Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137382e3133322e3130342e302f32342d3234203d3e20323132323338.roa
File: 3137382e3133322e3130342e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: 9LZxAraHxqqbqXNy2/vc5gk3rfhYefrfK4NOxKFDJZ4=
Subject key identifier: 9C:2A:E4:59:E8:B6:6F:6D:22:03:F7:26:CC:9C:88:62:6B:58:68:C8
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 276FF1DB3BAAC6D4A9589F737E3CAFDE4F801CEC
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137382e3133322e3130342e302f32342d3234203d3e20323132323338.roa
Signing time: Fri 17 Apr 2026 10:23:45 +0000
ROA not before: Fri 17 Apr 2026 10:18:45 +0000
ROA not after: Fri 16 Apr 2027 10:23:45 +0000
asID: 212238
IP address blocks: 178.132.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:6f:f1:db:3b:aa:c6:d4:a9:58:9f:73:7e:3c:af:de:4f:80:1c:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 17 10:18:45 2026 GMT
Not After : Apr 16 10:23:45 2027 GMT
Subject: CN=9C2AE459E8B66F6D2203F726CC9C88626B5868C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:df:fe:34:54:7a:35:69:6a:c7:30:e5:41:ec:
b0:ee:4f:7b:9c:12:d2:21:28:bf:8c:0a:cd:62:ce:
76:66:78:42:ff:f2:7b:84:46:f2:b6:f4:6d:99:1c:
10:2c:ef:f8:12:d4:1f:fc:e4:6c:47:88:49:d9:48:
c8:bb:05:4e:23:31:80:a3:a1:c8:0e:59:c9:ea:3b:
c6:87:ad:bb:fc:3f:d4:1d:6e:f7:e8:34:f1:d7:c4:
5d:1f:32:52:ee:e4:83:cd:95:09:15:9d:2e:9c:f8:
fd:59:b5:ff:69:ee:d5:4a:05:be:43:8d:1a:bb:37:
f3:c4:3e:e1:ef:92:ef:df:4b:0d:3b:b3:a6:a2:05:
43:34:90:40:c7:92:79:62:d6:cb:46:15:0b:bd:87:
48:d6:4c:08:86:10:16:24:ae:aa:76:09:8f:75:02:
f6:20:2e:33:12:36:78:11:0b:8e:9e:62:34:53:f8:
f5:1f:a8:de:dc:7b:d6:7b:b0:ed:bd:2b:18:45:72:
fe:0c:90:35:10:bf:78:05:d5:09:ea:6a:f2:f6:19:
bd:1a:90:f4:d7:1f:9b:45:33:c7:de:c2:0b:f8:39:
ae:20:cd:e5:15:e1:57:58:ed:f5:18:f2:5b:dc:85:
25:56:f2:15:e9:3d:e8:56:7e:55:e1:89:d6:13:34:
82:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:2A:E4:59:E8:B6:6F:6D:22:03:F7:26:CC:9C:88:62:6B:58:68:C8
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137382e3133322e3130342e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.132.104.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:ff:8f:20:e1:e0:42:41:ea:15:7f:53:9c:03:ad:3e:12:89:
2b:f3:35:ef:8a:f6:1e:e7:e9:03:f6:e1:f6:fe:56:99:95:45:
6b:96:6a:ca:ae:aa:90:26:3a:03:87:1e:08:c5:14:0f:f9:98:
06:c4:1a:fc:b7:27:7c:94:2a:a9:60:92:dc:e1:f9:71:6c:82:
c6:cf:48:cd:18:7c:21:d6:7f:dd:d4:06:c8:21:b0:07:07:b8:
5c:68:37:df:d1:eb:8d:5f:fe:fb:c0:17:a4:45:e5:59:d5:32:
0c:0d:af:c6:fa:2b:c9:ca:87:5e:6d:a7:6d:bb:84:c8:5a:9f:
83:57:80:ba:63:f3:f7:25:63:41:cb:e6:3a:6c:b6:78:61:dc:
4d:3c:56:88:01:ba:31:e2:4e:f0:94:72:9d:12:82:d9:3c:3c:
4f:2b:0e:7b:36:d7:f0:7c:98:ae:c1:78:43:e7:13:60:c1:aa:
ac:fc:8d:9a:f7:27:55:f3:c9:56:59:bb:f3:78:2e:83:d2:77:
a3:22:3b:c9:d5:72:88:64:b3:b0:ed:45:a5:49:6a:21:1c:dc:
d6:3e:0a:b0:a8:ce:73:fd:4c:d6:f8:2a:11:03:db:f2:96:cc:
be:03:84:a0:63:6e:fc:9b:72:c4:3f:64:fe:cb:7e:30:e1:f3:
21:1b:12:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:42:26 2026 by rpki-client