Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3136342e352e3235312e302f32342d3234203d3e20323033333830.roa
File: 3136342e352e3235312e302f32342d3234203d3e20323033333830.roa (raw, json)
Hash identifier: Jkig1gmIwpbP38oKImJ5atSQGIC5l0asWygN7aaxXXM=
Subject key identifier: 22:29:A7:37:B5:3A:82:C1:BB:9F:C5:0B:9C:94:C1:65:C3:95:CD:37
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 43C5D1EB81F29818B6EC2129CC9D98B637575D3A
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3136342e352e3235312e302f32342d3234203d3e20323033333830.roa
Signing time: Sat 25 Jul 2026 20:09:53 +0000
ROA not before: Sat 25 Jul 2026 20:04:53 +0000
ROA not after: Sat 24 Jul 2027 20:09:53 +0000
asID: 203380
IP address blocks: 164.5.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:12:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:c5:d1:eb:81:f2:98:18:b6:ec:21:29:cc:9d:98:b6:37:57:5d:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 25 20:04:53 2026 GMT
Not After : Jul 24 20:09:53 2027 GMT
Subject: CN=2229A737B53A82C1BB9FC50B9C94C165C395CD37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:06:b4:c0:aa:6b:1a:51:fd:63:7c:3c:36:4f:
84:e8:1e:cb:92:f5:e8:2f:ef:d7:39:bc:b8:db:fc:
64:57:15:71:b3:a8:e8:2c:40:29:fc:31:ed:c3:17:
8d:27:83:78:df:39:58:56:4f:c9:b4:50:10:47:f3:
30:21:ff:41:f0:a3:07:59:c9:cd:17:01:38:32:4a:
84:3f:34:4f:a8:48:b5:0a:ec:22:e2:76:31:a7:d3:
b0:90:9d:85:b0:6c:37:6d:51:e3:17:60:85:42:49:
ff:30:be:1d:f4:84:29:54:c7:a5:5e:3e:58:f2:dd:
f3:7f:78:b8:f2:63:15:20:dc:99:26:d5:1f:84:d9:
72:7c:02:a4:c8:a9:52:78:42:f4:d2:71:df:f5:2b:
a4:f3:2e:d2:ca:54:84:f3:0d:3f:ce:eb:df:b5:c7:
ae:57:28:75:0e:2b:70:3d:74:33:a5:04:33:52:f2:
61:49:e8:97:3b:63:05:2b:7a:74:ee:ab:ab:59:6f:
5d:40:aa:ca:92:2a:93:bf:e2:85:c3:cd:af:c7:e4:
12:83:d4:dd:ae:b7:95:a0:ce:66:f0:34:df:cf:b0:
5c:37:de:f2:64:ff:10:85:6b:1c:2d:90:ff:05:2e:
ef:91:0a:fd:19:cd:ed:94:6d:0c:e8:37:0d:ba:f3:
5f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:29:A7:37:B5:3A:82:C1:BB:9F:C5:0B:9C:94:C1:65:C3:95:CD:37
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3136342e352e3235312e302f32342d3234203d3e20323033333830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.5.251.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:d3:1a:72:61:7a:6f:ae:54:be:a8:de:b2:20:a8:db:da:a3:
95:66:b7:1b:f6:c4:33:23:86:85:5f:fb:f9:b3:50:8c:85:a9:
70:db:b6:92:45:ce:57:61:7d:1a:5f:7a:4b:79:30:3f:69:6f:
d7:22:81:6d:22:d7:c0:98:d4:fb:78:30:a7:ca:9f:f1:1d:e7:
e5:6d:71:71:d6:28:09:b5:94:32:49:b0:8a:d5:ac:5a:d1:9a:
fa:1b:6b:ac:45:14:d3:ad:a1:3a:92:08:da:18:12:c8:88:8e:
50:d4:dd:9d:6d:53:a4:33:96:b1:a7:52:81:a4:0b:35:49:c5:
c3:5b:23:57:78:bc:1d:e7:e8:32:c4:19:21:76:b8:16:88:2a:
89:79:ab:65:d1:8a:e6:eb:1f:43:49:1d:27:c1:ee:65:45:77:
4c:11:37:98:21:25:03:fe:c3:de:55:66:24:e5:c6:1c:e9:84:
76:67:aa:ca:7a:1b:8d:31:8f:fa:43:c9:68:df:41:74:ae:c9:
2e:51:90:c3:23:eb:08:26:cf:a7:47:97:18:51:9f:86:15:c3:
3d:2f:c3:00:7f:71:90:73:5c:d6:95:97:87:8a:6f:9f:db:01:
09:ac:02:55:04:ad:66:b4:be:f8:cf:bb:52:c6:59:9a:a3:12:
a0:a4:5e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:12:20 2026 by rpki-client