Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3130372e3136312e302f32342d3234203d3e20313336373837.roa
File: 3139342e3130372e3136312e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: ldFkbMXXQ7n24KbjetyLdIEl+xxU0Xfnm3DildJp8JA=
Subject key identifier: A1:41:F5:5A:38:2E:4B:13:6D:85:F7:39:F8:DE:22:35:3C:43:74:F7
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 15E1C670F66C62FCC5FE45391DDBFFDFA4AFF686
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3130372e3136312e302f32342d3234203d3e20313336373837.roa
Signing time: Tue 22 Sep 2026 11:29:06 +0000
ROA not before: Tue 22 Sep 2026 11:24:06 +0000
ROA not after: Tue 21 Sep 2027 11:29:06 +0000
asID: 136787
IP address blocks: 194.107.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 21:04:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:e1:c6:70:f6:6c:62:fc:c5:fe:45:39:1d:db:ff:df:a4:af:f6:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 22 11:24:06 2026 GMT
Not After : Sep 21 11:29:06 2027 GMT
Subject: CN=A141F55A382E4B136D85F739F8DE22353C4374F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:ca:38:88:87:a0:c0:6c:d9:59:26:5d:18:a0:
18:25:61:41:15:92:55:b6:dc:93:db:fa:df:bd:8b:
b7:f6:44:80:3f:ac:49:14:b9:c4:a2:95:50:38:34:
10:25:9c:d7:12:ef:ca:10:9a:7a:e0:73:be:f4:7d:
47:e1:b1:af:f7:18:ba:07:8b:a7:74:3e:5a:00:78:
9e:7b:c7:74:41:a6:a1:a2:e2:4d:80:b1:f7:e5:19:
0a:3a:0e:bd:2b:62:b4:05:0d:f2:18:8a:45:a8:16:
2e:cc:2b:1a:01:dc:b5:5a:4f:e8:68:df:c7:3c:7f:
e6:25:10:96:51:90:a8:f9:c6:3d:1c:a4:c5:2f:5e:
4a:5b:f1:3c:cf:29:4e:b5:bd:46:2e:d8:2c:d1:bc:
83:fc:d7:be:bf:9a:6a:42:14:1d:65:54:ca:7f:14:
74:01:7b:fe:66:7b:29:f8:29:cc:22:46:7b:70:1d:
42:ab:ac:55:6e:bb:cc:5a:0d:8c:be:2d:41:9f:69:
0a:11:27:11:13:55:0a:40:d3:b2:89:43:25:a1:9b:
8a:7b:a2:28:59:22:c9:6d:0c:c9:ad:d5:dd:06:82:
57:a0:21:2a:03:7c:84:72:a8:b5:4d:13:9a:68:bd:
eb:74:f9:6d:f5:9f:3d:2f:7f:c1:75:f4:e1:7d:1e:
5b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:41:F5:5A:38:2E:4B:13:6D:85:F7:39:F8:DE:22:35:3C:43:74:F7
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3130372e3136312e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.107.161.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:dd:c3:7a:58:46:6c:97:b3:c5:b4:fd:ad:8c:5e:42:c5:8d:
cb:a0:7f:98:e5:66:90:22:39:71:78:4b:1f:51:81:8a:68:14:
55:83:9d:53:9b:31:ea:36:88:2f:5e:21:b0:f8:c2:e9:24:0f:
27:07:b8:d3:39:b7:cb:2e:e4:a8:38:eb:32:cc:8a:74:95:dd:
1c:0b:65:8a:1e:2a:3f:a3:c3:0c:95:bd:4f:3e:00:88:f7:38:
71:72:76:f1:c5:30:2d:d7:a5:85:14:0f:2e:a1:f2:80:37:92:
e6:95:cd:cd:f5:c6:25:1e:f4:c0:21:d2:eb:42:13:ae:b7:93:
0d:39:98:aa:0b:05:20:e9:ba:4f:50:32:c8:a0:8e:fc:84:26:
a2:d1:2c:7e:9e:39:e0:52:f0:e4:73:70:b7:0e:73:22:0f:5f:
90:6b:c8:94:cd:67:37:90:db:cf:e7:83:11:66:a3:e3:59:aa:
0d:03:0b:14:b5:0a:58:f2:55:42:4a:8c:ab:1d:52:5f:73:45:
64:0d:15:be:71:d3:e4:da:47:f3:a7:57:1b:5a:39:0a:dc:ee:
8a:24:e2:49:e0:97:7e:9e:a2:0a:70:a5:e1:45:31:4b:d7:18:
85:ea:2a:21:80:c0:cd:47:d3:e8:b3:f1:ca:08:ac:71:22:5c:
a3:f1:98:f8
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUFeHGcPZsYvzF/kU5Hdv/36Sv9oYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA5MjIxMTI0MDZaFw0yNzA5MjExMTI5MDZaMDMxMTAvBgNV
BAMTKEExNDFGNTVBMzgyRTRCMTM2RDg1RjczOUY4REUyMjM1M0M0Mzc0RjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6yjiIh6DAbNlZJl0YoBglYUEV
klW23JPb+t+9i7f2RIA/rEkUucSilVA4NBAlnNcS78oQmnrgc770fUfhsa/3GLoH
i6d0PloAeJ57x3RBpqGi4k2AsfflGQo6Dr0rYrQFDfIYikWoFi7MKxoB3LVaT+ho
38c8f+YlEJZRkKj5xj0cpMUvXkpb8TzPKU61vUYu2CzRvIP8176/mmpCFB1lVMp/
FHQBe/5meyn4KcwiRntwHUKrrFVuu8xaDYy+LUGfaQoRJxETVQpA07KJQyWhm4p7
oihZIsltDMmt1d0GglegISoDfIRyqLVNE5povet0+W31nz0vf8F19OF9HlsRAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUoUH1WjguSxNthfc5+N4iNTxDdPcwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzOTM0MmUzMTMwMzcyZTMx
MzYzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAMJroTANBgkqhkiG9w0BAQsFAAOCAQEALd3DelhGbJezxbT9rYxeQsWNy6B/
mOVmkCI5cXhLH1GBimgUVYOdU5sx6jaIL14hsPjC6SQPJwe40zm3yy7kqDjrMsyK
dJXdHAtlih4qP6PDDJW9Tz4AiPc4cXJ28cUwLdelhRQPLqHygDeS5pXNzfXGJR70
wCHS60ITrreTDTmYqgsFIOm6T1AyyKCO/IQmotEsfp454FLw5HNwtw5zIg9fkGvI
lM1nN5Dbz+eDEWaj41mqDQMLFLUKWPJVQkqMqx1SX3NFZA0VvnHT5NpH86dXG1o5
CtzuiiTiSeCXfp6iCnCl4UUxS9cYheoqIYDAzUfT6LPxygiscSJco/GY+A==
-----END CERTIFICATE-----
Generated at Thu Sep 24 06:31:01 2026 by rpki-client