Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e392e33342e302f32342d3234203d3e20323132323338.roa
File: 3139332e392e33342e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: +pmCDa3l2HiGjYJZmXl6dLP0XghvZ0n9FW9G2FvdCxA=
Subject key identifier: FA:AC:52:03:3C:77:F0:3A:A6:DE:FB:0B:08:4D:84:20:CB:26:82:50
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 708916B481F321B1B2F724CE21C91F60673CD09A
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e392e33342e302f32342d3234203d3e20323132323338.roa
Signing time: Tue 22 Sep 2026 13:29:11 +0000
ROA not before: Tue 22 Sep 2026 13:24:11 +0000
ROA not after: Tue 21 Sep 2027 13:29:11 +0000
asID: 212238
IP address blocks: 193.9.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:89:16:b4:81:f3:21:b1:b2:f7:24:ce:21:c9:1f:60:67:3c:d0:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 22 13:24:11 2026 GMT
Not After : Sep 21 13:29:11 2027 GMT
Subject: CN=FAAC52033C77F03AA6DEFB0B084D8420CB268250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:01:ff:c8:1c:07:a3:3f:3e:f3:db:43:99:a0:
40:c5:aa:8d:c7:05:11:10:4f:6a:59:47:79:36:de:
89:bd:cd:04:54:d8:b5:2c:1a:8a:79:ee:c8:c0:da:
32:c7:ba:3c:de:44:0d:e3:f6:01:0e:f4:47:c9:d8:
79:b7:9e:97:a9:ef:53:3f:a5:4b:5d:05:06:8d:09:
90:c2:4b:d5:b3:15:1e:f8:ab:37:4a:2d:2a:3c:ad:
ce:33:68:54:f8:61:15:c7:75:12:60:46:f2:a9:9a:
47:17:0a:3e:57:a1:ca:8b:6a:2e:3b:66:bf:12:89:
ff:0b:bc:a0:1a:70:5e:8e:28:09:cd:e9:ae:df:80:
0b:f0:b1:4c:e2:36:73:7d:8c:0c:12:e5:f3:17:73:
37:65:4e:0d:bd:13:4c:87:47:23:9d:cc:99:90:25:
02:bf:06:52:9b:92:7f:f7:80:a3:d3:73:29:bd:13:
e2:94:47:4c:35:0f:13:25:78:93:fe:e5:eb:a0:25:
7e:28:1a:c1:f6:dd:08:2e:fd:d2:33:e8:78:0b:19:
df:53:8c:86:1e:e6:14:78:43:e3:d5:f5:77:d1:ae:
3f:c4:c9:b1:9e:b8:a5:a5:6f:0d:ca:e8:2e:78:68:
d3:43:1e:69:fd:23:e9:72:dc:aa:59:a9:5a:93:23:
ee:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:AC:52:03:3C:77:F0:3A:A6:DE:FB:0B:08:4D:84:20:CB:26:82:50
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e392e33342e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.9.34.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:b9:0b:dd:63:94:d9:17:42:9c:86:52:d0:57:24:2f:c9:4e:
a9:67:d1:a8:b3:5f:18:ef:f1:1a:99:76:a7:ea:bd:87:82:d3:
7b:23:aa:0d:8d:a7:f4:9d:fb:6e:f6:65:2c:28:7c:66:05:71:
e5:43:d4:e4:48:2f:2f:0a:e6:bb:d5:b3:6b:fb:76:e6:db:84:
c6:d9:c4:7e:ac:c9:e3:c3:84:33:49:b7:4d:5b:34:bb:8a:45:
37:4b:8c:b7:12:05:c0:c5:19:75:8d:35:2a:f9:91:a4:09:6a:
8b:6f:a1:63:13:eb:54:18:cf:7d:e2:83:f4:d8:c4:a9:dd:69:
66:ed:0c:3c:2a:bf:11:86:54:b0:1a:82:dd:d6:03:42:bf:a8:
71:c3:85:56:c2:ee:2f:f8:4e:94:1c:63:0e:77:e0:28:f6:0c:
59:d9:b6:96:7c:14:92:d3:e7:b4:1c:a8:2d:b0:bb:9f:d1:fc:
ce:6e:ff:05:37:47:d5:f0:a2:f8:72:d7:21:30:44:9f:98:b4:
f1:34:d0:17:25:81:7a:4c:bb:12:3e:17:ca:5e:ae:60:5c:2c:
2b:66:c1:f1:ac:70:ac:96:e2:5d:2e:20:4d:e5:5c:de:b1:75:
bc:01:ef:0a:e7:9e:e4:94:d5:9d:5a:22:7c:e2:1c:71:eb:62:
82:05:19:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:35:43 2026 by rpki-client