Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139332e32392e36332e302f32342d3234203d3e203633343733.roa
File: 3139332e32392e36332e302f32342d3234203d3e203633343733.roa (raw, json)
Hash identifier: zfcdlE7nCN928irJsq/iRFJ6jX+bKc/rjHE6tkqNOu0=
Subject key identifier: 5A:20:30:3B:22:CE:85:84:B7:3C:04:53:B5:36:58:55:0D:0E:66:9F
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 373EA3B9F45F778F1FF890B07AFDF093D6455316
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139332e32392e36332e302f32342d3234203d3e203633343733.roa
Signing time: Mon 07 Sep 2026 11:28:35 +0000
ROA not before: Mon 07 Sep 2026 11:23:35 +0000
ROA not after: Mon 06 Sep 2027 11:28:35 +0000
asID: 63473
IP address blocks: 193.29.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:3e:a3:b9:f4:5f:77:8f:1f:f8:90:b0:7a:fd:f0:93:d6:45:53:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Sep 7 11:23:35 2026 GMT
Not After : Sep 6 11:28:35 2027 GMT
Subject: CN=5A20303B22CE8584B73C0453B53658550D0E669F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8e:df:e6:c9:4f:e8:0f:cc:d2:a5:31:66:0e:
eb:ad:b7:91:a6:94:39:f6:ca:3f:5a:42:48:74:74:
1c:a6:0d:99:89:9d:07:32:07:74:59:92:a9:a4:eb:
10:58:7a:e0:24:9d:cb:5d:82:63:0b:38:66:82:fe:
03:47:d9:63:4e:85:e5:8b:80:5c:6f:ed:84:f7:eb:
92:4f:79:4c:3f:5e:06:96:8a:72:ba:27:0e:d0:c2:
38:92:d7:05:37:7c:6d:ff:b1:a7:bc:fb:be:8f:ec:
c9:ab:d3:dd:f9:3e:35:ba:b2:c1:33:5e:ad:f5:36:
58:80:a6:79:34:7d:83:b5:5a:f0:ba:6d:99:6c:78:
17:93:7e:96:33:30:aa:e0:a6:57:3a:6c:6d:50:f0:
17:b8:17:98:6c:3b:75:10:f1:4e:cd:a3:9b:ab:9b:
cc:f6:ee:13:84:0c:a0:54:a0:45:c6:5f:28:df:95:
fc:4b:b4:1c:e6:07:c3:e2:a7:9a:fe:20:c6:bd:13:
a1:52:f6:af:19:92:93:81:b8:b0:62:71:6a:ce:5c:
c5:42:30:89:f1:87:c4:fe:46:8b:c6:41:ea:24:fa:
9c:8c:65:f3:d5:da:30:2b:66:b4:63:ef:ad:cb:13:
b6:45:17:f5:8c:8a:ae:ca:d9:5b:6c:d0:22:cd:4c:
31:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:20:30:3B:22:CE:85:84:B7:3C:04:53:B5:36:58:55:0D:0E:66:9F
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139332e32392e36332e302f32342d3234203d3e203633343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.29.63.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:75:f8:2c:4f:97:1d:89:53:59:80:5e:3c:12:b5:12:7f:a0:
a6:43:db:5b:e9:89:38:b5:07:00:d3:49:53:8d:04:48:6d:77:
9f:ca:11:f8:aa:9b:56:de:dd:34:db:1e:5d:b0:1b:d0:0f:3a:
17:63:da:e6:32:05:02:36:bd:61:d4:af:d9:37:c1:ac:7c:ed:
c0:56:64:b7:86:7c:89:f9:71:68:cc:fe:88:da:14:87:f2:24:
7b:dc:04:94:ad:4a:f7:fc:35:a9:c6:1c:a4:3d:b1:da:fc:d3:
24:78:23:e2:ec:7b:81:81:32:de:67:ce:27:9b:ec:3d:84:4a:
e8:1b:fc:98:e5:09:d8:a4:fe:c8:ce:3f:2c:27:98:30:eb:6d:
48:95:17:90:f8:5b:0a:f6:41:4b:0e:4b:43:98:40:44:ae:d5:
e1:39:c7:53:39:d9:1d:15:eb:77:d9:fd:98:60:07:95:67:01:
30:69:bd:e3:65:5a:a9:71:28:1f:15:19:6a:85:fe:57:1a:c6:
6e:df:14:b1:87:6e:e9:bf:ee:dc:a9:7b:9a:90:39:8a:a6:2d:
5b:a8:a6:e2:90:9f:07:c8:89:5d:b2:c0:ec:b4:5e:a0:1e:6a:
1c:b1:51:94:01:e3:cf:03:d0:b4:a4:2a:a4:e3:14:17:51:be:
75:27:4f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:10:47 2026 by rpki-client