Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3136342e352e3235302e302f32342d3234203d3e20323033333830.roa
File: 3136342e352e3235302e302f32342d3234203d3e20323033333830.roa (raw, json)
Hash identifier: 93azUtZCJ4H1IUBwo9D+gpEtbgHpt7/G2/3eOLtlbLM=
Subject key identifier: B7:35:0F:3F:27:08:55:DA:0E:3A:5D:C7:B5:AA:A6:46:F3:0E:EA:E3
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: CD554CF8099DB992AC68108D2BE261677F37CF
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3136342e352e3235302e302f32342d3234203d3e20323033333830.roa
Signing time: Sat 25 Jul 2026 20:09:45 +0000
ROA not before: Sat 25 Jul 2026 20:04:45 +0000
ROA not after: Sat 24 Jul 2027 20:09:45 +0000
asID: 203380
IP address blocks: 164.5.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:12:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
cd:55:4c:f8:09:9d:b9:92:ac:68:10:8d:2b:e2:61:67:7f:37:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 25 20:04:45 2026 GMT
Not After : Jul 24 20:09:45 2027 GMT
Subject: CN=B7350F3F270855DA0E3A5DC7B5AAA646F30EEAE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:98:26:6d:7b:f2:a2:e0:45:8c:51:76:aa:f5:
58:8c:32:79:59:a6:d9:d8:d3:0d:d8:5c:ba:46:61:
0b:c8:66:1a:51:5c:fc:05:7d:a0:fc:3a:12:c5:77:
b4:1f:89:84:ac:9c:e6:57:92:4f:e4:8d:a1:29:52:
22:c6:8b:a0:3b:6c:0a:b6:fd:df:f5:cc:50:a0:b2:
ee:0c:b0:44:b1:be:c4:17:d2:c2:cd:b9:22:7b:49:
01:ff:3e:6c:cf:c4:a9:71:de:fa:15:a6:fd:f0:2e:
c4:f2:43:ee:64:d9:6e:b4:f5:dd:df:7b:70:d5:a1:
13:32:a5:6a:ca:4a:cd:f0:7f:9d:b7:da:57:66:40:
ee:0e:ce:37:91:92:49:6b:88:02:e5:32:0c:d4:d2:
44:02:d3:a8:92:30:54:e9:fc:a7:ad:ad:57:2a:b1:
69:f2:9c:91:b6:e2:e0:28:db:59:f6:b2:b1:ac:92:
57:cf:cf:21:27:99:e4:2b:3c:fa:fc:dd:82:85:e3:
92:37:07:ac:ab:2f:aa:1d:2e:eb:88:de:47:1d:da:
fe:54:0f:03:b9:51:18:ac:26:cf:7f:e4:95:c0:38:
6c:87:65:d1:65:26:f6:f1:af:35:6f:ea:7f:08:2f:
67:1d:51:be:2f:6e:c8:6c:13:bb:7d:30:7d:b8:c4:
31:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:35:0F:3F:27:08:55:DA:0E:3A:5D:C7:B5:AA:A6:46:F3:0E:EA:E3
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3136342e352e3235302e302f32342d3234203d3e20323033333830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.5.250.0/24
Signature Algorithm: sha256WithRSAEncryption
86:69:94:c8:c9:74:79:9c:b0:48:8d:58:68:f2:86:26:fc:83:
c4:cd:01:2e:be:6e:13:d2:f1:15:59:64:02:9d:5b:5e:dd:ee:
fd:a0:3a:cc:b1:50:79:12:d5:4f:ac:80:9b:21:06:e2:ea:1d:
da:1f:70:ec:ab:8b:39:b7:29:0d:b6:08:fd:a9:e3:c4:90:19:
f3:ea:d0:7b:a8:12:56:55:76:b3:2e:68:5e:a7:a0:d8:50:6d:
ed:7f:da:c4:8f:50:58:ea:1b:8d:2b:75:6f:ea:79:8a:1c:6c:
67:74:ed:3e:1b:0d:2f:25:02:f7:f7:73:c0:84:31:78:79:3d:
36:a9:59:af:22:d2:91:18:c5:65:98:7f:17:46:3f:aa:02:3b:
81:4d:1d:c5:eb:05:69:80:50:19:29:dd:2b:1a:eb:ea:4c:b3:
c0:ea:84:97:9c:54:d0:01:7a:d3:0c:ee:69:29:62:9a:7f:54:
62:c5:18:c0:88:33:b3:53:b1:84:4d:03:92:81:8a:f2:14:52:
00:86:e4:55:07:12:47:d4:69:ed:79:fb:ae:56:32:b0:9e:ca:
e0:c6:2d:98:f5:d9:4d:ff:8a:a6:e7:a8:8b:a9:39:76:7b:64:
71:e4:69:a5:50:15:e0:99:5a:cc:54:30:19:df:9f:08:62:56:
12:93:7a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:12:11 2026 by rpki-client