Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/3231372e3139382e3138372e302f32342d3234203d3e20323131343430.roa
File: 3231372e3139382e3138372e302f32342d3234203d3e20323131343430.roa (raw, json)
Hash identifier: gynzAiIZs2pSvfvh20hqbyxR5tUfGwUrALrw3I8ilrA=
Subject key identifier: 86:0D:BB:ED:31:0C:A2:0D:89:03:BB:A0:66:9A:59:AA:A6:2C:E5:78
Certificate issuer: /CN=c79d02c618861ad45baf78ce39023cbcb494a7bf
Certificate serial: 5D5C0A284DB0D4063452521FDEC859716BDDD738
Authority key identifier: C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/3231372e3139382e3138372e302f32342d3234203d3e20323131343430.roa
Signing time: Mon 05 Oct 2026 13:49:35 +0000
ROA not before: Mon 05 Oct 2026 13:44:35 +0000
ROA not after: Mon 04 Oct 2027 13:49:35 +0000
asID: 211440
IP address blocks: 217.198.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl
rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft
rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 13:54:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:5c:0a:28:4d:b0:d4:06:34:52:52:1f:de:c8:59:71:6b:dd:d7:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c79d02c618861ad45baf78ce39023cbcb494a7bf
Validity
Not Before: Oct 5 13:44:35 2026 GMT
Not After : Oct 4 13:49:35 2027 GMT
Subject: CN=860DBBED310CA20D8903BBA0669A59AAA62CE578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b5:e2:9c:22:9d:2f:2c:96:4c:ec:de:e0:f7:
40:e1:14:e8:08:57:79:10:c2:07:9d:c4:ab:3f:fa:
8e:d2:3b:c0:f7:65:99:38:ab:a8:5d:ee:a9:82:9d:
27:fd:86:95:55:cc:15:30:3a:5b:e9:42:19:f6:8b:
c6:c0:6e:84:47:71:f0:18:cd:d2:83:02:c3:97:9f:
81:43:f8:69:60:83:85:85:24:a0:9f:72:22:5a:6e:
bf:9a:19:b7:d7:db:c3:1c:39:2f:31:71:b9:c8:ce:
db:6b:c1:c4:69:60:75:92:8e:af:1d:cd:3e:83:44:
6e:fc:58:b0:ca:50:72:c1:dc:13:68:24:17:58:50:
49:64:b4:fd:e6:86:e5:58:58:9c:19:4b:93:76:39:
b2:96:4b:03:4e:5c:f7:a0:60:fb:c7:67:b8:3f:f3:
bd:af:da:3d:3f:cc:fa:f0:59:e5:76:46:a8:4e:32:
ab:98:8e:22:b2:78:39:f8:b3:9e:1b:d4:e5:33:5c:
69:19:32:4f:6e:93:24:fb:2a:e3:9a:ec:a4:67:bb:
a5:d1:9f:a7:c5:0b:1c:53:ed:d2:40:29:3c:69:b5:
e6:c5:b8:95:75:59:43:f9:65:02:66:a3:fd:32:04:
74:37:7e:0a:1c:94:6a:39:5c:a6:6b:6d:0d:96:9e:
d7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:0D:BB:ED:31:0C:A2:0D:89:03:BB:A0:66:9A:59:AA:A6:2C:E5:78
X509v3 Authority Key Identifier:
keyid:C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/3231372e3139382e3138372e302f32342d3234203d3e20323131343430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.198.187.0/24
Signature Algorithm: sha256WithRSAEncryption
15:6a:6e:f8:42:6e:ec:24:11:3f:9d:cd:8c:39:18:f6:d9:3e:
f6:91:12:f5:18:13:ce:19:e2:65:a1:cf:96:bd:ac:63:f1:01:
2f:8e:7a:5f:23:18:b9:d3:35:23:a2:0d:67:b8:d7:09:d8:89:
0b:ef:37:b8:6b:61:1c:6e:0b:01:00:25:ac:07:bc:a1:66:17:
91:c3:21:74:6b:3b:a0:ad:be:58:87:6a:6a:76:07:eb:2b:4e:
2e:02:68:ae:1f:71:b0:9b:0c:1e:0e:fc:df:1f:63:95:a9:f1:
c5:4e:f8:ec:89:6f:f3:da:7b:dd:92:f1:fb:b1:ed:30:38:03:
ef:d0:b4:e4:e8:9b:2d:0e:9d:0e:0e:f4:01:6e:e5:9c:78:39:
18:36:6f:90:b7:a2:46:57:5e:12:dc:0b:e2:13:30:15:41:61:
8d:2a:23:21:b3:9e:c4:10:a6:e5:9e:e9:67:61:73:7a:c3:06:
36:4e:55:2b:bd:a8:f1:d4:77:a9:24:45:9e:e3:5c:ee:06:37:
13:66:1c:d7:b7:26:4f:e1:4a:a2:84:36:d6:90:24:03:dc:27:
c9:c7:91:60:ed:5a:bc:98:3a:9e:9b:d6:9c:5f:2f:6a:90:d7:
78:9a:7f:3c:fc:a5:82:e0:1b:8b:be:27:d2:d4:f4:f9:de:55:
a6:2e:b3:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 22:33:37 2026 by rpki-client