Jun 2026 13:42:30 +0000
ROA not after: Mon 07 Jun 2027 13:47:30 +0000
asID: 214208
IP address blocks: 141.193.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl
rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft
rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:46:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:ac:20:9f:5e:d1:8e:22:0f:8d:1e:9e:df:17:64:90:e4:11:60:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ecb4cadbbadd500f49ca697d566a2761e017608
Validity
Not Before: Jun 8 13:42:30 2026 GMT
Not After : Jun 7 13:47:30 2027 GMT
Subject: CN=9F420C6A7E6BA0270E7ABAB5C189EFC8ED70A121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:46:cd:cb:92:4e:43:66:ac:af:4a:ea:f4:fa:
40:3b:9c:cc:38:1a:2a:04:16:68:3e:59:3d:b3:a9:
c5:47:93:27:68:a0:71:70:cc:50:4c:a2:d9:1c:04:
aa:33:16:72:0e:7a:18:65:81:21:31:3e:14:8e:46:
34:fa:37:48:cc:a5:c4:69:99:87:27:f9:2f:3c:07:
af:f8:f7:13:b0:48:0b:47:0e:43:5c:e3:fe:88:94:
d3:80:fb:1f:a2:5a:28:3b:3b:ff:c2:dd:35:55:c8:
54:fa:96:b4:0c:7c:93:02:08:4d:5f:6f:e0:4b:54:
23:02:e7:9e:b3:e6:de:75:b7:f0:8c:f5:67:a4:9c:
68:2b:5a:d9:6c:21:3c:4a:49:42:fa:b5:b3:47:21:
76:2f:72:90:44:15:75:db:87:73:eb:45:7e:df:6b:
c4:6d:cd:dd:94:0c:c1:8e:22:23:cd:69:72:77:a6:
85:ed:b5:2c:e1:32:3e:bd:9b:66:cb:5f:e1:df:64:
ae:28:fe:a3:8b:bf:8c:56:09:8d:53:18:76:4c:c6:
d5:95:83:07:ff:f3:92:d2:e6:53:b8:4c:07:ac:b5:
6e:5d:33:98:70:c2:60:70:b2:e0:5f:25:e5:4c:ad:
a7:44:38:37:a5:dc:8c:33:2d:85:65:75:77:9d:52:
70:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:42:0C:6A:7E:6B:A0:27:0E:7A:BA:B5:C1:89:EF:C8:ED:70:A1:21
X509v3 Authority Key Identifier:
keyid:5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/3134312e3139332e3232382e302f32342d3234203d3e20323134323038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.193.228.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:87:f9:3c:9b:87:b6:6e:ac:56:f9:87:82:62:06:e2:be:a6:
71:09:9b:34:7a:75:7e:78:6c:fc:9c:1a:b4:8f:0d:a5:3a:79:
80:b1:aa:b7:ab:90:1f:73:2b:37:1a:64:e3:68:09:eb:19:ce:
3f:03:ad:51:76:72:54:80:c0:3d:74:a1:34:e3:20:e5:b1:1a:
09:16:e0:c7:d2:42:3b:90:d2:a9:87:3c:b8:cb:ba:6b:c1:83:
27:31:24:58:32:df:2e:ca:ce:0b:17:8c:60:a1:a0:03:dc:e7:
64:d9:0f:ae:0f:0c:32:0d:8e:71:ed:ea:2b:d4:58:8a:53:40:
bb:de:9a:85:6e:52:d2:54:6d:e6:d1:54:7b:ee:2c:0a:e7:0e:
76:11:8e:e7:7e:6c:e1:92:08:8e:07:dc:b7:23:cf:9c:37:6a:
2d:55:9a:f2:df:f9:bf:da:50:b0:fd:75:ed:e3:a7:bd:46:0c:
c6:22:ac:c4:e2:7c:3a:4c:72:ad:e3:59:73:65:2e:e4:67:56:
df:cc:e2:67:b1:b4:ef:4c:24:ff:9e:db:c1:63:96:02:26:ae:
73:dd:99:b9:07:6f:0e:16:d4:f6:88:8d:fd:a6:72:97:fa:6a:
10:b3:3e:9c:81:6d:f0:61:d5:97:f4:0c:7c:2d:56:53:9c:5d:
a6:55:60:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:18:40 2026 by rpki-client