Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e3135362e3133382e302f32342d3234203d3e203133333335.roa
File: 3139342e3135362e3133382e302f32342d3234203d3e203133333335.roa (raw, json)
Hash identifier: I2xQGJRB/a5trXuaIndLClx6wC//TfhbzaNFHCPefyU=
Subject key identifier: F2:2B:75:02:04:AC:2E:19:4A:66:60:E1:76:0C:DA:6B:38:C6:C2:2C
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 2FBBF134CBC019ED5CE3266A3F8DE4A5A964891B
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e3135362e3133382e302f32342d3234203d3e203133333335.roa
Signing time: Wed 09 Sep 2026 19:36:13 +0000
ROA not before: Wed 09 Sep 2026 19:31:13 +0000
ROA not after: Wed 08 Sep 2027 19:36:13 +0000
asID: 13335
IP address blocks: 194.156.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:bb:f1:34:cb:c0:19:ed:5c:e3:26:6a:3f:8d:e4:a5:a9:64:89:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Sep 9 19:31:13 2026 GMT
Not After : Sep 8 19:36:13 2027 GMT
Subject: CN=F22B750204AC2E194A6660E1760CDA6B38C6C22C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e7:19:d7:34:cf:f3:26:64:9c:36:c8:ad:e7:
fd:86:d3:07:fe:96:47:5c:ba:c2:80:67:7c:1a:16:
5e:bf:40:40:4b:5d:e8:69:ab:c3:1d:17:48:7e:f8:
7c:c6:0a:85:3a:c3:0c:c2:e3:c3:95:47:8b:be:ef:
6e:9e:de:dc:3e:6a:36:af:7d:24:38:7c:2f:e0:fa:
64:5c:6f:32:f2:8b:e6:82:27:83:c8:0f:4c:e3:fd:
9e:a7:7f:48:ac:70:85:ff:0a:e3:22:bf:29:a9:cd:
96:b3:96:ff:5e:01:74:76:b0:81:2e:bd:a3:2d:04:
2a:c9:74:32:f6:39:34:4f:c8:b9:4d:57:09:c0:ea:
90:03:b0:8e:92:c9:fd:f2:c1:87:d5:d2:7b:3e:9f:
90:1a:dc:0e:1a:a8:13:37:5c:24:f4:38:9a:e0:6a:
58:d4:ff:e2:e7:b9:e9:37:1f:82:60:fa:7e:d2:b3:
eb:3b:d2:bc:24:ca:d1:5e:92:cf:55:99:86:27:53:
a6:1d:7d:c8:46:3d:3c:8b:7c:39:f0:86:56:80:06:
13:55:ca:70:4b:28:f0:78:1d:75:8b:dd:e7:c0:a5:
0b:9e:41:87:64:24:93:8d:48:f5:3e:5c:f7:5f:a9:
88:fc:d6:5e:87:97:72:32:02:a1:f4:bf:84:52:3a:
f9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:2B:75:02:04:AC:2E:19:4A:66:60:E1:76:0C:DA:6B:38:C6:C2:2C
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e3135362e3133382e302f32342d3234203d3e203133333335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.156.138.0/24
Signature Algorithm: sha256WithRSAEncryption
24:f9:96:d0:de:ae:23:41:72:e8:be:f3:c9:ec:f4:a5:98:22:
7b:62:3c:5e:3c:2f:9b:ae:1a:4c:86:ae:98:5e:ab:a5:36:68:
fd:ba:e4:df:be:7f:cb:7b:d7:55:44:14:de:dc:12:13:0a:61:
4a:d0:73:ea:93:fd:aa:57:e8:60:58:17:db:9b:93:b4:f9:ca:
41:b3:e2:3e:fa:c0:d9:da:bb:88:c0:ca:fc:6e:47:21:34:98:
4f:6b:03:97:c7:9b:eb:fb:c3:e1:71:83:ae:7d:69:c0:8c:1e:
77:8b:8b:c7:73:62:91:f5:d8:d2:27:de:16:33:89:c2:1c:64:
33:92:f9:f1:a9:73:4c:a1:fb:e0:26:60:2f:bd:3d:12:d3:52:
a7:18:32:3b:0b:60:89:c5:a6:d4:8d:20:0c:05:f7:76:7e:1c:
a5:63:f6:04:ce:ab:18:d2:1e:ad:da:94:d0:fb:33:f5:fe:00:
92:d0:23:16:c0:10:41:3c:e8:cb:14:66:1b:48:75:24:e0:fe:
ba:b7:ae:ae:4f:63:51:97:37:e6:90:a8:67:c3:8a:81:10:06:
4d:a6:86:29:32:98:18:43:18:1a:13:c0:3c:8b:93:1d:cb:96:
56:2a:29:43:d8:e9:71:83:76:76:b3:b5:ac:76:76:87:2b:32:
60:fb:ad:5f
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUL7vxNMvAGe1c4yZqP43kpalkiRswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj
MjMxM2EzYTAeFw0yNjA5MDkxOTMxMTNaFw0yNzA5MDgxOTM2MTNaMDMxMTAvBgNV
BAMTKEYyMkI3NTAyMDRBQzJFMTk0QTY2NjBFMTc2MENEQTZCMzhDNkMyMkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn5xnXNM/zJmScNsit5/2G0wf+
lkdcusKAZ3waFl6/QEBLXehpq8MdF0h++HzGCoU6wwzC48OVR4u+726e3tw+ajav
fSQ4fC/g+mRcbzLyi+aCJ4PID0zj/Z6nf0iscIX/CuMivympzZazlv9eAXR2sIEu
vaMtBCrJdDL2OTRPyLlNVwnA6pADsI6Syf3ywYfV0ns+n5Aa3A4aqBM3XCT0OJrg
aljU/+Lnuek3H4Jg+n7Ss+s70rwkytFeks9VmYYnU6YdfchGPTyLfDnwhlaABhNV
ynBLKPB4HXWL3efApQueQYdkJJONSPU+XPdfqYj81l6Hl3IyAqH0v4RSOvn3AgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQU8it1AgSsLhlKZmDhdgzaazjGwiwwHwYDVR0j
BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J
eE9qby5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzEzOTM0MmUzMTM1MzYyZTMx
MzMzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzMzMzMzUucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADCnIowDQYJKoZIhvcNAQELBQADggEBACT5ltDeriNBcui+88ns9KWYIntiPF48
L5uuGkyGrpheq6U2aP265N++f8t711VEFN7cEhMKYUrQc+qT/apX6GBYF9ubk7T5
ykGz4j76wNnau4jAyvxuRyE0mE9rA5fHm+v7w+Fxg659acCMHneLi8dzYpH12NIn
3hYzicIcZDOS+fGpc0yh++AmYC+9PRLTUqcYMjsLYInFptSNIAwF93Z+HKVj9gTO
qxjSHq3alND7M/X+AJLQIxbAEEE86MsUZhtIdSTg/rq3rq5PY1GXN+aQqGfDioEQ
Bk2mhikymBhDGBoTwDyLkx3LllYqKUPY6XGDdnaztax2docrMmD7rV8=
-----END CERTIFICATE-----
Generated at Sun Sep 20 22:21:53 2026 by rpki-client