Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3234322e3234332e302f32342d3234203d3e20313336373837.roa
File: 3139352e3234322e3234332e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: TjkPsRLbC//+5n0qAH0jzMrOFAhQ+N/yN9G3cYHwYII=
Subject key identifier: 2C:80:87:09:BB:99:55:6B:D4:B4:85:5D:49:0B:E8:D7:CC:2E:75:40
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 235F8C68E974F3084905FCBD43B650DC8352AD7F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3234322e3234332e302f32342d3234203d3e20313336373837.roa
Signing time: Thu 17 Sep 2026 16:29:04 +0000
ROA not before: Thu 17 Sep 2026 16:24:04 +0000
ROA not after: Thu 16 Sep 2027 16:29:04 +0000
asID: 136787
IP address blocks: 195.242.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:5f:8c:68:e9:74:f3:08:49:05:fc:bd:43:b6:50:dc:83:52:ad:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 17 16:24:04 2026 GMT
Not After : Sep 16 16:29:04 2027 GMT
Subject: CN=2C808709BB99556BD4B4855D490BE8D7CC2E7540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:75:b1:87:b0:38:2d:62:d4:fa:3f:04:b5:9f:
b8:75:28:6a:05:db:2d:b4:d6:7f:ce:85:71:a9:d8:
03:f8:96:9e:8b:4b:3f:93:c1:c8:cc:ac:61:1b:c2:
3e:38:e7:cf:25:54:e9:3b:c2:81:d1:0c:7a:97:b4:
d3:64:cb:0f:d2:81:87:1b:b7:0d:1f:a4:1f:03:ba:
8d:b5:bd:b5:46:41:6f:60:b6:8f:bf:2c:1f:45:88:
1a:d4:3d:f2:dc:f0:a2:d1:b6:52:f6:0a:cd:24:ae:
ec:94:d9:fd:58:d8:39:cc:ef:8b:b8:d0:51:78:46:
ac:56:b9:f3:45:83:0e:7c:e8:83:65:fe:d5:64:ff:
3b:5d:f6:63:9c:5a:f5:3b:f4:65:de:19:18:2c:b0:
4c:a3:bc:8e:37:6a:f1:b8:a9:70:a3:f2:a6:01:14:
59:e2:50:33:b9:7b:d3:64:c8:61:c0:fb:35:d8:f0:
1f:33:f0:f4:32:fb:4f:44:9d:5f:27:b7:62:20:39:
86:89:aa:e2:89:28:47:cf:8e:69:d3:b9:8c:65:58:
c1:2b:09:56:70:51:10:8d:c4:9b:2a:5b:fd:43:86:
78:9f:a1:de:6e:4f:61:7d:d1:f1:f1:5e:ba:73:c1:
2d:99:e6:8d:16:e9:2f:86:48:27:f8:31:77:a3:2f:
90:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:80:87:09:BB:99:55:6B:D4:B4:85:5D:49:0B:E8:D7:CC:2E:75:40
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3234322e3234332e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.242.243.0/24
Signature Algorithm: sha256WithRSAEncryption
51:6c:46:69:e7:36:ee:f2:8e:1c:39:d0:8c:6f:14:dc:a4:50:
ca:52:c2:d9:96:70:8d:7e:af:a1:99:0e:46:bf:6f:0e:8a:c7:
10:bc:25:fa:f6:0e:01:92:8b:d4:7c:12:e7:43:73:6c:2e:62:
f1:85:f5:46:89:25:9e:4d:90:e3:d4:49:a7:b1:08:91:91:00:
ee:2f:6e:92:b2:ae:c5:21:ac:ff:51:26:b7:dc:fb:5c:ac:30:
41:77:8c:83:31:58:aa:45:78:b5:c8:66:f8:25:95:48:46:e6:
6e:fb:be:93:85:ba:fe:0f:ad:a7:3a:d0:6c:0b:08:8b:b3:58:
e4:f0:39:6f:67:11:fb:4f:c7:f1:57:b9:13:43:a7:15:bc:31:
d8:b1:6d:20:b7:27:da:21:f7:51:fd:87:3a:52:60:76:7e:7c:
f9:2f:60:aa:b0:27:9d:0b:a8:bc:ea:f1:ce:00:16:6a:b5:58:
32:e7:29:8c:67:ee:d9:b7:a0:3e:fb:52:58:51:fe:9d:ab:e0:
7d:43:01:14:5b:66:29:4b:1e:64:42:1a:6a:cc:69:93:05:7a:
d6:09:8a:1f:25:3c:41:ca:a3:89:fe:aa:a0:eb:a6:2f:06:af:
76:f5:a3:f4:0d:a5:d8:4c:94:75:34:30:f7:db:d9:0e:50:58:
62:95:b4:10
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUI1+MaOl08whJBfy9Q7ZQ3INSrX8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA5MTcxNjI0MDRaFw0yNzA5MTYxNjI5MDRaMDMxMTAvBgNV
BAMTKDJDODA4NzA5QkI5OTU1NkJENEI0ODU1RDQ5MEJFOEQ3Q0MyRTc1NDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpdbGHsDgtYtT6PwS1n7h1KGoF
2y201n/OhXGp2AP4lp6LSz+TwcjMrGEbwj44588lVOk7woHRDHqXtNNkyw/SgYcb
tw0fpB8Duo21vbVGQW9gto+/LB9FiBrUPfLc8KLRtlL2Cs0kruyU2f1Y2DnM74u4
0FF4RqxWufNFgw586INl/tVk/ztd9mOcWvU79GXeGRgssEyjvI43avG4qXCj8qYB
FFniUDO5e9NkyGHA+zXY8B8z8PQy+09EnV8nt2IgOYaJquKJKEfPjmnTuYxlWMEr
CVZwURCNxJsqW/1Dhnifod5uT2F90fHxXrpzwS2Z5o0W6S+GSCf4MXejL5BFAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQULICHCbuZVWvUtIVdSQvo18wudUAwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzOTM1MmUzMjM0MzIyZTMy
MzQzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAMPy8zANBgkqhkiG9w0BAQsFAAOCAQEAUWxGaec27vKOHDnQjG8U3KRQylLC
2ZZwjX6voZkORr9vDorHELwl+vYOAZKL1HwS50NzbC5i8YX1Roklnk2Q49RJp7EI
kZEA7i9ukrKuxSGs/1Emt9z7XKwwQXeMgzFYqkV4tchm+CWVSEbmbvu+k4W6/g+t
pzrQbAsIi7NY5PA5b2cR+0/H8Ve5E0OnFbwx2LFtILcn2iH3Uf2HOlJgdn58+S9g
qrAnnQuovOrxzgAWarVYMucpjGfu2begPvtSWFH+navgfUMBFFtmKUseZEIaasxp
kwV61gmKHyU8Qcqjif6qoOumLwavdvWj9A2l2EyUdTQw99vZDlBYYpW0EA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 20:21:58 2026 by rpki-client