Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137362e35332e3137362e302f32342d3234203d3e20323132323338.roa
File: 3137362e35332e3137362e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: NofI8Oq1WqgzjMXL58PeCs8jpKyDCFxAUOo6BBDZ2xs=
Subject key identifier: 88:25:4B:D3:7E:B1:A5:C4:6D:FC:27:AF:BF:06:9F:D7:90:4A:E7:B8
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7FF8B6AA73B2824D51ED63876FE83AAA6AA4208A
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137362e35332e3137362e302f32342d3234203d3e20323132323338.roa
Signing time: Thu 04 Jun 2026 20:24:58 +0000
ROA not before: Thu 04 Jun 2026 20:19:58 +0000
ROA not after: Thu 03 Jun 2027 20:24:58 +0000
asID: 212238
IP address blocks: 176.53.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:f8:b6:aa:73:b2:82:4d:51:ed:63:87:6f:e8:3a:aa:6a:a4:20:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 4 20:19:58 2026 GMT
Not After : Jun 3 20:24:58 2027 GMT
Subject: CN=88254BD37EB1A5C46DFC27AFBF069FD7904AE7B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:17:fd:10:e8:09:e4:7d:ba:5a:71:7d:4d:1d:
b8:ea:9f:e9:a3:7f:14:72:9d:a7:13:5c:b0:a9:d2:
50:9a:c8:34:98:99:bc:37:53:9b:ef:95:91:88:ab:
a9:ca:88:47:0c:3d:2b:35:86:f8:cc:76:41:ce:e8:
de:98:cf:72:be:1e:88:7f:f6:d4:ba:83:25:58:80:
78:0a:e7:fb:24:9e:21:04:ec:bd:47:1f:2b:3d:06:
27:c6:55:84:7d:1a:7f:04:65:35:ab:c7:31:07:27:
af:be:bf:d4:f5:0d:36:ed:46:74:5c:5c:42:56:71:
b6:c5:3e:5d:a5:9e:98:dc:29:7a:97:e4:e1:19:20:
a5:f2:b1:3f:7d:79:2f:a2:04:da:7c:55:2e:97:46:
11:c2:42:ba:32:94:ed:c7:77:cf:4e:db:9a:f3:96:
8f:8a:c3:8a:22:0c:6e:21:1e:b6:df:be:36:c8:4c:
08:8f:40:60:a2:52:54:ed:6b:16:8a:c0:32:53:55:
23:dc:38:27:16:42:b4:c3:43:d8:7b:8d:5f:8f:0d:
8d:9e:22:66:7b:e1:58:de:04:f1:09:e9:dc:94:4b:
7f:54:ea:9a:51:7c:22:38:74:f1:c7:a5:a9:bc:f5:
67:47:a5:fa:57:4b:c3:c9:97:e6:94:72:aa:83:de:
d4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:25:4B:D3:7E:B1:A5:C4:6D:FC:27:AF:BF:06:9F:D7:90:4A:E7:B8
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137362e35332e3137362e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.53.176.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:69:78:43:f8:1f:ca:76:c9:51:ad:a4:13:c2:be:a9:2e:2f:
22:99:49:2d:31:ce:c8:10:0a:3d:90:b7:ae:ea:2e:70:06:93:
ec:8c:6d:17:9b:e4:3c:3e:38:9e:b0:6c:49:02:19:02:c8:ec:
30:73:81:c8:56:07:d6:1b:01:8b:67:20:b9:c1:ae:e4:4e:47:
8b:cc:f1:90:60:62:3c:29:23:fb:2f:5d:44:0c:2c:6b:92:39:
90:be:ee:47:ea:e5:51:99:79:4a:75:a4:9c:8d:24:ce:da:33:
9f:73:f9:25:5c:ba:d0:9d:58:d7:40:4c:84:d1:13:10:47:da:
28:59:b1:7e:06:64:77:13:21:f7:27:db:2a:0e:d1:44:f0:be:
7b:47:a0:37:f7:06:6d:50:01:61:35:b7:b1:5d:8f:09:b6:38:
04:f9:5a:16:81:76:f1:6a:b9:08:13:36:20:00:7b:78:19:88:
d0:dd:c6:e5:b4:8a:67:ee:21:e7:89:a6:b3:61:f6:ac:3c:ce:
75:63:75:5b:52:86:c9:bf:2a:38:0b:6d:98:b2:f6:b4:48:e7:
d9:6c:61:8d:8c:f6:16:82:4a:b7:3b:ef:0d:3f:6f:e4:64:cf:
01:db:96:ce:14:36:47:b9:22:ab:e0:f4:81:b5:43:71:2e:8d:
95:d9:ce:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:49:00 2026 by rpki-client