Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3134312e39382e37342e302f32342d3234203d3e20343030383130.roa
File: 3134312e39382e37342e302f32342d3234203d3e20343030383130.roa (raw, json)
Hash identifier: fwz/d7S5BIVi9KVNnGw2k82c/snsFesvd7vNCeAko8c=
Subject key identifier: 20:B3:0F:44:8B:7C:64:90:57:E3:58:4B:DF:73:6E:89:FD:34:23:68
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 655DA3AF01D154031FF209AC581DF52BF402D153
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3134312e39382e37342e302f32342d3234203d3e20343030383130.roa
Signing time: Thu 05 Feb 2026 11:55:37 +0000
ROA not before: Thu 05 Feb 2026 11:50:37 +0000
ROA not after: Thu 04 Feb 2027 11:55:37 +0000
asID: 400810
IP address blocks: 141.98.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:5d:a3:af:01:d1:54:03:1f:f2:09:ac:58:1d:f5:2b:f4:02:d1:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Feb 5 11:50:37 2026 GMT
Not After : Feb 4 11:55:37 2027 GMT
Subject: CN=20B30F448B7C649057E3584BDF736E89FD342368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:20:e2:72:55:79:4b:73:6b:5d:8d:ad:a0:11:
1d:5d:6e:6d:b1:20:a8:f6:bd:3c:7a:68:53:9d:b2:
f1:9a:e5:d3:e6:61:9c:14:d9:7d:2e:54:40:c7:56:
1d:00:b4:a2:42:fd:85:c7:6a:8d:ce:b7:dc:1b:03:
2d:b4:e8:ce:15:26:8d:49:50:f1:c6:a4:03:f0:d8:
81:6a:c4:47:0f:b6:fc:76:0c:72:23:55:9a:75:09:
79:85:52:17:0d:62:95:4f:2a:a2:09:4a:8b:72:46:
11:f4:8b:44:03:ac:7d:6d:67:8c:c3:b1:75:c7:18:
29:ff:bb:ef:a9:90:0f:0c:51:fd:d1:77:6b:fa:ec:
79:98:73:37:38:27:45:db:42:a0:61:06:a0:ed:71:
70:7e:8c:6b:a9:b3:23:09:00:93:c8:e4:eb:86:4a:
85:44:d6:46:62:e6:04:0d:bc:72:22:cd:1a:c1:48:
1f:8c:fa:db:c6:a7:d4:3f:37:f0:64:88:19:34:3e:
9f:7c:26:c6:e9:0b:40:2e:c7:3e:ae:1b:aa:ff:51:
a5:fe:67:4e:a3:e4:6b:2c:2e:5e:be:2b:d5:fb:29:
28:8f:db:1d:b6:19:88:8c:ca:ad:ae:dd:96:d2:8b:
04:e6:b9:88:16:14:6e:3d:0f:ac:1f:fa:52:32:ab:
6b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B3:0F:44:8B:7C:64:90:57:E3:58:4B:DF:73:6E:89:FD:34:23:68
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3134312e39382e37342e302f32342d3234203d3e20343030383130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.74.0/24
Signature Algorithm: sha256WithRSAEncryption
40:fd:0b:09:15:41:26:d3:38:60:d8:8d:44:7c:f8:d9:db:51:
71:bc:13:ea:ed:5c:43:31:d9:0a:b9:45:f4:ef:05:99:93:4b:
43:bf:af:60:72:49:52:7f:5c:d9:a6:73:34:db:ea:ce:8c:a6:
c7:8a:1e:bb:2a:58:b8:a2:b9:96:a4:1e:55:76:38:a4:bf:26:
06:ca:8a:cf:80:07:e6:9a:5c:f9:bf:d6:66:83:01:e7:a9:35:
fd:79:af:8f:15:11:91:60:e5:e4:27:3b:08:59:fa:43:8d:c4:
bf:dc:8a:b4:3e:36:0c:40:43:19:94:d2:04:33:3e:cf:c6:29:
98:51:ee:f1:05:23:33:05:6d:1e:cb:5f:73:84:85:c3:c6:75:
78:a1:21:bc:87:61:2b:30:ce:eb:e9:d0:fd:80:9d:02:51:73:
13:85:50:21:02:11:6b:f1:41:31:29:3d:05:f4:74:2f:98:f0:
c9:b6:8c:11:ea:0b:47:dc:d7:88:38:86:42:5a:fd:c3:db:6c:
46:e5:cf:fd:5f:f8:fb:ab:d7:43:4d:ac:ea:13:d5:06:d6:d8:
17:26:8d:16:6d:cd:1d:01:f5:5b:e2:4c:84:87:19:e2:59:7e:
32:96:4f:c0:ea:e5:c8:de:71:4c:1b:77:a6:ad:85:28:2b:c1:
ea:a7:1a:63
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUZV2jrwHRVAMf8gmsWB31K/QC0VMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGQwNTlmMTBkMThkMDAwNTJjODA4ZWI4MDY5ZjkwZDQ3
ZTMwNTY0YTAeFw0yNjAyMDUxMTUwMzdaFw0yNzAyMDQxMTU1MzdaMDMxMTAvBgNV
BAMTKDIwQjMwRjQ0OEI3QzY0OTA1N0UzNTg0QkRGNzM2RTg5RkQzNDIzNjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUIOJyVXlLc2tdja2gER1dbm2x
IKj2vTx6aFOdsvGa5dPmYZwU2X0uVEDHVh0AtKJC/YXHao3Ot9wbAy206M4VJo1J
UPHGpAPw2IFqxEcPtvx2DHIjVZp1CXmFUhcNYpVPKqIJSotyRhH0i0QDrH1tZ4zD
sXXHGCn/u++pkA8MUf3Rd2v67HmYczc4J0XbQqBhBqDtcXB+jGupsyMJAJPI5OuG
SoVE1kZi5gQNvHIizRrBSB+M+tvGp9Q/N/BkiBk0Pp98JsbpC0Auxz6uG6r/UaX+
Z06j5GssLl6+K9X7KSiP2x22GYiMyq2u3ZbSiwTmuYgWFG49D6wf+lIyq2u5AgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUILMPRIt8ZJBX41hL33Nuif00I2gwHwYDVR0j
BBgwFoAUDQWfENGNAAUsgI64Bp+Q1H4wVkowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQtMjg1NC00MDgwLTlhMDktNzI2MjMyNmM5
ZTIyLzEvMEQwNTlGMTBEMThEMDAwNTJDODA4RUI4MDY5RjkwRDQ3RTMwNTY0QS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RRV2ZFTkdOQUFVc2dJNjRCcC1RMUg0
d1Zrby5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQt
Mjg1NC00MDgwLTlhMDktNzI2MjMyNmM5ZTIyLzEvMzEzNDMxMmUzOTM4MmUzNzM0
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzMDMwMzgzMTMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
jWJKMA0GCSqGSIb3DQEBCwUAA4IBAQBA/QsJFUEm0zhg2I1EfPjZ21FxvBPq7VxD
MdkKuUX07wWZk0tDv69gcklSf1zZpnM02+rOjKbHih67Kli4ormWpB5VdjikvyYG
yorPgAfmmlz5v9ZmgwHnqTX9ea+PFRGRYOXkJzsIWfpDjcS/3Iq0PjYMQEMZlNIE
Mz7PximYUe7xBSMzBW0ey19zhIXDxnV4oSG8h2ErMM7r6dD9gJ0CUXMThVAhAhFr
8UExKT0F9HQvmPDJtowR6gtH3NeIOIZCWv3D22xG5c/9X/j7q9dDTazqE9UG1tgX
Jo0Wbc0dAfVb4kyEhxniWX4ylk/A6uXI3nFMG3emrYUoK8Hqpxpj
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:38:02 2026 by rpki-client