Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3134362e31392e32322e302f32342d3234203d3e2039323934.roa
File: 3134362e31392e32322e302f32342d3234203d3e2039323934.roa (raw, json)
Hash identifier: e0SSS0xo7gvmOJksQW02nulgd/BU6NIi1E4uFnNkKKU=
Subject key identifier: A6:A9:EB:41:29:65:DB:52:51:CB:41:D1:FB:08:96:ED:3B:74:AF:58
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 3BE6919EE6CF3E78FEA1CB274BBA2B603536B899
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3134362e31392e32322e302f32342d3234203d3e2039323934.roa
Signing time: Thu 08 Oct 2026 05:49:36 +0000
ROA not before: Thu 08 Oct 2026 05:44:36 +0000
ROA not after: Thu 07 Oct 2027 05:49:36 +0000
asID: 9294
IP address blocks: 146.19.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:e6:91:9e:e6:cf:3e:78:fe:a1:cb:27:4b:ba:2b:60:35:36:b8:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Oct 8 05:44:36 2026 GMT
Not After : Oct 7 05:49:36 2027 GMT
Subject: CN=A6A9EB412965DB5251CB41D1FB0896ED3B74AF58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:07:60:cc:8b:63:43:3d:3a:de:43:6e:68:a7:
c5:a2:dc:09:f6:a2:f9:de:07:00:d7:52:03:2f:7e:
fc:fc:55:39:f0:ee:ba:be:d1:ac:80:52:75:24:f6:
69:73:f6:85:f3:a0:e6:52:e9:8a:db:27:b6:c0:7b:
c6:3a:df:6a:1d:1c:7d:f0:36:ae:c4:ec:de:c5:f6:
97:66:fe:c2:36:1e:ee:e1:95:ef:35:3e:1c:5d:6a:
d9:f2:c9:37:d4:02:1d:50:6a:73:46:40:a6:25:02:
1c:2a:bc:6a:eb:e7:f5:7d:30:a0:c5:37:c4:1a:48:
e8:6f:37:82:a8:16:55:46:83:52:d4:c5:ef:0d:bb:
1f:74:4a:76:e1:b8:49:44:54:e8:3a:49:59:c3:64:
db:c7:55:68:fa:9b:cd:0d:b0:14:2d:6f:e3:22:90:
11:b0:5c:86:e0:d3:19:1f:ec:a7:92:21:af:2a:80:
bc:ee:bf:95:7d:a9:fc:7a:d6:36:03:c7:38:da:de:
d9:aa:2b:95:17:84:78:bc:f2:b6:0a:97:07:94:9a:
53:bb:c7:88:52:fc:0b:13:bd:9b:e3:1f:96:7e:7f:
aa:5d:48:96:41:df:47:4d:5d:65:0e:ee:6a:cb:64:
e5:91:5b:35:f1:7a:fc:8c:ef:18:7d:6f:ab:86:f2:
c2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A9:EB:41:29:65:DB:52:51:CB:41:D1:FB:08:96:ED:3B:74:AF:58
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3134362e31392e32322e302f32342d3234203d3e2039323934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.22.0/24
Signature Algorithm: sha256WithRSAEncryption
08:e7:aa:89:1a:be:14:82:5e:9d:ed:2e:12:ed:10:17:e7:89:
3c:76:b5:f1:04:ec:6c:da:7d:23:2b:b4:a4:41:31:77:af:03:
81:4e:f0:bc:d2:ea:74:7a:7b:9e:34:85:2f:6b:71:8b:29:97:
d7:4e:42:f9:f8:49:65:ac:76:1a:b2:54:8b:cb:59:77:e6:66:
67:8d:5c:13:91:61:a1:bb:70:9b:c1:84:cb:b2:d6:cb:5f:b0:
a9:b1:b3:1c:13:37:c4:2b:dd:16:77:6e:c1:e6:6b:8f:18:d9:
bd:a8:00:db:b0:b5:90:28:f0:a4:33:70:d4:f5:cc:d6:53:64:
a5:f4:e6:df:99:eb:de:4b:99:89:96:18:52:12:79:d0:50:15:
1a:30:7b:2d:c7:45:f0:46:67:6f:88:07:f9:41:40:91:0c:88:
0f:78:d7:fd:46:5e:48:28:ca:72:7d:0f:ba:29:9d:e2:90:93:
33:ac:36:af:35:64:9c:7b:13:54:ab:a6:bc:cc:e9:60:cc:53:
7e:65:57:52:e8:c9:22:fc:bd:8a:a4:70:f4:d1:2d:12:3b:d1:
24:31:17:a4:d3:4d:5f:2f:24:24:c7:7c:40:9b:33:d8:eb:74:
57:ad:a4:c6:c6:75:7f:b6:97:5a:03:3d:00:03:48:97:93:fe:
bd:31:8d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 18:58:17 2026 by rpki-client