Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137362e3132362e36362e302f32342d3234203d3e2037393739.roa
File: 3137362e3132362e36362e302f32342d3234203d3e2037393739.roa (raw, json)
Hash identifier: XzI6LohArdGtDV2V/jAEDXhj/Y4iLMf+VKP02J8r7yw=
Subject key identifier: 83:92:69:35:31:23:02:2C:6F:FB:53:7D:D3:E8:F5:87:28:B4:AF:C3
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 27E13A2BA887D442DFB583182D4A049DF229684D
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137362e3132362e36362e302f32342d3234203d3e2037393739.roa
Signing time: Mon 29 Dec 2025 09:50:53 +0000
ROA not before: Mon 29 Dec 2025 09:45:53 +0000
ROA not after: Mon 28 Dec 2026 09:50:53 +0000
asID: 7979
IP address blocks: 176.126.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:e1:3a:2b:a8:87:d4:42:df:b5:83:18:2d:4a:04:9d:f2:29:68:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Dec 29 09:45:53 2025 GMT
Not After : Dec 28 09:50:53 2026 GMT
Subject: CN=839269353123022C6FFB537DD3E8F58728B4AFC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:3e:cd:6c:26:18:0c:0b:e5:90:7f:2b:9d:aa:
7b:bb:d7:fe:98:50:b2:cd:eb:93:74:06:8b:6e:ca:
86:b9:db:38:1d:bf:3a:94:72:5c:93:82:d9:d0:9f:
ec:3d:20:0b:ce:8e:ae:a9:62:1f:ca:24:4f:75:39:
0f:7b:5a:95:d3:ba:33:f8:1b:65:d3:26:ba:19:36:
b0:d6:fd:c3:e1:b9:b5:be:28:37:fb:0d:7a:46:d8:
e3:94:5d:c2:00:e1:5c:5d:ec:2e:8c:e9:fa:74:54:
6d:81:8b:ef:8a:53:0f:66:c1:34:99:31:79:fc:61:
a4:5a:98:98:c1:6d:8e:1b:74:8e:28:2b:8a:61:e1:
0a:35:72:28:14:89:a8:46:d3:00:15:7f:8a:fe:da:
bf:a0:d8:50:dd:80:0a:4f:4d:db:60:4c:21:b1:e5:
5e:bb:e7:cd:c7:07:58:84:65:13:ea:72:f6:71:f9:
16:21:c4:19:f7:6f:79:bc:9c:d4:21:67:2b:40:21:
db:dd:bd:1a:8c:99:0a:f1:87:84:d0:7f:02:70:be:
34:21:5a:4d:9f:2e:b0:05:71:ca:31:bb:87:ec:49:
eb:29:e0:ad:f9:ee:8d:65:38:fc:e6:e8:cb:03:56:
f5:e4:d8:2f:f3:03:1b:2f:a2:26:4f:dc:37:3a:8b:
15:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:92:69:35:31:23:02:2C:6F:FB:53:7D:D3:E8:F5:87:28:B4:AF:C3
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137362e3132362e36362e302f32342d3234203d3e2037393739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.66.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:ca:86:11:a1:35:d9:f2:3b:e4:35:40:8e:2e:53:9a:52:74:
73:1d:c6:b8:61:71:e8:00:a2:69:2c:d4:59:52:5c:b1:6c:fa:
40:d4:e4:52:40:b2:9d:0c:31:e8:0a:be:14:8a:ad:4e:13:66:
77:39:b5:bf:6e:3b:67:bb:e2:fc:1d:99:bb:76:f4:9f:d9:17:
92:63:98:35:6c:00:d6:0a:5c:28:74:1b:0d:3e:b8:ed:a1:be:
72:e4:ce:6a:a3:a1:ee:65:d1:56:71:19:f2:43:03:1f:03:e4:
54:65:7f:dc:e5:cf:21:4d:07:2a:49:26:e0:7f:c9:1d:4e:31:
b5:b3:8a:bf:06:cf:d6:3a:db:d7:01:ce:0a:a4:49:1e:12:3a:
18:1d:2c:ef:bf:7f:a8:71:d5:fb:9b:0a:f8:60:6c:80:90:67:
17:2e:1b:26:76:ce:f0:e3:aa:e2:e6:b5:0d:6f:7d:65:63:0d:
e0:c5:6b:76:59:37:a9:a8:d9:03:ed:4f:d6:a8:f4:e2:99:6a:
72:03:b4:47:37:d5:2f:4f:16:d9:8d:4c:bd:ff:fe:41:11:ef:
5c:27:3b:4e:48:d0:5c:5b:8f:1e:32:a2:64:09:a5:05:d4:a2:
b0:ed:1e:e5:d6:89:a3:f2:e6:a8:8c:21:b2:b7:ff:c4:c1:4d:
af:db:7d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:42:19 2026 by rpki-client