Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139322e3134352e38312e302f32342d3234203d3e20323034313730.roa
File: 3139322e3134352e38312e302f32342d3234203d3e20323034313730.roa (raw, json)
Hash identifier: q6mT0gqF3RXGZiVP7okEKO2D3X/eZtMLmBI+8hQVTSI=
Subject key identifier: 1D:B7:7E:FD:D3:F2:6E:23:74:84:EA:7B:91:47:8B:AD:5A:B6:79:F9
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2E391F687513B3791F5A82573F9A86C5CCE58523
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139322e3134352e38312e302f32342d3234203d3e20323034313730.roa
Signing time: Tue 28 Apr 2026 23:23:55 +0000
ROA not before: Tue 28 Apr 2026 23:18:55 +0000
ROA not after: Tue 27 Apr 2027 23:23:55 +0000
asID: 204170
IP address blocks: 192.145.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:39:1f:68:75:13:b3:79:1f:5a:82:57:3f:9a:86:c5:cc:e5:85:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 28 23:18:55 2026 GMT
Not After : Apr 27 23:23:55 2027 GMT
Subject: CN=1DB77EFDD3F26E237484EA7B91478BAD5AB679F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:31:63:c4:75:34:df:c1:1c:a8:fa:f1:b5:7b:
19:6e:6e:17:25:9c:14:d8:a7:91:e6:ba:06:e7:ec:
f5:52:1b:ca:23:3c:e7:fe:2e:f9:89:76:39:d0:fb:
b0:4c:5a:c6:02:ce:e0:75:23:2e:bb:26:07:7b:af:
8d:4d:8d:54:28:ac:8f:85:bf:26:a8:ce:f5:af:23:
16:ab:e9:e2:38:71:0a:c4:c2:ff:4d:8b:d5:e0:4a:
80:98:6e:c0:c3:cc:95:9c:97:26:12:83:f6:37:84:
6c:85:f1:79:04:12:e6:c7:ce:1a:75:a0:49:27:a7:
02:fa:c0:8b:f3:5c:d1:75:ef:04:8d:95:ae:1d:df:
f1:d9:4b:28:ba:a0:29:57:5e:d8:a4:b4:9f:75:9c:
a3:28:95:56:e0:33:68:39:b9:ad:65:6f:b4:cf:f4:
d7:21:be:4d:de:4e:6d:dc:16:dc:aa:38:39:e8:23:
2a:55:92:91:04:47:0d:ba:f0:ef:62:5a:74:00:73:
5c:f2:78:49:a5:22:fc:cf:dc:81:d2:81:bc:f4:81:
be:06:75:55:8f:13:23:31:74:67:20:3e:1a:42:1c:
b2:a2:5c:6e:06:6f:72:6c:7d:49:21:7d:dd:f9:27:
ec:83:e8:d9:a2:b0:12:1f:9a:e6:de:d9:2b:e0:ad:
b0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B7:7E:FD:D3:F2:6E:23:74:84:EA:7B:91:47:8B:AD:5A:B6:79:F9
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139322e3134352e38312e302f32342d3234203d3e20323034313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.145.81.0/24
Signature Algorithm: sha256WithRSAEncryption
48:40:47:f8:f7:7a:dd:05:ce:b2:1f:7c:00:76:2d:bc:fe:04:
bd:a4:b2:54:48:9e:a5:cb:b5:55:76:a4:4b:f2:a5:13:48:09:
55:72:db:8c:93:fb:d2:cd:2b:67:ce:77:8a:0f:fd:18:40:a0:
87:54:50:2e:57:2e:d2:0b:ba:0e:99:0d:4b:56:f6:88:14:23:
6c:67:de:b9:56:c4:02:3f:7b:fd:1f:a2:62:e8:e6:5a:75:a9:
37:24:5e:d2:cf:95:b2:00:11:86:83:b9:b8:36:aa:3d:da:77:
c6:32:08:c0:0e:e7:f9:4f:c1:93:2a:d6:78:f4:98:41:64:d7:
13:74:a8:51:1d:be:4b:d4:d3:2c:72:13:e8:9e:85:ce:1d:1c:
ad:21:93:3f:15:d4:a5:c9:1d:b4:dc:8c:81:d2:6e:f5:3b:58:
f0:ec:4c:0d:f9:78:a2:20:18:70:47:a2:69:0e:db:a3:0e:fd:
0d:03:92:55:0f:c3:06:5a:62:4f:34:6f:a2:ed:e7:ec:55:15:
96:d6:f9:eb:c5:54:99:9f:99:07:78:0d:45:0a:30:23:70:95:
4e:b3:fa:76:3f:bf:fc:c4:bf:a5:56:d4:60:24:7c:5a:60:69:
8c:1d:48:ef:81:e1:7e:a7:6e:27:3b:32:5e:3f:42:87:f9:d9:
19:3a:bd:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:30:34 2026 by rpki-client