Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3136392e34302e31342e302f32342d3234203d3e20323136323533.roa
File: 3136392e34302e31342e302f32342d3234203d3e20323136323533.roa (raw, json)
Hash identifier: /fS04a0Rm0sJNll7MoqrRH0qH1edNxeEOU2TLXp9L2k=
Subject key identifier: 25:8A:E0:74:D6:0E:4B:46:E4:48:44:2D:54:06:98:C5:D4:7F:2E:2E
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 14FA9E7AD2331EE1C5CBED7B3527B2C312DD4EF1
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3136392e34302e31342e302f32342d3234203d3e20323136323533.roa
Signing time: Tue 10 Mar 2026 12:33:59 +0000
ROA not before: Tue 10 Mar 2026 12:28:59 +0000
ROA not after: Tue 09 Mar 2027 12:33:59 +0000
asID: 216253
IP address blocks: 169.40.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:fa:9e:7a:d2:33:1e:e1:c5:cb:ed:7b:35:27:b2:c3:12:dd:4e:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 10 12:28:59 2026 GMT
Not After : Mar 9 12:33:59 2027 GMT
Subject: CN=258AE074D60E4B46E448442D540698C5D47F2E2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ab:f3:7a:8f:0f:b8:7e:e0:bf:c6:c7:b7:11:
39:9b:79:75:ad:36:15:c3:bb:cd:34:97:e0:b6:43:
96:6b:d9:d5:b6:db:9a:0f:08:9e:6d:46:17:f1:f6:
e9:09:db:b5:2f:18:56:12:72:da:7a:9d:08:9e:bf:
30:b7:92:0d:d0:09:04:88:ad:35:49:b7:1f:0e:09:
52:42:f2:f5:61:dc:ba:d7:ea:d5:24:91:82:7f:ad:
07:70:91:1b:9e:e2:43:3c:2e:48:ee:2a:de:e3:e0:
d3:e6:b9:bc:d9:b4:69:d7:f6:cf:87:2f:2c:df:ad:
70:0f:c2:6a:74:c9:c9:8d:00:93:aa:99:75:bb:f4:
b2:9c:bb:dd:ba:a4:9e:ce:d2:2c:69:72:f3:da:1e:
d6:30:4a:c7:b5:ef:21:dc:84:f2:db:d1:fc:0e:5a:
9d:e2:57:d5:b0:26:86:a8:89:cc:04:13:d4:6b:e6:
d6:2c:9a:f6:e7:71:b4:79:55:ee:19:3e:f0:2b:5c:
ba:bf:41:14:f0:ed:16:41:5c:3c:76:75:3f:d6:18:
40:5d:c2:9d:26:f5:ce:d3:c3:6f:9e:40:0e:a4:d7:
fa:87:50:82:fd:40:7a:87:bb:ad:f7:6a:1f:a3:26:
cd:cf:4f:f0:92:ab:19:1b:e0:14:43:85:38:e5:ed:
02:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:8A:E0:74:D6:0E:4B:46:E4:48:44:2D:54:06:98:C5:D4:7F:2E:2E
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3136392e34302e31342e302f32342d3234203d3e20323136323533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
169.40.14.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:0c:49:18:33:f2:77:9f:7b:33:57:47:12:66:e0:6d:7d:5f:
a5:e6:19:cd:75:95:70:ce:cf:e3:9d:cc:51:dd:73:f7:e0:8d:
fe:a5:b3:bc:22:41:b0:99:9d:f7:67:db:04:d3:b4:5c:e1:8a:
3e:b8:33:cd:94:e5:5e:3f:3c:c5:43:2b:4b:60:c8:d8:2d:db:
96:83:d9:3e:53:27:2e:b7:93:7d:30:ba:39:95:e7:17:fa:f7:
d0:e2:f1:48:32:90:55:21:93:9d:8e:ca:a0:c0:68:1b:1a:df:
8f:ab:46:03:bb:7b:97:53:9b:3c:fb:28:64:c1:1f:a8:57:5a:
71:9a:2f:4e:6b:7b:06:a5:f8:be:28:c3:1d:e1:b6:2c:28:b1:
9f:eb:95:8f:b7:aa:a7:f7:f6:f2:2e:d4:bc:d9:17:b8:8b:39:
72:84:f0:42:a4:99:ab:fe:02:ef:35:d7:98:94:48:fe:c4:90:
89:13:57:91:71:ea:02:fd:92:b1:32:69:95:5c:9c:fe:34:b8:
ee:ba:c5:fc:bd:6c:a2:a0:8a:25:dc:5c:fd:3f:9f:9d:d6:db:
c5:89:1c:0b:e7:9e:f8:51:ef:b6:4d:1d:10:22:82:8b:07:7f:
2a:ff:44:20:4e:73:02:24:5c:d6:11:ee:f1:a6:c9:f9:6b:10:
94:93:8e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:13:53 2026 by rpki-client