Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137362e3132362e36362e302f32342d3234203d3e20323136313531.roa
File: 3137362e3132362e36362e302f32342d3234203d3e20323136313531.roa (raw, json)
Hash identifier: HV/DZWehLqNb4gRlA8ELZ8Pp4RlppR3ZQ8yjIlTnJ4o=
Subject key identifier: F9:60:43:8D:23:5D:C1:74:6D:B0:EC:67:9C:39:28:F2:01:31:AD:7B
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 21C7B192BEE6467265357BFF3E7C434A5E51D01A
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137362e3132362e36362e302f32342d3234203d3e20323136313531.roa
Signing time: Fri 27 Feb 2026 09:23:21 +0000
ROA not before: Fri 27 Feb 2026 09:18:21 +0000
ROA not after: Fri 26 Feb 2027 09:23:21 +0000
asID: 216151
IP address blocks: 176.126.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:04:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:c7:b1:92:be:e6:46:72:65:35:7b:ff:3e:7c:43:4a:5e:51:d0:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 27 09:18:21 2026 GMT
Not After : Feb 26 09:23:21 2027 GMT
Subject: CN=F960438D235DC1746DB0EC679C3928F20131AD7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:61:8a:a3:e7:f8:14:83:1b:53:43:cd:d6:0b:
d8:13:5d:2f:da:c5:67:c0:d8:1a:24:be:85:3f:b6:
22:15:29:60:05:04:6c:a1:88:35:c0:b4:a2:ea:ee:
df:3a:41:95:38:ec:7d:2a:14:08:02:ec:5b:4d:67:
ce:78:20:94:d4:ad:ad:9e:0f:00:fd:26:03:2d:80:
fc:28:2b:b8:8a:a5:6f:e8:6e:1e:cb:e4:af:f9:e9:
2f:9a:7c:b1:8c:80:7e:cd:28:46:eb:b2:a6:5f:53:
da:4f:0f:43:35:90:e1:dd:52:d8:40:06:02:70:c3:
7c:28:4f:7f:04:c6:96:68:05:46:5a:9a:6c:b1:9f:
3d:cc:60:d5:6c:c5:24:99:b9:d2:17:34:c6:de:6a:
bd:e6:2a:fc:e4:91:f9:7b:85:90:dc:86:64:b0:cc:
87:9a:79:3f:9d:1b:61:18:93:b5:d2:ff:51:9c:3d:
31:9b:09:85:40:0c:c3:0c:0e:c2:15:9e:41:5d:53:
a4:c5:25:ca:d9:c3:60:f5:ef:c3:b6:b8:69:d8:d6:
ac:d0:fd:ca:09:2a:cc:6d:e1:43:fe:ef:e6:7a:e6:
ce:06:f3:11:e6:4d:f6:d7:f1:9c:03:ba:3b:35:1f:
8d:de:5f:46:f3:ea:93:0f:80:6e:4c:6b:1e:80:98:
36:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:60:43:8D:23:5D:C1:74:6D:B0:EC:67:9C:39:28:F2:01:31:AD:7B
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137362e3132362e36362e302f32342d3234203d3e20323136313531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.66.0/24
Signature Algorithm: sha256WithRSAEncryption
74:ab:7c:80:5c:6a:89:da:49:91:64:5d:0d:41:8a:e1:d0:1a:
c2:b8:a9:fb:ee:06:e3:91:0e:17:fa:9d:5f:ac:03:0d:a9:c9:
35:49:28:19:be:bd:1a:80:01:b3:b9:11:1b:74:ff:a4:f8:69:
12:4d:02:d6:35:3d:e2:fa:62:b8:2f:8e:95:7d:65:5c:39:21:
3d:a5:c7:37:47:30:57:05:b3:18:85:fa:2c:28:61:56:37:f5:
74:a4:c0:ed:56:83:a4:53:6b:64:86:09:aa:d6:d1:41:6c:7a:
8a:f1:89:d7:1e:65:57:eb:f0:98:fe:81:5a:dd:94:37:f2:1c:
e5:64:f5:37:1b:df:3b:65:9b:6f:af:68:06:52:bc:2a:5b:d2:
88:0b:0d:e7:ba:74:c9:4b:08:d6:69:72:45:e6:55:e6:ce:09:
fd:ad:31:89:c6:51:ba:03:e5:50:f3:eb:0d:c6:49:57:13:17:
c9:01:b6:d6:6a:e4:d7:42:5e:a8:72:38:10:e8:e6:68:09:29:
e4:e1:60:3e:95:ef:b8:36:35:75:a5:90:2a:0b:e3:5a:d1:06:
99:2a:f0:cf:cd:87:96:7c:15:49:e8:a6:83:b1:b2:4f:52:65:
a9:82:54:73:39:3f:d0:92:5d:a1:02:bb:d4:ce:1e:2b:ce:c3:
c4:4a:8d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:12:48 2026 by rpki-client