Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e33312e35322e302f32342d3234203d3e203437353833.roa
File: 3139342e33312e35322e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier: 6oj0n5Nj/3OWXQO1iqV+8YAFpx1Wuhzifoem+HIhP0Q=
Subject key identifier: 67:78:F4:8A:A4:72:2A:FE:F5:BA:D4:FB:EC:5F:68:CD:49:87:8B:6A
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 4AE4319F49B174C06F96E7E02ABB01BE273F5F34
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e33312e35322e302f32342d3234203d3e203437353833.roa
Signing time: Mon 02 Nov 2026 16:32:48 +0000
ROA not before: Mon 02 Nov 2026 16:27:48 +0000
ROA not after: Mon 01 Nov 2027 16:32:48 +0000
asID: 47583
IP address blocks: 194.31.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 21:32:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:e4:31:9f:49:b1:74:c0:6f:96:e7:e0:2a:bb:01:be:27:3f:5f:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Nov 2 16:27:48 2026 GMT
Not After : Nov 1 16:32:48 2027 GMT
Subject: CN=6778F48AA4722AFEF5BAD4FBEC5F68CD49878B6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:68:67:c0:ea:29:38:e6:b3:3d:16:47:9c:80:
9c:26:0d:e7:6c:02:25:b2:86:da:ff:f8:da:e3:57:
0a:73:7b:e4:0c:fc:1e:5e:21:fb:a4:aa:b7:64:83:
b9:a0:b6:fa:02:5e:a5:50:8e:4e:30:48:fa:d2:28:
f2:b2:91:d6:a6:90:9c:22:43:18:7d:cb:4a:ae:2a:
bf:5b:a5:b7:a6:42:fe:f0:57:59:33:9a:4c:b3:53:
29:d9:34:79:81:81:33:3a:5a:1b:7a:72:2e:5e:1b:
64:5b:44:07:8a:50:24:20:8a:0e:72:32:89:44:ae:
4b:5d:63:3a:64:d1:8a:55:c0:3d:71:03:2c:3c:7b:
20:f0:ac:e3:aa:c1:12:6b:51:2c:0c:a1:a5:35:78:
4f:74:d3:73:65:20:21:72:61:9a:bd:15:2f:4b:10:
66:b6:c9:e2:42:63:93:f7:ab:7c:3e:3a:70:8a:d7:
e8:67:a2:ff:bb:19:ef:28:9a:e9:44:e3:ff:6b:4f:
99:3c:c3:f9:d0:4e:e0:48:f6:af:27:b9:de:7f:c7:
25:e5:98:9a:be:a8:13:f8:bd:1b:3f:e9:2b:11:9b:
9e:e4:19:52:83:06:58:dc:79:46:d1:b0:01:19:d2:
05:47:b8:af:7b:5b:37:3c:0e:47:10:e0:d0:20:b1:
41:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:78:F4:8A:A4:72:2A:FE:F5:BA:D4:FB:EC:5F:68:CD:49:87:8B:6A
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e33312e35322e302f32342d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.52.0/24
Signature Algorithm: sha256WithRSAEncryption
71:ef:45:75:d1:e1:ea:bf:67:9e:bc:b1:76:f3:a2:63:1c:0d:
e9:64:69:23:b4:b0:de:f7:ad:2a:ee:f5:d7:7f:a9:da:82:bf:
f8:9c:40:41:77:d9:fa:63:8e:55:ae:da:66:37:e7:e4:19:f3:
3f:5f:34:e2:61:c5:42:79:36:5b:0e:c2:95:db:03:8c:cf:d5:
c8:bc:46:2f:fc:ec:9e:0c:29:14:7a:28:76:ba:ec:22:ec:94:
57:2a:4c:0c:1c:6d:db:ee:cc:25:de:7f:f0:36:2a:72:f8:76:
7a:bc:8b:2d:89:d2:89:f5:95:ea:9a:bf:dc:5f:46:c5:51:84:
01:91:51:92:e8:73:04:a4:93:26:dc:98:c5:07:3e:47:e5:b8:
98:1d:52:cf:99:9d:6d:d0:09:22:22:4c:c7:f8:48:c0:ba:70:
49:5b:45:9e:a9:15:d8:68:4f:8c:49:ff:6a:3c:95:4b:43:61:
8a:da:b7:65:14:56:a3:41:53:0d:38:45:2d:3c:5c:f7:2b:56:
2e:23:46:fd:04:8e:3e:c1:96:7f:e0:4c:61:14:33:1f:1d:d7:
05:5e:7b:66:73:77:89:9e:5c:17:00:0a:b9:1c:b8:8c:7c:6c:
04:01:a3:42:99:f7:84:2c:56:1c:e1:a8:fc:81:00:4a:5b:72:
2c:7a:2b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 07:37:28 2026 by rpki-client