Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3134362e31392e35332e302f32342d3234203d3e20313432313131.roa
File: 3134362e31392e35332e302f32342d3234203d3e20313432313131.roa (raw, json)
Hash identifier: lvJfFtfLFIbur8y503IXjh3IqK3A+RUCpmg6qhQ2seM=
Subject key identifier: FD:49:1C:1C:ED:11:77:50:7E:20:BC:7C:F8:00:32:26:4F:07:61:89
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 4E44E07EAC8B251860AB8935A14230D1BB2309DB
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3134362e31392e35332e302f32342d3234203d3e20313432313131.roa
Signing time: Mon 01 Jun 2026 21:47:22 +0000
ROA not before: Mon 01 Jun 2026 21:42:22 +0000
ROA not after: Mon 31 May 2027 21:47:22 +0000
asID: 142111
IP address blocks: 146.19.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 20:27:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:44:e0:7e:ac:8b:25:18:60:ab:89:35:a1:42:30:d1:bb:23:09:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Jun 1 21:42:22 2026 GMT
Not After : May 31 21:47:22 2027 GMT
Subject: CN=FD491C1CED1177507E20BC7CF80032264F076189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d4:54:14:21:b1:92:52:ea:ac:33:05:ae:97:
7e:d6:57:7e:8f:69:aa:7b:58:1c:23:09:50:26:60:
67:6f:2c:06:b8:f7:1d:8c:fe:80:59:9f:7e:4f:aa:
39:4e:64:d4:e3:e8:bf:45:09:07:d3:7c:e3:d6:65:
9c:31:c6:ec:0d:a3:aa:5a:0a:07:9f:58:4c:1e:65:
2f:a6:a0:dc:4f:3d:2d:5e:de:b3:66:10:d1:d3:d3:
94:3e:33:6c:6f:00:70:ba:02:a9:e2:5d:2c:47:c1:
fe:ef:9f:04:37:eb:d7:74:7c:17:cc:9c:1d:59:e0:
fc:1c:cc:bd:7b:2b:82:b7:39:cd:e0:eb:10:55:08:
84:1c:3c:7a:03:d8:be:f3:56:ef:4f:f2:ae:08:af:
ed:81:98:31:8a:0f:17:7c:71:ff:b3:2e:56:21:b0:
a3:9a:8d:ae:11:27:d8:58:72:72:d4:08:cd:6a:83:
92:b2:ea:91:93:39:1b:f4:05:dd:3f:1f:fd:c5:4f:
e7:b6:09:c9:37:d4:e6:74:89:b5:0b:04:c8:b9:d9:
68:70:d6:95:94:75:fa:5f:e2:90:c5:49:ba:b9:eb:
8c:f3:ba:98:e7:7d:db:7c:40:6c:46:0a:20:e2:b8:
c6:9f:76:0d:5d:7f:af:79:7e:0d:83:a4:d7:54:3d:
75:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:49:1C:1C:ED:11:77:50:7E:20:BC:7C:F8:00:32:26:4F:07:61:89
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3134362e31392e35332e302f32342d3234203d3e20313432313131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.53.0/24
Signature Algorithm: sha256WithRSAEncryption
93:29:d2:3c:b4:6b:8b:4e:29:2c:36:29:b3:43:09:d5:e8:1b:
04:5c:ed:9f:dd:c9:ae:ed:53:e5:e7:2d:1c:87:71:ea:48:fe:
1f:14:3b:07:95:85:49:e9:03:26:e0:66:1a:6b:30:74:e6:33:
ca:45:92:c3:5d:21:af:70:3c:82:38:c9:95:7b:f2:58:11:e8:
47:fc:ee:f4:74:3a:e3:96:d1:7f:0c:0e:82:9d:c3:41:51:a1:
02:a7:5d:d0:ff:36:f4:63:50:53:3b:e4:29:2d:63:3c:a4:36:
03:2d:6d:f1:19:c5:fd:5e:d0:1f:b4:80:fe:5e:2d:d4:46:5e:
2e:8a:c2:a9:3f:16:69:2e:84:c5:3d:f5:6b:3e:5a:01:9a:96:
28:a2:f8:92:24:53:df:d0:a3:f2:d2:9d:93:e2:c3:0d:d9:d7:
8e:03:03:21:e3:54:ca:63:95:42:3e:44:8d:2e:71:56:63:32:
d2:82:f8:fc:3e:2a:6d:59:e2:5e:17:76:cf:bb:40:36:22:9b:
19:fb:95:06:5a:a0:24:89:23:b3:ae:f0:5d:e5:79:57:ee:73:
50:01:ee:c9:db:fb:ab:db:4a:6a:68:6b:94:97:2e:e2:c7:80:
b6:f9:2d:6d:2c:c3:7a:ee:ea:b9:b3:4b:73:55:f4:f5:b1:7a:
06:ce:53:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:46:38 2026 by rpki-client