Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137362e3131392e3139352e302f32342d3234203d3e20323034313730.roa
File: 3137362e3131392e3139352e302f32342d3234203d3e20323034313730.roa (raw, json)
Hash identifier: QQV+BvJ5N6gHeSWVdsThZ5sWkVV1kNazXsi7A1eoE4c=
Subject key identifier: D1:A2:AC:0D:9D:16:8E:13:3C:FB:00:45:E9:25:BE:B4:64:58:F5:9F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 341A76F295195B95D1924DC27D9F31C907AF1612
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137362e3131392e3139352e302f32342d3234203d3e20323034313730.roa
Signing time: Tue 28 Apr 2026 23:23:56 +0000
ROA not before: Tue 28 Apr 2026 23:18:56 +0000
ROA not after: Tue 27 Apr 2027 23:23:56 +0000
asID: 204170
IP address blocks: 176.119.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:1a:76:f2:95:19:5b:95:d1:92:4d:c2:7d:9f:31:c9:07:af:16:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 28 23:18:56 2026 GMT
Not After : Apr 27 23:23:56 2027 GMT
Subject: CN=D1A2AC0D9D168E133CFB0045E925BEB46458F59F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:bd:0e:aa:da:e3:ac:5d:d2:2f:06:a6:84:ba:
ec:ff:77:65:fa:cc:ca:ec:eb:de:8a:df:4f:78:ad:
de:5e:3e:19:fd:c1:1f:59:ca:e8:3e:73:a1:57:5c:
7e:8b:58:86:82:34:e9:4e:4c:7e:a6:8a:67:51:45:
31:8d:f9:18:7d:03:8e:95:96:75:c5:ca:fc:9f:6c:
24:a8:38:d1:91:58:4d:8e:06:79:fb:52:e0:76:e5:
73:63:08:ec:4a:6a:7d:d2:09:af:34:5f:3e:f6:5c:
ad:9b:b5:4e:74:69:04:25:49:b4:30:5c:92:36:52:
84:9a:cc:b9:b9:aa:f5:b2:2e:a3:9c:15:af:06:37:
0f:bc:b0:6e:35:a7:b1:52:b0:94:08:8c:a0:9b:f8:
7e:b0:28:26:02:87:1c:44:79:5f:09:4c:69:e5:5e:
d8:93:fb:d7:00:56:42:76:9a:9c:4a:27:b0:e4:2b:
f9:fc:56:78:a5:cb:a4:73:33:7e:75:f4:2b:fc:d2:
61:ee:4b:04:cc:2b:d4:c8:f8:d3:7c:ac:c2:2f:d4:
b3:90:8f:be:0b:7b:c8:53:39:0c:ae:9c:fb:9c:e4:
78:2a:64:e1:1a:47:de:90:de:5c:a3:b0:c2:6f:75:
f6:b9:4c:9d:13:e5:fd:b2:a8:5d:42:4c:22:5f:bb:
67:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A2:AC:0D:9D:16:8E:13:3C:FB:00:45:E9:25:BE:B4:64:58:F5:9F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137362e3131392e3139352e302f32342d3234203d3e20323034313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.119.195.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:08:09:10:2b:9e:a7:82:9f:97:dd:4d:5a:e3:1f:7e:a0:10:
37:ba:a8:5b:0c:f3:c6:a1:3f:73:78:1d:0e:43:ff:b1:69:62:
21:26:66:0b:27:d8:3c:2f:0e:87:fe:6e:38:9e:98:c7:c1:57:
13:3d:a5:75:b1:bb:d2:e3:e5:dc:be:20:66:d0:26:28:e6:dd:
08:73:0d:a0:4d:10:fb:f0:a2:97:ad:76:47:74:a4:2e:34:b4:
6d:58:03:d6:a4:83:e6:3c:e6:77:3a:26:9a:44:26:fe:8c:10:
4c:79:3b:86:b2:aa:94:5b:25:f9:c3:24:64:53:38:61:8d:97:
2e:c1:85:f7:9d:b5:cf:17:3b:d3:49:ae:a1:7e:ff:24:d2:48:
d8:9b:82:0e:3d:bd:0c:1c:fd:73:2a:67:c6:42:ae:f5:5e:c8:
24:7f:12:ad:03:d4:78:a4:b2:a7:48:7a:e3:be:99:d6:7e:71:
03:2d:b2:c7:21:0a:e5:a9:aa:68:fe:7f:d5:3e:1c:fb:94:c0:
99:25:29:67:1c:82:34:75:ba:09:e1:96:13:5c:2c:39:76:41:
dc:aa:6d:6c:1d:8d:5b:10:1f:53:6c:6c:61:8f:b0:b7:a0:58:
e3:cd:22:20:ae:89:d3:a1:a5:3c:47:a9:36:84:81:ab:79:bb:
58:34:05:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:19:57 2026 by rpki-client