Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/39332e3131332e32352e302f32342d3234203d3e20323135363539.roa
File: 39332e3131332e32352e302f32342d3234203d3e20323135363539.roa (raw, json)
Hash identifier: I0itF5+/8CondhM9QNDfv0y0vQPHYwTgwfaL4yXTNmo=
Subject key identifier: 7D:AE:08:2C:1F:5D:D5:2C:32:18:8F:73:E5:65:B9:89:B0:F4:E6:6C
Certificate issuer: /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Certificate serial: 219DDD80B09EB180828FDC142ACF19488F45AF8C
Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/39332e3131332e32352e302f32342d3234203d3e20323135363539.roa
Signing time: Thu 21 May 2026 15:35:12 +0000
ROA not before: Thu 21 May 2026 15:30:12 +0000
ROA not after: Thu 20 May 2027 15:35:12 +0000
asID: 215659
IP address blocks: 93.113.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl
rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 19:24:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:9d:dd:80:b0:9e:b1:80:82:8f:dc:14:2a:cf:19:48:8f:45:af:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Validity
Not Before: May 21 15:30:12 2026 GMT
Not After : May 20 15:35:12 2027 GMT
Subject: CN=7DAE082C1F5DD52C32188F73E565B989B0F4E66C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a7:c2:67:3f:c0:d7:6e:12:fd:4e:d9:8d:4e:
f4:ce:d3:a3:eb:ce:63:39:92:ed:5b:b6:81:17:33:
de:81:95:e9:4c:a4:62:86:78:c3:ef:b2:a0:18:a0:
79:1d:0c:02:7d:44:29:1e:69:68:dd:1a:7d:db:0c:
9b:1e:06:4c:2e:a0:5f:40:66:65:3d:a0:de:55:b7:
ca:5d:55:8a:c7:c6:31:b4:b5:35:05:b3:72:d2:48:
6e:47:5c:1b:db:6a:25:75:07:3c:89:57:7a:8e:08:
ee:91:6c:1b:2e:8a:58:a4:d7:bd:04:06:e1:60:f5:
8c:88:a5:73:ca:16:d9:cd:33:af:b0:0a:f3:28:d6:
ff:9b:0d:e5:32:ec:8f:95:87:5d:8b:eb:a8:c0:3e:
2d:da:bd:8f:40:71:ba:5a:45:7d:ad:48:46:7b:7c:
86:6d:fd:79:c1:99:a1:ef:fa:89:5f:3b:33:f1:d3:
c9:c0:73:2c:0c:d5:a2:f3:29:c5:5b:0d:16:e6:24:
35:84:db:73:9b:40:fb:63:7a:14:46:09:cb:55:e2:
b1:0f:3f:d7:0d:8e:3a:bb:5b:05:43:cf:85:f8:c8:
86:07:94:3a:42:6e:df:61:e5:68:7f:2a:99:71:43:
1d:f5:c8:d3:23:3d:93:e5:59:38:28:fc:e2:6a:a0:
cf:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:AE:08:2C:1F:5D:D5:2C:32:18:8F:73:E5:65:B9:89:B0:F4:E6:6C
X509v3 Authority Key Identifier:
keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/39332e3131332e32352e302f32342d3234203d3e20323135363539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.113.25.0/24
Signature Algorithm: sha256WithRSAEncryption
59:ac:5d:ce:70:b1:7c:49:9d:07:5c:6d:60:b6:f8:58:b1:54:
43:38:ac:76:39:20:2e:5a:6e:b6:19:e2:33:2c:9b:3f:62:a1:
ca:a5:64:9e:80:81:59:49:c8:92:14:67:ff:a6:44:ed:df:e5:
96:c2:b3:16:b1:16:f1:5e:c3:5a:a1:11:dd:e2:d6:4a:d6:8b:
7d:65:79:58:d4:b2:ba:3c:56:e8:1f:8d:6f:4b:2a:c9:a8:05:
16:28:3b:89:ba:5a:66:f7:56:99:36:c4:dd:3e:06:6d:e6:d5:
88:a2:38:05:93:62:ea:e8:26:93:e3:62:86:0c:39:93:9b:25:
43:2a:ec:06:c6:1f:0e:c6:a8:4b:6d:af:d8:5c:8e:83:40:ce:
9c:4d:49:bd:99:83:fb:59:15:06:d9:fb:06:39:de:dc:d0:56:
3a:d2:72:dc:25:0b:4c:0d:84:1d:fd:d0:00:72:32:06:fd:24:
09:51:79:e2:d6:a6:88:40:5b:69:3e:6b:f3:8b:89:0a:f5:a7:
fc:17:d2:e4:a7:a0:9f:cf:aa:2b:48:43:28:16:6a:32:39:fd:
e7:53:ac:21:3e:0b:da:64:48:02:cc:21:4e:de:4d:68:9d:d7:
29:f7:6d:f8:ae:2d:4f:fe:04:10:42:a7:f5:85:1e:45:9c:19:
0a:cb:b1:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:19:33 2026 by rpki-client