Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139332e32392e36322e302f32342d3234203d3e203633343733.roa
File: 3139332e32392e36322e302f32342d3234203d3e203633343733.roa (raw, json)
Hash identifier: Tee/xttbWcKDSqYN9BrjMwNvpFSyMkdE6QqLHzHduEc=
Subject key identifier: 62:26:95:BC:7E:26:1C:67:21:73:DF:3F:98:D8:9D:5C:B7:ED:A1:06
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 4247A5E1176EC2756F1C912DACC34EFD89DCD0F0
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139332e32392e36322e302f32342d3234203d3e203633343733.roa
Signing time: Mon 07 Sep 2026 11:28:34 +0000
ROA not before: Mon 07 Sep 2026 11:23:34 +0000
ROA not after: Mon 06 Sep 2027 11:28:34 +0000
asID: 63473
IP address blocks: 193.29.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:47:a5:e1:17:6e:c2:75:6f:1c:91:2d:ac:c3:4e:fd:89:dc:d0:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Sep 7 11:23:34 2026 GMT
Not After : Sep 6 11:28:34 2027 GMT
Subject: CN=622695BC7E261C672173DF3F98D89D5CB7EDA106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6c:e2:37:78:8d:cf:1c:50:77:27:bf:68:96:
40:20:d2:75:4e:64:48:bd:8a:0b:ed:cd:62:51:c6:
80:60:a5:23:5d:20:7a:08:d8:3c:50:a1:f4:24:10:
f5:d7:ce:2b:f4:d5:67:10:bc:1a:c4:98:2d:73:e0:
16:46:8f:36:fa:b4:29:54:73:d7:7a:7f:4f:4c:d5:
40:fe:fc:ae:54:4d:9d:12:81:70:b2:5c:88:62:1b:
f1:e2:16:7d:90:74:7a:68:dd:f3:3b:ab:45:94:8f:
cb:6a:ed:4a:82:e4:35:d5:80:be:c5:17:42:66:db:
99:06:bf:55:0f:a5:5c:99:44:ef:d1:18:58:4a:62:
43:dc:e0:bb:42:88:d5:4b:f6:0f:ee:a5:16:61:8e:
15:b8:1a:47:19:d5:e2:e7:c5:3c:6a:f4:41:93:0c:
80:f3:ef:f4:99:fa:bd:15:fa:81:29:27:06:89:01:
20:c7:3b:ee:b3:67:1a:9f:f2:be:c7:35:bc:03:4b:
55:d5:39:d9:63:52:87:27:bc:e9:bd:8a:c7:b5:30:
9c:a4:e3:10:90:07:4e:65:84:62:48:e4:dd:03:47:
03:25:1c:d5:46:68:08:d8:d4:25:a0:d6:af:47:eb:
ad:84:4a:38:47:a7:4a:ea:3c:79:13:63:1d:ae:80:
9f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:26:95:BC:7E:26:1C:67:21:73:DF:3F:98:D8:9D:5C:B7:ED:A1:06
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139332e32392e36322e302f32342d3234203d3e203633343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.29.62.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:f5:ed:3c:de:08:4f:bd:9f:31:c7:9e:2a:a7:e3:e8:0a:4d:
40:98:56:a7:54:da:5d:94:fa:b0:ca:bc:c3:2e:bf:d1:b9:34:
69:3f:3e:79:8e:be:15:e0:55:8b:c3:36:16:49:e3:00:9b:97:
94:f0:6d:e1:c5:df:1f:2b:10:ac:4c:34:62:01:f8:d2:76:7e:
ae:44:a3:a2:f2:64:12:e9:5e:8a:ff:8c:ac:b5:82:b1:2f:05:
81:e3:85:f0:9c:0c:de:4b:c8:9a:9b:8e:ab:80:5d:46:17:73:
4a:ec:9c:1e:8a:6f:f0:7b:bd:d8:88:20:23:e6:91:dd:4d:46:
67:e0:2a:af:6e:d0:c5:f9:fd:e9:a0:6b:3d:37:9e:83:29:4b:
2e:fa:a8:94:f3:4f:4b:83:8f:51:47:99:e8:db:d7:03:c2:ab:
08:ad:c0:6d:91:79:9c:57:f6:b1:d0:f3:9b:42:74:8c:07:2f:
ff:6a:3f:03:96:21:39:f5:44:7c:c4:5d:26:5d:65:7b:32:ee:
15:01:56:fe:c1:b4:c4:1a:dd:71:40:c9:80:ab:99:d6:e0:df:
47:d7:cc:c8:bf:44:36:b3:f6:4f:7a:24:a1:8b:9f:04:f7:e5:
32:0f:c1:d9:89:ac:dd:1c:a1:54:af:de:c7:7e:a5:4f:5d:7f:
f4:e9:56:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:58:05 2026 by rpki-client