Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3134312e39382e37352e302f32342d3234203d3e203531383437.roa
File: 3134312e39382e37352e302f32342d3234203d3e203531383437.roa (raw, json)
Hash identifier: mmqCGRZJYHvpVg45WvFtGLJd+4UTpkk7nfaHn0CIReI=
Subject key identifier: C7:34:9D:6A:AD:56:A5:0A:EB:B1:AA:1C:89:C4:07:CB:1B:A2:87:69
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 3E5D171DE30197D56D2238D995D25A34FE419CAD
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3134312e39382e37352e302f32342d3234203d3e203531383437.roa
Signing time: Mon 23 Feb 2026 09:55:39 +0000
ROA not before: Mon 23 Feb 2026 09:50:39 +0000
ROA not after: Mon 22 Feb 2027 09:55:39 +0000
asID: 51847
IP address blocks: 141.98.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:50:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:5d:17:1d:e3:01:97:d5:6d:22:38:d9:95:d2:5a:34:fe:41:9c:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Feb 23 09:50:39 2026 GMT
Not After : Feb 22 09:55:39 2027 GMT
Subject: CN=C7349D6AAD56A50AEBB1AA1C89C407CB1BA28769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cf:15:cd:36:e5:12:bd:6d:7e:bf:49:b7:26:
df:be:0c:55:20:c5:e6:c1:6b:d8:01:0b:0f:f4:7a:
ef:46:f7:96:2e:41:47:dc:b5:23:96:93:f8:21:89:
a6:e7:7d:3e:c1:e9:db:8e:5f:5b:30:ce:04:3f:d8:
2e:23:09:07:6a:fd:e1:41:c8:a4:68:d4:88:ce:86:
da:7f:8d:b4:20:e4:82:b0:84:75:c4:4b:50:2a:a0:
e8:15:ea:e1:fc:80:60:e1:d8:fc:4d:cf:10:72:df:
3c:f3:d9:62:6a:71:a8:04:53:a2:e4:eb:dc:98:a5:
eb:c6:59:a1:97:d5:be:a3:ca:67:1c:e2:2f:55:28:
c2:a6:af:b8:03:89:6e:a6:87:03:b9:cb:9e:d8:f4:
23:f5:7d:7e:29:11:82:a0:30:4d:7d:dd:8a:d8:a0:
e5:8e:aa:f0:fb:9e:ba:dd:1c:db:b0:c6:c5:63:8d:
45:88:88:17:54:31:00:ad:9d:1d:55:76:4a:e4:a1:
cf:3b:76:a9:14:d5:51:fe:17:7b:67:64:a7:f8:fb:
fe:62:b7:ba:d5:7e:9a:91:b9:d7:9d:8a:89:54:2c:
79:8a:51:51:f7:99:d6:58:a1:62:ac:b7:cf:bb:5e:
46:55:97:cb:44:87:fb:4c:b2:23:58:a9:cf:dc:c7:
a0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:34:9D:6A:AD:56:A5:0A:EB:B1:AA:1C:89:C4:07:CB:1B:A2:87:69
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3134312e39382e37352e302f32342d3234203d3e203531383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.75.0/24
Signature Algorithm: sha256WithRSAEncryption
65:fb:0b:f6:28:04:7d:07:59:50:e8:ea:f3:82:e5:c9:b2:e3:
3c:d4:c2:c1:e7:fb:b2:ca:e8:e6:2c:2b:e2:eb:e5:4a:19:4d:
aa:94:bc:21:32:92:08:60:81:db:03:08:2f:8e:7f:a8:f8:4d:
88:87:cf:b1:63:90:3b:ae:e3:45:7a:84:80:5e:6f:64:46:26:
80:c6:2c:00:a6:5a:45:6d:d3:d4:8b:38:30:5a:c0:ff:d9:7b:
87:77:aa:19:66:b3:27:8d:98:e5:0c:b6:5f:15:7e:d4:6a:27:
9c:31:d3:70:31:cb:3b:02:0d:38:a1:e8:ac:8a:15:92:86:c5:
98:59:da:1d:d3:74:9e:e4:08:9f:1e:38:eb:9e:6b:35:12:f3:
7a:4b:e9:ec:9a:46:8f:51:23:5b:1e:e1:4a:a3:52:19:0d:3a:
d7:0a:81:81:d1:7b:8e:eb:4c:11:d3:64:d3:30:2a:20:6b:9c:
72:3a:d6:38:4c:f6:23:8f:b1:22:be:17:9e:ba:c1:e4:79:7e:
cf:e5:43:cf:5e:df:29:1f:f0:3f:cc:84:b4:38:23:95:26:11:
d0:c3:f3:bd:c7:de:ef:b0:f1:a5:e2:d7:8f:3b:5c:fb:ed:36:
dd:34:08:fe:84:18:12:28:fe:a2:c6:3c:45:94:fd:9a:25:c0:
79:77:65:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:12:03 2026 by rpki-client