Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e392e33322e302f32342d3234203d3e20323132323338.roa
File: 3139332e392e33322e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: N5n4cwqFDml4Ah7SVepNHvJzX+svLJCNO6Ynx4UJcVo=
Subject key identifier: 09:CF:84:36:D8:EF:15:C0:3B:7F:F8:27:51:C3:6A:DB:3A:D1:70:E4
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7A05A3E8FC6AC6D64FA03304A9D62259334FDF39
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e392e33322e302f32342d3234203d3e20323132323338.roa
Signing time: Tue 22 Sep 2026 13:29:13 +0000
ROA not before: Tue 22 Sep 2026 13:24:13 +0000
ROA not after: Tue 21 Sep 2027 13:29:13 +0000
asID: 212238
IP address blocks: 193.9.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 21:04:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:05:a3:e8:fc:6a:c6:d6:4f:a0:33:04:a9:d6:22:59:33:4f:df:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 22 13:24:13 2026 GMT
Not After : Sep 21 13:29:13 2027 GMT
Subject: CN=09CF8436D8EF15C03B7FF82751C36ADB3AD170E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c6:7a:c9:e2:4d:4a:26:2c:f6:06:9d:01:3d:
44:5f:73:ac:00:88:a5:e1:d1:29:fc:5d:58:f4:40:
2b:25:4b:d6:28:5e:ab:01:7a:d1:c0:53:23:bb:84:
fc:69:66:ec:be:6d:a3:df:33:2a:2c:e2:9d:71:03:
f8:ce:e8:1f:3b:82:b2:4e:49:ee:00:95:35:b2:81:
3a:ec:2f:b5:2c:3e:38:18:61:d2:68:cb:fd:b9:f7:
df:a5:37:5c:a5:72:86:fd:9c:44:aa:bc:f8:6c:1a:
e4:00:ac:94:7b:35:79:46:5d:58:09:6d:c6:e0:13:
65:d5:df:eb:87:b1:5a:d8:c1:cd:72:96:5e:57:26:
63:d6:81:93:ce:d1:06:08:02:f6:63:3f:10:91:bf:
6c:36:22:09:95:ef:4e:b7:05:8f:c7:c6:67:7e:1e:
b3:db:88:49:c8:8c:1c:e8:7c:22:c8:28:b3:03:a4:
1b:1b:fb:f1:88:88:a5:ec:2c:e6:9b:6f:66:37:45:
28:a0:64:7f:2d:e2:aa:18:e8:ce:e2:26:ba:32:ac:
f4:03:71:00:7b:1f:90:f4:e6:e9:3d:17:9d:dd:40:
c2:00:ce:04:f1:6b:d8:6c:49:72:54:ea:f2:f7:1c:
2d:15:41:2e:f5:8f:8f:99:a0:23:72:17:96:19:e4:
86:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:CF:84:36:D8:EF:15:C0:3B:7F:F8:27:51:C3:6A:DB:3A:D1:70:E4
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e392e33322e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.9.32.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:cd:bc:b5:7e:ff:17:82:fa:48:a6:4d:2b:d2:5b:5d:5f:81:
83:30:5d:45:56:8c:b9:5b:07:67:88:88:0e:63:04:d7:c8:79:
01:0f:5f:99:c0:1f:9d:0b:8f:21:bc:24:c5:97:57:25:46:6b:
7c:0a:7f:0e:f0:0d:19:09:08:89:77:92:87:83:f4:71:6f:e2:
42:2e:b1:53:45:aa:fd:88:04:f1:54:ad:af:c8:41:51:73:0e:
90:b1:21:80:68:9b:a6:68:db:74:08:82:4c:33:5d:1a:3e:72:
46:1c:21:3d:ee:44:a1:18:f9:15:29:53:98:d8:3a:d6:e1:0e:
68:f5:49:7c:15:cb:08:92:00:f3:fe:39:d3:25:3b:41:12:04:
e3:76:a1:e7:4c:2c:79:bc:ef:39:d1:00:95:a2:a6:79:2d:b8:
22:19:6b:2f:88:c4:63:71:6c:e3:f2:37:87:50:c3:b9:16:4c:
04:3c:64:1a:bb:02:fb:ff:5a:1a:0d:40:d9:e1:f5:eb:cb:88:
23:5c:43:9d:bd:8b:71:6a:e6:67:e1:f9:25:58:1e:cd:3e:9b:
55:6a:05:89:e3:63:87:4c:b0:ac:b0:15:87:0d:b3:f6:31:ab:
dd:e4:51:e4:bf:f7:49:25:e6:8e:b4:c9:80:22:81:80:35:e2:
3a:d2:f3:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:31:23 2026 by rpki-client