Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137362e3132362e38332e302f32342d3234203d3e203439333637.roa
File: 3137362e3132362e38332e302f32342d3234203d3e203439333637.roa (raw, json)
Hash identifier: ubXvIg6rfODIYBAdRqkipGoiPWsjezKrbmePAzwUx6c=
Subject key identifier: 50:A0:F7:B0:82:3D:45:7F:90:F8:B1:D2:B8:1A:31:27:17:EA:8C:41
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 581A5499537E0914420A32F81C21B80404F117A6
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137362e3132362e38332e302f32342d3234203d3e203439333637.roa
Signing time: Tue 14 Jul 2026 20:26:14 +0000
ROA not before: Tue 14 Jul 2026 20:21:14 +0000
ROA not after: Tue 13 Jul 2027 20:26:14 +0000
asID: 49367
IP address blocks: 176.126.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:1a:54:99:53:7e:09:14:42:0a:32:f8:1c:21:b8:04:04:f1:17:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 14 20:21:14 2026 GMT
Not After : Jul 13 20:26:14 2027 GMT
Subject: CN=50A0F7B0823D457F90F8B1D2B81A312717EA8C41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:be:21:dd:8a:cd:f2:db:c3:1c:44:d7:6a:62:
78:ea:46:9b:e1:c8:30:67:53:e0:13:74:9f:b1:08:
c8:f2:1f:a1:e0:c7:da:8f:dd:62:ac:16:92:97:d1:
d6:b5:47:2a:44:da:16:24:e7:be:34:3c:69:82:4d:
3e:6f:ac:dd:99:7b:a3:5c:4c:e1:1c:dd:b6:a0:9b:
b6:14:1f:68:db:03:ad:8c:02:7c:39:1a:d3:2b:d5:
d0:dc:12:45:75:73:5d:5d:e8:54:f3:af:01:18:bf:
68:6b:1b:55:7a:0e:b5:19:7f:00:d9:5c:75:78:af:
24:6c:75:d3:71:0f:9f:66:f0:09:3f:32:18:c9:e7:
15:5a:ea:51:9e:b4:06:a3:c2:ea:87:5c:7b:62:96:
2a:c7:7d:9d:4b:49:f9:ec:77:d8:72:ad:07:8a:17:
08:d8:9e:8d:38:10:8c:62:97:5b:35:99:3f:22:06:
8b:97:48:69:4a:70:1c:27:60:5c:0d:1c:1a:54:47:
fe:55:5c:d7:9c:d2:6c:62:0d:43:82:b5:7f:f5:57:
36:ae:73:02:30:ee:70:3b:ea:02:2b:a5:43:fb:06:
33:1f:9b:41:f4:15:3a:42:ae:dd:35:44:cb:9c:6f:
a3:0a:61:da:60:fb:79:a5:22:2a:40:96:eb:4c:f8:
20:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:A0:F7:B0:82:3D:45:7F:90:F8:B1:D2:B8:1A:31:27:17:EA:8C:41
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137362e3132362e38332e302f32342d3234203d3e203439333637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.83.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:46:f4:44:9d:89:a9:f3:8c:72:e1:2a:74:1c:eb:d8:48:a1:
ca:97:af:97:73:dc:89:88:8f:35:67:f3:27:ca:16:20:53:dd:
44:5a:8c:a9:d5:dc:26:51:96:c8:55:31:ed:2d:6a:e1:89:17:
2a:de:84:56:e7:93:50:0c:ae:8f:6e:aa:cf:48:47:e5:7f:d1:
ae:a4:c1:cf:19:b1:3c:a1:d4:0e:44:99:b6:17:60:7a:22:24:
f2:f8:58:c2:49:cb:9e:32:04:52:7b:70:59:70:5b:4f:23:ef:
e7:79:df:1d:12:c1:4e:5f:ea:23:7c:43:53:11:93:84:fa:7e:
33:e1:7d:64:b1:92:e9:41:f7:b5:3a:6b:24:c1:f7:0f:ca:7e:
a6:3c:23:ba:9c:e3:a4:2a:2b:7b:b8:11:5f:7a:95:29:d0:b9:
36:8d:03:63:3f:e8:38:87:56:f1:d5:26:db:ad:c6:33:3b:12:
f4:b5:51:a1:ab:ef:97:8b:c1:e2:28:ab:4f:e6:df:68:25:d2:
7b:19:d9:c4:78:1d:ba:53:b5:c3:a5:88:13:4f:d3:c0:04:e2:
bf:3a:bf:73:c8:9a:63:2c:17:2b:c3:0c:25:b9:ba:43:59:e9:
f1:e0:a9:97:a1:f2:3b:4f:65:e1:ec:38:20:31:92:d9:e7:09:
40:c5:f5:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:34:09 2026 by rpki-client