Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3139352e39332e302f32342d3234203d3e20323132323338.roa
File: 3139342e3139352e39332e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: 1CpJSqnST0caskMxtHGhKjc4p5cGoYospfVd7DGl/kk=
Subject key identifier: 9C:71:34:F6:AE:73:C7:3C:74:BC:48:C1:5B:85:C0:15:C0:B8:19:49
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3211E3AF04F7BAFA5075E4AE292925F9446EB88B
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3139352e39332e302f32342d3234203d3e20323132323338.roa
Signing time: Tue 22 Sep 2026 13:29:13 +0000
ROA not before: Tue 22 Sep 2026 13:24:13 +0000
ROA not after: Tue 21 Sep 2027 13:29:13 +0000
asID: 212238
IP address blocks: 194.195.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:11:e3:af:04:f7:ba:fa:50:75:e4:ae:29:29:25:f9:44:6e:b8:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 22 13:24:13 2026 GMT
Not After : Sep 21 13:29:13 2027 GMT
Subject: CN=9C7134F6AE73C73C74BC48C15B85C015C0B81949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a5:90:7c:63:2a:b7:9d:78:9f:25:14:70:cf:
ff:5b:2b:ca:63:26:3c:f1:1b:f9:52:35:a4:b4:fa:
59:54:92:18:ca:1e:2b:29:19:f2:d4:04:4d:1e:69:
3f:3c:c7:04:04:3e:eb:8e:e0:45:96:f6:bc:c1:02:
9b:f9:09:28:01:af:d8:a6:b7:ba:e8:14:23:39:14:
ee:59:07:c2:ec:f8:01:6b:61:12:19:be:42:bc:4b:
98:ad:ba:46:55:fc:3d:88:94:7b:ce:53:5f:7d:79:
bc:92:52:d4:b9:b6:34:9b:3b:fa:e5:e7:20:53:eb:
8c:08:8d:6d:ed:ca:b0:6e:bd:08:ba:3c:79:a5:70:
7a:02:71:58:7c:bb:d6:4a:28:d5:ad:e3:c8:23:b7:
09:84:e7:53:2d:25:c2:99:f4:33:76:dc:fc:b2:9b:
0d:02:c6:50:63:69:c9:31:d9:1e:4a:e4:f2:6f:a5:
c3:7e:70:1f:a7:56:4c:3d:a6:a1:de:bc:9c:9f:2b:
af:41:1a:2c:03:3d:fc:91:6f:34:4e:32:19:c9:30:
8a:11:b2:3d:ad:29:2f:45:26:d2:7b:d1:1f:b8:52:
9a:60:da:77:5d:a7:24:4d:8b:dc:5a:97:53:ff:68:
e8:41:4e:d5:f2:4d:f6:b6:3c:ec:d8:36:12:16:ca:
cc:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:71:34:F6:AE:73:C7:3C:74:BC:48:C1:5B:85:C0:15:C0:B8:19:49
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3139352e39332e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.195.93.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:ea:06:9b:cf:6e:93:69:b8:d6:99:38:26:e1:0b:d5:6c:41:
70:d1:dd:d5:25:b7:02:a7:b2:89:0d:e2:75:d4:68:13:64:d7:
23:b9:20:45:18:f0:8e:0e:ec:db:a5:9b:5d:4e:58:2c:22:32:
09:21:c5:5f:ec:50:06:02:73:63:e8:99:2a:b4:84:76:e3:08:
d6:02:95:16:19:79:f2:a6:cb:49:a9:4c:6f:6c:9c:4a:5c:66:
b0:c0:06:dd:db:f9:2b:9f:13:c3:d7:35:b6:64:a9:c3:a2:02:
4f:d4:3c:6d:0f:a5:50:f0:f4:5d:39:65:6b:cb:5a:62:21:b9:
53:68:07:2d:25:64:d1:c3:1d:48:84:fe:4f:7c:90:72:4b:99:
93:5e:6c:d2:7f:f2:7d:92:fc:1d:be:bc:9e:f0:52:8a:f1:59:
1e:a6:e3:05:93:33:9f:3b:df:1c:49:61:73:a8:c8:05:a5:a4:
af:3d:88:66:f1:4d:b3:c8:4f:0a:db:32:28:5a:ad:16:2f:33:
cc:80:1f:b1:7f:1c:60:89:63:9d:c2:2c:db:c6:72:09:74:f1:
b1:b0:e7:d1:e1:48:22:89:cd:18:89:e6:03:2d:2a:ba:13:68:
50:33:c5:c2:d2:19:a8:e8:e8:d9:9e:6c:c1:85:74:35:b8:01:
80:64:85:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:20:08 2026 by rpki-client