Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3136342e352e3234392e302f32342d3234203d3e20323033333830.roa
File: 3136342e352e3234392e302f32342d3234203d3e20323033333830.roa (raw, json)
Hash identifier: fle0gPkIrM4n3gkV5Lo/dBX/nxah+p9CO5c+mZOYHBY=
Subject key identifier: C5:3E:E6:5C:F6:E3:99:C2:BE:78:C3:5E:72:BB:AB:6A:E4:8A:0B:70
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7610F5D170C823ED42268465B8A8305D86C3AAB5
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3136342e352e3234392e302f32342d3234203d3e20323033333830.roa
Signing time: Sat 25 Jul 2026 20:09:35 +0000
ROA not before: Sat 25 Jul 2026 20:04:35 +0000
ROA not after: Sat 24 Jul 2027 20:09:35 +0000
asID: 203380
IP address blocks: 164.5.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:12:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:10:f5:d1:70:c8:23:ed:42:26:84:65:b8:a8:30:5d:86:c3:aa:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 25 20:04:35 2026 GMT
Not After : Jul 24 20:09:35 2027 GMT
Subject: CN=C53EE65CF6E399C2BE78C35E72BBAB6AE48A0B70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:42:ce:13:b3:d9:ce:c9:63:9f:fe:b2:f0:6c:
3c:19:9b:56:74:fe:05:28:80:61:d0:0c:2f:90:e9:
67:14:c9:15:a0:88:44:33:aa:82:66:26:a3:05:0e:
ed:8d:09:9a:c5:2a:9a:d3:1f:88:42:e5:b8:b5:d3:
2b:0f:b7:cf:cf:df:d1:01:f5:7f:32:ca:d9:83:6c:
66:3d:51:49:41:19:f4:b8:01:a9:df:38:bc:48:d2:
b2:4f:94:63:a8:6e:11:2a:61:92:60:24:4f:0d:81:
69:71:00:ec:dd:77:41:70:36:ee:e4:7e:aa:eb:05:
3e:d2:66:03:bf:ac:60:f8:79:22:da:f0:11:61:55:
48:3f:15:f7:e5:57:cf:75:89:02:78:4c:32:74:50:
2e:a8:40:6f:ad:e5:08:80:70:38:be:d9:3b:88:2e:
1e:d4:ec:36:18:4d:02:a6:b1:16:3a:a0:80:f4:09:
2e:eb:ec:ae:49:ce:c9:7f:51:9e:e1:f1:86:e5:25:
95:09:86:12:d8:e6:a2:68:e8:7a:3a:84:a8:3d:cc:
d6:a0:c6:d1:e7:7c:65:b7:81:fd:37:65:9b:e5:ce:
30:e8:4d:11:d6:a0:8f:63:74:77:f7:fd:5c:f8:37:
bd:2b:70:1d:7e:1d:17:31:03:d7:dd:a9:43:03:17:
4e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:3E:E6:5C:F6:E3:99:C2:BE:78:C3:5E:72:BB:AB:6A:E4:8A:0B:70
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3136342e352e3234392e302f32342d3234203d3e20323033333830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.5.249.0/24
Signature Algorithm: sha256WithRSAEncryption
70:2f:c3:06:89:d1:20:ee:bf:15:f5:fa:89:97:41:94:ed:02:
65:99:f1:b5:01:44:0f:1c:80:19:5f:4d:a9:99:d1:e5:6b:9a:
18:56:ff:8c:84:52:f9:42:77:5c:67:d3:d2:71:c7:72:f6:af:
08:06:71:b9:32:0d:df:ec:82:64:88:f4:b8:2e:5c:57:c2:fb:
4b:31:11:fb:8e:09:66:82:d7:7c:47:76:f4:61:cc:b3:50:f5:
d7:60:6c:1f:5e:b2:96:75:cf:25:2a:7b:65:bf:ac:5f:75:1d:
13:2a:89:7b:81:29:42:3f:b7:92:63:83:56:99:be:28:a5:ba:
c4:cc:50:8d:15:80:81:c6:86:16:74:a4:47:5d:66:b8:6e:ca:
b2:3f:2b:11:21:72:4d:31:df:84:8a:2e:dc:9c:14:4d:d5:e3:
00:49:95:f1:2e:fa:19:b2:52:f7:17:62:ad:db:9c:53:c6:71:
d2:94:2f:53:fc:1f:a0:74:5e:45:a1:c9:7e:0b:61:af:36:65:
78:43:1c:15:1b:84:4d:53:49:2d:9a:e0:14:58:fc:20:68:6a:
80:29:cb:73:93:a9:1f:02:e5:42:41:65:31:9a:eb:87:59:d1:
71:b9:c6:c7:8e:51:7c:07:05:f4:08:6b:97:27:e7:47:4c:19:
d2:12:1a:e6
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUdhD10XDII+1CJoRluKgwXYbDqrUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA3MjUyMDA0MzVaFw0yNzA3MjQyMDA5MzVaMDMxMTAvBgNV
BAMTKEM1M0VFNjVDRjZFMzk5QzJCRTc4QzM1RTcyQkJBQjZBRTQ4QTBCNzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Qs4Ts9nOyWOf/rLwbDwZm1Z0
/gUogGHQDC+Q6WcUyRWgiEQzqoJmJqMFDu2NCZrFKprTH4hC5bi10ysPt8/P39EB
9X8yytmDbGY9UUlBGfS4AanfOLxI0rJPlGOobhEqYZJgJE8NgWlxAOzdd0FwNu7k
fqrrBT7SZgO/rGD4eSLa8BFhVUg/FfflV891iQJ4TDJ0UC6oQG+t5QiAcDi+2TuI
Lh7U7DYYTQKmsRY6oID0CS7r7K5Jzsl/UZ7h8YblJZUJhhLY5qJo6Ho6hKg9zNag
xtHnfGW3gf03ZZvlzjDoTRHWoI9jdHf3/Vz4N70rcB1+HRcxA9fdqUMDF06JAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUxT7mXPbjmcK+eMNecrurauSKC3AwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNjM0MmUzNTJlMzIzNDM5
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDMzMzMzODMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
pAX5MA0GCSqGSIb3DQEBCwUAA4IBAQBwL8MGidEg7r8V9fqJl0GU7QJlmfG1AUQP
HIAZX02pmdHla5oYVv+MhFL5QndcZ9PSccdy9q8IBnG5Mg3f7IJkiPS4LlxXwvtL
MRH7jglmgtd8R3b0YcyzUPXXYGwfXrKWdc8lKntlv6xfdR0TKol7gSlCP7eSY4NW
mb4opbrEzFCNFYCBxoYWdKRHXWa4bsqyPysRIXJNMd+Eii7cnBRN1eMASZXxLvoZ
slL3F2Kt25xTxnHSlC9T/B+gdF5Focl+C2GvNmV4QxwVG4RNU0ktmuAUWPwgaGqA
Kctzk6kfAuVCQWUxmuuHWdFxucbHjlF8BwX0CGuXJ+dHTBnSEhrm
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:12:04 2026 by rpki-client