Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e3135362e3133392e302f32342d3234203d3e203133333335.roa
File: 3139342e3135362e3133392e302f32342d3234203d3e203133333335.roa (raw, json)
Hash identifier: +TBH73Vc83PQjgvK+9xup4tnJXmQMdBD7Ts9Y0od1LM=
Subject key identifier: 07:39:70:C6:E3:CF:FC:89:8F:D4:8F:BB:9F:02:6C:3D:9B:E9:0B:01
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 6369CF10954C081695F3FEDC79E7E9C0FB849483
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e3135362e3133392e302f32342d3234203d3e203133333335.roa
Signing time: Wed 09 Sep 2026 19:36:14 +0000
ROA not before: Wed 09 Sep 2026 19:31:14 +0000
ROA not after: Wed 08 Sep 2027 19:36:14 +0000
asID: 13335
IP address blocks: 194.156.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:69:cf:10:95:4c:08:16:95:f3:fe:dc:79:e7:e9:c0:fb:84:94:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Sep 9 19:31:14 2026 GMT
Not After : Sep 8 19:36:14 2027 GMT
Subject: CN=073970C6E3CFFC898FD48FBB9F026C3D9BE90B01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:5f:a6:2a:f9:fb:07:ba:80:31:2a:75:76:40:
e5:4f:3c:a7:89:cb:a7:b6:50:cf:a7:d1:31:6d:2b:
db:28:98:fd:14:e0:56:7a:05:d3:5a:07:fe:6d:a1:
c7:03:86:55:f2:7c:7d:d4:47:18:ac:3c:3d:6e:2d:
b2:a5:88:33:6e:ee:78:b3:60:4b:74:da:84:20:1d:
5c:6f:d7:94:ec:c5:ba:e9:d0:17:34:6f:df:27:3d:
df:fb:ba:b3:7b:26:ff:7e:4a:7f:9b:9f:d7:45:c1:
7c:79:c7:cc:01:22:74:a1:65:e7:3a:2f:fb:28:e7:
80:a9:98:b4:48:6c:9b:22:d9:d7:43:37:7c:86:c3:
1c:4c:c0:01:ca:64:37:6d:5a:0e:07:06:b3:1a:d1:
b5:f8:f4:c1:34:4f:53:3a:8a:31:88:e4:8a:16:6f:
23:b6:ca:44:4d:9d:69:86:5b:0a:cc:60:db:b9:cc:
29:d3:57:6d:00:d3:7a:97:7b:13:4a:fe:b6:9f:88:
d5:73:26:b8:a3:76:9e:c6:3b:2e:66:06:57:ca:9d:
1a:a7:f5:ba:96:83:51:ee:4b:98:48:f8:64:1a:38:
fc:f1:9e:fa:c0:2d:3e:bc:8f:ec:03:b5:a2:5d:a0:
7a:3d:33:84:cc:dd:4d:3b:23:4e:4d:72:6d:44:a9:
e8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:39:70:C6:E3:CF:FC:89:8F:D4:8F:BB:9F:02:6C:3D:9B:E9:0B:01
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e3135362e3133392e302f32342d3234203d3e203133333335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.156.139.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:d8:91:62:88:2e:6c:c9:27:27:32:6c:c1:8f:5b:cb:03:29:
e6:a9:74:71:be:10:01:bf:c8:70:09:ca:f9:fb:5f:67:4a:75:
0d:24:1e:d0:c7:8d:9b:71:3e:9c:61:1c:6b:3f:b4:02:22:8e:
86:e7:10:ae:43:e7:a3:18:de:67:2f:3a:56:0d:24:91:ed:03:
7d:ec:a9:e6:46:c8:0b:b9:ac:1d:4f:98:fb:7f:db:f5:61:5c:
d4:b9:bb:41:84:71:a5:ac:b1:ba:25:3f:1c:9d:b0:00:36:5e:
32:1e:f3:be:79:a1:05:51:f7:1d:06:6c:03:f1:1f:2f:ed:9d:
db:b2:9f:2f:fa:03:0a:08:e4:16:0b:6e:f9:0b:73:c3:9f:f8:
02:3c:44:bf:3e:d5:63:53:46:b3:7c:cc:e6:6f:02:4f:f9:73:
d9:48:1c:13:40:1e:55:cd:d3:9b:ee:37:55:b7:8e:dd:76:bc:
51:3a:f5:6e:81:81:70:42:24:60:63:ec:04:e0:ed:56:a7:b8:
50:2f:2d:83:c2:52:b3:5e:e6:11:6f:c4:b3:65:c5:0b:c7:cf:
ae:ea:88:f1:b7:92:b9:ff:ef:d8:18:84:86:8d:0b:59:01:5c:
25:00:4a:d2:28:66:5d:f6:4b:ed:ae:cb:71:16:96:0a:1a:bb:
a4:50:91:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 22:23:24 2026 by rpki-client