Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3233382e32342e302f32312d3332203d3e203430303231.roa
File: 3139342e3233382e32342e302f32312d3332203d3e203430303231.roa (raw, json)
Hash identifier: KvZIfIukquKBPCfaV/ruNdDDI2g15Nxm5J1PUlEeSA4=
Subject key identifier: CD:DE:65:5B:12:60:10:3C:5A:6E:36:F7:45:EF:58:31:79:0F:AB:F7
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1208D9EDC2072CEF7CE3D092FF6FF08BD053C15B
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3233382e32342e302f32312d3332203d3e203430303231.roa
Signing time: Sat 07 Mar 2026 10:23:24 +0000
ROA not before: Sat 07 Mar 2026 10:18:24 +0000
ROA not after: Sat 06 Mar 2027 10:23:24 +0000
asID: 40021
IP address blocks: 194.238.24.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:08:d9:ed:c2:07:2c:ef:7c:e3:d0:92:ff:6f:f0:8b:d0:53:c1:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 7 10:18:24 2026 GMT
Not After : Mar 6 10:23:24 2027 GMT
Subject: CN=CDDE655B1260103C5A6E36F745EF5831790FABF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6c:d1:91:69:e7:ab:d3:c3:75:93:82:f7:12:
09:5d:7d:2d:c1:c5:68:49:41:51:1d:79:74:5e:56:
68:e4:cc:f5:32:2d:d5:db:e6:d8:22:88:e8:52:88:
35:64:5b:eb:ce:98:c0:aa:5f:5b:6c:f3:c0:e0:5a:
14:cd:e7:08:a2:45:7b:81:84:7a:79:29:08:c3:e5:
11:8d:e8:c1:1e:04:e6:7a:30:da:60:c6:a4:db:47:
c1:06:13:13:ca:c1:1d:c5:37:83:81:47:ad:56:de:
5f:a0:0f:f8:31:50:ea:dc:8d:bc:ea:36:c1:b0:bc:
b8:04:46:02:06:48:16:70:66:4f:44:48:ea:8a:e2:
d9:f0:91:c3:e7:81:4d:21:d4:b2:f4:b7:3f:ad:3c:
37:47:00:3b:17:3f:3d:2f:7e:44:e7:a5:fd:51:f1:
7b:1d:2b:b5:2f:0c:6c:97:d8:8c:49:a3:a3:98:cc:
5c:99:4e:1f:c4:4a:0c:5e:37:1d:7b:96:27:85:a1:
df:54:87:a6:da:5b:42:cc:81:75:ed:e8:c0:51:1d:
24:a0:5e:76:e1:4d:a0:0e:93:2e:0a:3a:12:7e:0c:
69:9a:a4:7b:53:c6:21:2f:85:31:bf:93:d0:e9:26:
b8:c5:1a:cb:c8:32:ab:0c:6d:98:78:a6:7e:ac:b1:
97:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:DE:65:5B:12:60:10:3C:5A:6E:36:F7:45:EF:58:31:79:0F:AB:F7
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3233382e32342e302f32312d3332203d3e203430303231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.238.24.0/21
Signature Algorithm: sha256WithRSAEncryption
5e:4b:81:fe:d4:39:94:ba:81:08:98:6c:2b:66:aa:28:7e:65:
e6:80:a2:53:28:2a:c2:10:15:63:9d:c0:55:81:89:e2:de:1c:
3d:65:67:a7:44:0d:77:59:95:f4:9c:75:31:3b:98:c3:f7:51:
2c:45:66:38:f5:ec:6e:53:ee:97:a4:11:91:ba:90:1c:f6:94:
04:6c:0f:57:8d:88:8a:e4:ff:f9:43:bc:d3:bb:93:66:fb:07:
40:56:a4:ea:47:9d:f0:ad:61:bf:eb:c2:7f:5d:78:aa:24:33:
c9:2d:04:dd:56:30:69:ea:c8:2b:fc:6a:6b:14:fe:e3:dd:bb:
8d:73:d5:77:59:1f:58:71:40:5b:0a:7f:67:e5:1d:c3:d8:cf:
f8:67:79:58:2a:7d:e8:4a:6f:85:f9:ab:ce:fc:30:fd:27:26:
9f:ee:2a:26:a3:e6:b1:c5:4b:92:c3:c7:f1:be:ef:04:32:f1:
2b:6a:9b:78:01:c8:bc:53:a3:fd:3d:bc:45:c8:cf:fa:66:12:
90:7d:a6:72:96:28:2f:3e:bd:e1:a1:76:33:f8:0c:d2:38:9f:
0a:74:7e:71:b9:41:ff:dd:31:47:16:92:17:e1:59:38:e5:84:
a3:d1:71:52:bc:c1:5f:76:22:45:28:18:46:b0:91:72:32:06:
8f:fa:23:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:27:52 2026 by rpki-client