Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/3139342e3135332e3135382e302f32362d3236203d3e203438323830.roa
File: 3139342e3135332e3135382e302f32362d3236203d3e203438323830.roa (raw, json)
Hash identifier: eB/VLyl2lBzOgElsP6OLK0lCJzoQsF6daigviLJ6o9A=
Subject key identifier: 7E:E2:0C:EF:4B:B2:CB:57:99:BB:72:45:85:8D:EF:5B:4C:2C:A8:B7
Certificate issuer: /CN=e7585b5cd477d90075cdb63109f57279766c2976
Certificate serial: 185C9EEBB0B250D2E3B58416B34388E20006D66B
Authority key identifier: E7:58:5B:5C:D4:77:D9:00:75:CD:B6:31:09:F5:72:79:76:6C:29:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51hbXNR32QB1zbYxCfVyeXZsKXY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/3139342e3135332e3135382e302f32362d3236203d3e203438323830.roa
Signing time: Mon 12 Oct 2026 10:51:40 +0000
ROA not before: Mon 12 Oct 2026 10:46:40 +0000
ROA not after: Mon 11 Oct 2027 10:51:40 +0000
asID: 48280
IP address blocks: 194.153.158.0/26 maxlen: 26
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.crl
rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.mft
rsync://rpki.ripe.net/repository/DEFAULT/51hbXNR32QB1zbYxCfVyeXZsKXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 06:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:5c:9e:eb:b0:b2:50:d2:e3:b5:84:16:b3:43:88:e2:00:06:d6:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7585b5cd477d90075cdb63109f57279766c2976
Validity
Not Before: Oct 12 10:46:40 2026 GMT
Not After : Oct 11 10:51:40 2027 GMT
Subject: CN=7EE20CEF4BB2CB5799BB7245858DEF5B4C2CA8B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4f:df:68:e0:26:24:b5:1d:d6:90:cd:fe:c5:
94:75:b3:8b:f1:0f:7e:4b:5b:5d:67:56:fd:30:64:
e8:9f:7b:ca:be:d6:56:8c:03:2e:a8:bd:a0:81:e2:
9e:6e:d6:aa:64:64:93:c3:a3:2e:b9:e9:7a:81:2f:
2b:df:06:9e:40:b9:89:8c:96:fe:0e:18:34:ad:35:
07:bd:2e:4f:64:8c:fd:87:06:5a:6a:f7:0f:06:38:
3a:f5:61:05:ec:81:13:64:c9:9c:c3:b8:28:60:56:
72:2a:7b:df:40:9b:c0:0b:8d:16:98:d2:5d:42:f9:
d4:91:bd:9f:82:45:df:08:66:d8:69:5d:55:31:3f:
d8:2f:f6:99:df:a3:54:08:21:b8:78:a0:ae:e1:39:
d6:71:8c:09:0d:5c:dd:74:f3:13:52:38:3b:2b:0f:
20:d0:f1:e3:e5:ef:7d:0c:89:9d:13:83:c5:9e:24:
cb:6d:66:3f:7c:01:0f:98:df:1e:cd:d6:4c:7c:9b:
c4:6f:6d:de:e6:aa:32:d9:a9:6c:b4:cd:c3:73:6a:
97:0e:f9:5c:8e:d0:9a:6a:15:c1:30:99:c9:08:d1:
19:c9:7a:67:a4:81:0f:b0:d0:36:82:31:60:cb:47:
2c:0e:98:2f:7c:b0:c8:f7:a9:12:ff:f8:13:4a:e2:
19:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E2:0C:EF:4B:B2:CB:57:99:BB:72:45:85:8D:EF:5B:4C:2C:A8:B7
X509v3 Authority Key Identifier:
keyid:E7:58:5B:5C:D4:77:D9:00:75:CD:B6:31:09:F5:72:79:76:6C:29:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51hbXNR32QB1zbYxCfVyeXZsKXY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/3139342e3135332e3135382e302f32362d3236203d3e203438323830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.153.158.0/26
Signature Algorithm: sha256WithRSAEncryption
36:23:13:c6:d9:ad:5e:7b:de:0c:cf:a3:d8:ab:16:34:9f:c4:
36:f5:4e:5e:6c:14:9b:09:22:42:d5:33:9f:ca:0e:97:77:18:
5f:15:a2:3d:5b:0d:d8:d5:01:87:83:8e:52:67:7f:16:f7:4f:
2b:fd:7f:d6:fa:5a:5c:0c:15:c5:68:4c:e8:b2:51:1a:2f:50:
b6:58:37:98:99:15:88:d6:db:22:ff:ee:25:d5:57:b1:98:c7:
b7:5f:3e:1e:d8:dc:f5:9c:ec:54:56:7c:d8:e5:6a:00:7a:70:
71:d0:68:59:0b:85:76:bb:7a:dc:12:c8:21:8d:bc:9f:13:e6:
8b:a9:68:b5:58:ff:65:11:4f:e9:63:8c:70:e8:a4:8c:d3:c6:
62:db:3a:fc:d0:5d:05:49:c2:f4:1a:4d:c6:4d:23:b7:25:cc:
d1:91:9f:09:fa:76:c0:5e:cb:19:f4:1e:36:84:74:09:4f:6d:
9c:ec:28:e0:13:4c:d0:d3:8a:86:40:f8:8a:38:75:b7:8c:df:
6c:5c:01:78:13:de:08:e6:b5:87:8e:e3:1f:ea:99:80:df:7a:
1f:2e:0a:fc:6a:7f:fd:2a:d0:f2:51:31:be:aa:98:dd:02:91:
d9:27:8d:24:4b:5d:63:d6:b2:01:f0:f9:7e:07:72:70:19:fd:
57:ff:6a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 16:21:48 2026 by rpki-client