Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3130372e3136322e302f32342d3234203d3e20313336373837.roa
File: 3139342e3130372e3136322e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: BnE7BbY2oqZfm6C/N9+69KqLgIBgTu7VpFrYHN276v8=
Subject key identifier: 7B:38:BD:2B:9C:0F:CE:08:45:BE:40:B8:EF:35:7C:83:B8:55:FA:3F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 13AC18029D7C80C38DDFCEE8EB2A4BDBFB7A50D5
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3130372e3136322e302f32342d3234203d3e20313336373837.roa
Signing time: Tue 22 Sep 2026 11:29:06 +0000
ROA not before: Tue 22 Sep 2026 11:24:06 +0000
ROA not after: Tue 21 Sep 2027 11:29:06 +0000
asID: 136787
IP address blocks: 194.107.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:ac:18:02:9d:7c:80:c3:8d:df:ce:e8:eb:2a:4b:db:fb:7a:50:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 22 11:24:06 2026 GMT
Not After : Sep 21 11:29:06 2027 GMT
Subject: CN=7B38BD2B9C0FCE0845BE40B8EF357C83B855FA3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:40:66:2d:33:00:8b:f7:7d:09:d5:2e:28:dd:
c9:f3:02:84:f0:38:bc:13:d3:d4:81:e2:62:18:b7:
c8:a2:7e:5c:02:27:f2:02:cc:54:91:6d:9c:f5:7d:
7f:a4:66:ce:be:1f:ce:0e:be:86:f0:4b:94:46:26:
d7:ec:44:f1:45:ed:82:a1:73:1a:b3:cd:7d:ba:f5:
9a:92:41:6b:d1:4a:30:7a:0e:b0:b9:ae:f2:5b:9e:
60:83:f5:28:e5:63:f8:9e:ef:36:df:5b:40:5d:9f:
e3:63:8a:f2:39:23:f6:8b:3a:c6:b4:36:b4:e2:2a:
81:f2:89:e3:c3:0f:70:49:7e:ad:2d:25:6f:42:37:
ae:f9:74:36:a8:e5:90:5c:66:fe:75:51:ce:8e:d5:
1b:ce:27:66:25:7c:df:a0:c8:8c:a7:98:82:ff:5f:
f7:c2:21:73:c9:82:8d:64:4f:61:53:1c:5e:77:a3:
25:b1:66:dd:48:ac:3d:af:d3:6a:f9:9c:b6:a8:51:
d0:b2:8b:21:3f:65:85:c1:ca:54:b0:9e:1b:88:61:
19:f9:cd:b7:e9:a9:19:a6:70:c3:fe:ad:45:14:c2:
28:19:4f:9a:73:cf:d3:28:97:5a:82:b5:65:2f:f1:
03:73:d3:32:68:1f:3e:61:78:bf:5a:b7:0b:ec:92:
f0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:38:BD:2B:9C:0F:CE:08:45:BE:40:B8:EF:35:7C:83:B8:55:FA:3F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3130372e3136322e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.107.162.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:9f:63:01:ab:0d:32:bf:e9:52:33:da:ef:ad:e7:29:6f:bf:
f1:ec:6f:1f:92:5a:37:7d:39:cd:07:ad:79:65:4d:54:0c:13:
1d:ae:4b:ef:3e:ab:f3:52:8c:de:bb:40:8a:66:c1:61:ae:b5:
1d:66:aa:0a:c1:21:f2:b9:2e:4c:4b:07:69:ce:03:34:9a:17:
4c:32:aa:f4:2d:fe:18:2e:5c:c0:e5:59:40:f0:44:2b:7e:a1:
c1:ca:a0:5e:79:6f:ee:02:f1:27:f3:eb:b9:b6:98:22:2a:be:
3b:6d:e1:b5:23:a5:91:ad:aa:0f:fe:f1:56:58:9c:d3:f9:9f:
85:25:bb:c3:bd:5d:34:cc:24:b9:09:3b:f1:66:c6:12:09:3d:
a3:4e:70:3a:d8:3d:7b:3f:89:ed:c3:32:c1:a1:43:28:fe:49:
19:b1:be:84:02:a7:45:01:61:76:f2:18:c9:4a:66:c1:c2:91:
59:01:fe:b6:c5:e4:43:6a:9f:f8:00:07:fe:b1:14:39:61:d2:
a5:36:4e:c7:d9:e7:5a:6f:e9:77:3e:5a:ea:c6:b7:3a:c7:12:
de:5f:f0:34:e6:76:ca:f8:4e:23:8e:87:b2:bc:28:97:9c:ad:
42:8c:a3:cb:b6:35:46:ca:28:2a:76:fd:27:ad:ab:19:cf:62:
14:60:49:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:06:07 2026 by rpki-client