Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3137362e3132362e3130352e302f32342d3234203d3e20313432313131.roa
File: 3137362e3132362e3130352e302f32342d3234203d3e20313432313131.roa (raw, json)
Hash identifier: uX4TUpc9QWawvTEY8DM2zgQlxykPZg4zImAv7y2dBbA=
Subject key identifier: 2F:42:96:3D:B3:B3:CE:09:AA:90:26:83:EF:FC:F0:24:30:01:9A:C9
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 6FF008F9B0F8A71F8A4D8939A05CABB42B13256C
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3137362e3132362e3130352e302f32342d3234203d3e20313432313131.roa
Signing time: Mon 01 Jun 2026 21:47:22 +0000
ROA not before: Mon 01 Jun 2026 21:42:22 +0000
ROA not after: Mon 31 May 2027 21:47:22 +0000
asID: 142111
IP address blocks: 176.126.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 20:27:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:f0:08:f9:b0:f8:a7:1f:8a:4d:89:39:a0:5c:ab:b4:2b:13:25:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Jun 1 21:42:22 2026 GMT
Not After : May 31 21:47:22 2027 GMT
Subject: CN=2F42963DB3B3CE09AA902683EFFCF02430019AC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:33:87:46:57:71:fb:a2:91:46:81:0f:4f:34:
e3:45:19:a2:8d:b9:e3:4c:48:48:67:b2:21:47:62:
29:26:3f:e1:79:17:40:95:f8:17:41:83:68:8b:6c:
19:9d:98:0f:f7:e7:e9:ce:23:10:76:56:36:db:99:
b4:e7:dc:68:91:95:7d:e6:0e:a4:1f:07:8b:56:08:
99:95:42:f7:d9:a9:8e:28:8f:d1:74:7b:86:22:79:
0c:0e:3e:cf:89:b3:ff:ec:e9:e8:72:5c:19:e9:8f:
fd:a1:ed:7f:d1:56:bb:21:5c:f3:bc:96:a3:a7:03:
f9:92:29:87:4c:ee:02:e6:98:e9:0c:05:fa:4f:b8:
19:f3:dd:58:f4:ae:5c:7b:01:04:20:f1:05:89:30:
29:ad:10:db:de:e1:e0:9d:e9:a6:9a:95:4a:bf:90:
b7:a0:1a:45:78:93:71:1b:d7:d8:51:85:a0:40:c6:
eb:b0:0b:b0:72:b3:43:ea:dc:1f:21:a3:c8:78:99:
3a:7d:af:85:87:7c:6b:57:ba:fd:1f:81:d8:fc:95:
ce:81:64:f4:49:cf:44:bb:0f:98:e4:da:8b:73:ca:
7a:8d:de:6b:9d:bd:47:58:53:f2:0e:b8:b2:d0:ed:
01:af:15:30:24:3a:de:97:4c:b5:00:ae:d5:02:20:
84:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:42:96:3D:B3:B3:CE:09:AA:90:26:83:EF:FC:F0:24:30:01:9A:C9
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3137362e3132362e3130352e302f32342d3234203d3e20313432313131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.105.0/24
Signature Algorithm: sha256WithRSAEncryption
91:f0:07:45:d7:64:15:11:fb:e9:b7:0f:f1:4b:4e:4b:12:b7:
f5:4f:bc:41:03:3b:56:41:d3:a7:ef:ec:6b:48:4a:7e:42:34:
5d:6f:4f:93:d9:3e:37:23:a3:d5:dd:e2:4f:6d:7b:9b:88:d1:
dc:c0:1e:94:35:9e:c6:70:7a:10:ef:a8:ff:ed:82:88:3b:45:
fb:72:9e:30:c2:10:51:4b:45:ab:c4:7d:22:71:03:5e:9b:f4:
7f:f0:2c:fb:19:d1:3a:a7:82:eb:cc:66:6a:53:80:40:99:af:
f1:34:ba:16:cc:c0:3d:2e:5d:67:4e:f5:79:06:8b:1c:3f:34:
0e:5a:f0:99:5f:81:f6:9c:f5:db:3c:fd:23:76:20:24:8e:8f:
18:c6:2e:d4:17:be:b4:79:08:ce:a0:b8:db:50:30:ca:e4:85:
72:7d:aa:1f:e1:c1:2b:ac:4e:fa:b9:eb:a3:77:3c:05:5d:60:
d7:f5:ae:17:80:0f:e8:24:07:b5:93:1c:15:73:7d:f0:33:1c:
ee:3b:0b:39:1e:36:b8:6b:18:9e:a0:df:7c:d9:20:d8:1c:f9:
13:b7:1e:11:6b:0c:27:df:ce:44:42:30:ac:c5:f0:80:38:5d:
68:f5:e5:a6:f8:aa:8a:60:ce:1d:c5:be:07:41:e9:3d:74:3f:
8e:0e:05:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:56:20 2026 by rpki-client