Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/3139342e3132342e3233342e302f32342d3234203d3e20323031393037.roa
File: 3139342e3132342e3233342e302f32342d3234203d3e20323031393037.roa (raw, json)
Hash identifier: P1rNrNq0Lsy4Pv36ykUIleWOvoAEcFUYAHvT3IiKS84=
Subject key identifier: AE:41:CB:0B:8F:F1:8E:E1:53:52:C9:26:6B:8F:F4:1D:C7:E4:04:F4
Certificate issuer: /CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac
Certificate serial: 6EB0282E24308CC4C588A528AF8B40EFE37D0588
Authority key identifier: CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/3139342e3132342e3233342e302f32342d3234203d3e20323031393037.roa
Signing time: Tue 03 Feb 2026 09:12:35 +0000
ROA not before: Tue 03 Feb 2026 09:07:35 +0000
ROA not after: Tue 02 Feb 2027 09:12:35 +0000
asID: 201907
IP address blocks: 194.124.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl
rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft
rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:b0:28:2e:24:30:8c:c4:c5:88:a5:28:af:8b:40:ef:e3:7d:05:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac
Validity
Not Before: Feb 3 09:07:35 2026 GMT
Not After : Feb 2 09:12:35 2027 GMT
Subject: CN=AE41CB0B8FF18EE15352C9266B8FF41DC7E404F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:dd:83:fd:ea:4b:ba:51:ab:1e:cb:9c:85:74:
1d:10:c3:7d:bd:e5:7b:f8:ce:71:4d:f3:1b:88:59:
ba:95:a7:55:a9:a5:17:be:32:8f:f3:38:ec:44:06:
00:11:4f:99:c0:39:59:2c:21:25:ec:c7:a0:92:d9:
7a:01:b0:65:4e:94:a6:3f:32:db:5c:1c:08:e6:6b:
b9:61:48:e2:6c:c1:ba:80:0f:c2:d9:5d:24:27:72:
b8:7a:5a:ab:0b:80:60:42:4f:82:b7:be:e8:c5:dd:
c7:cf:f1:0f:40:d7:02:a5:55:2a:5b:98:c5:c8:8f:
c6:28:a2:78:2b:07:13:af:95:93:01:96:b8:ed:03:
f3:2d:38:c2:7b:d3:f7:c1:3d:e6:cf:a7:ca:79:5d:
de:66:e2:b2:36:3c:fc:a5:c2:c8:4b:0c:38:6c:33:
32:45:75:7f:fd:1e:07:3a:71:f4:cc:09:60:d9:12:
8a:56:0b:d8:e9:78:59:c5:4d:89:99:de:a4:35:7f:
b3:92:11:1e:4d:46:18:fd:e8:fe:ca:9d:ae:14:cb:
64:bc:34:f4:92:0b:9f:30:f7:49:cc:2a:54:48:20:
e3:59:b2:6f:58:63:3b:30:88:3d:7d:cc:c2:e9:9c:
d2:d0:24:5d:d4:e7:0e:92:cd:1c:d7:7e:62:eb:fb:
ac:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:41:CB:0B:8F:F1:8E:E1:53:52:C9:26:6B:8F:F4:1D:C7:E4:04:F4
X509v3 Authority Key Identifier:
keyid:CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/3139342e3132342e3233342e302f32342d3234203d3e20323031393037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.124.234.0/24
Signature Algorithm: sha256WithRSAEncryption
11:01:29:b9:80:68:ea:d0:fa:fd:a9:06:f8:e2:3a:82:2f:da:
46:44:c9:e2:73:8a:b3:cc:a7:a9:ff:11:15:2c:ff:ee:44:be:
56:8e:43:b1:82:2f:58:0c:6c:ef:16:2a:fc:df:be:0d:4c:85:
9a:a1:54:ac:22:87:06:62:36:6d:75:53:5e:72:47:d2:d2:45:
23:36:8b:68:b6:2a:6f:e5:e2:fc:55:1a:3e:42:a4:5b:21:c4:
47:10:07:85:27:61:10:3e:2f:43:31:08:d4:38:50:e5:05:36:
14:bb:c3:33:90:9c:7d:20:4f:b3:c5:8e:4d:69:3b:4d:e8:26:
07:a3:5a:c0:a9:71:b3:7f:f1:37:36:11:32:1d:49:f9:cc:f2:
96:1f:ce:25:b4:ee:09:59:a8:e0:f7:c7:19:78:bd:25:29:fd:
e1:58:c7:d5:50:97:43:5f:20:ff:b0:37:4e:4e:5c:f9:17:1e:
83:93:3f:c6:9b:31:7e:cd:01:4e:b3:75:d5:43:c3:0a:58:75:
20:20:46:ce:26:b3:31:44:cb:1d:cb:e7:bf:c5:76:6b:3d:03:
3c:60:f5:eb:da:3e:fa:f3:86:38:01:b8:0a:b1:b4:4c:b5:48:
1c:89:20:bf:2c:f8:ef:af:56:37:b2:dd:1a:5f:cf:47:60:6c:
b2:04:87:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:55:40 2026 by rpki-client