Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137382e3133322e3130362e302f32342d3234203d3e20313336373837.roa
File: 3137382e3133322e3130362e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: CQrc/M/tUhJafoG9V+uRgw4onvbsUdwo7b2Hi1KIUZs=
Subject key identifier: 2F:D9:10:66:ED:F5:FE:B6:4A:89:BD:B0:73:FF:33:86:07:BE:80:09
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 31798EBD2F4263601CE60E55AC53B7055E6369BE
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137382e3133322e3130362e302f32342d3234203d3e20313336373837.roa
Signing time: Wed 04 Feb 2026 20:23:16 +0000
ROA not before: Wed 04 Feb 2026 20:18:16 +0000
ROA not after: Wed 03 Feb 2027 20:23:16 +0000
asID: 136787
IP address blocks: 178.132.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:79:8e:bd:2f:42:63:60:1c:e6:0e:55:ac:53:b7:05:5e:63:69:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 4 20:18:16 2026 GMT
Not After : Feb 3 20:23:16 2027 GMT
Subject: CN=2FD91066EDF5FEB64A89BDB073FF338607BE8009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c2:f2:b6:38:fb:8d:bc:59:c3:1a:f7:b3:63:
e6:3d:d4:80:11:c5:2a:8f:19:05:21:b1:21:0f:e3:
70:9f:7a:8a:96:03:b1:71:10:dc:11:d9:13:69:ee:
3c:88:bc:ed:8e:df:b8:d0:72:86:dd:9c:91:ca:e6:
14:1f:e3:4f:6c:2f:33:7b:89:14:69:6a:37:12:e3:
1c:0e:56:34:b4:55:92:0f:66:84:9d:86:4e:25:30:
91:5e:fa:dc:71:9f:7b:7d:74:3b:0e:f8:de:21:56:
9d:8f:64:43:2d:d7:ee:28:da:4f:71:07:ff:21:27:
05:75:0d:84:cf:d3:9f:ec:94:24:d8:2c:5a:c8:84:
8f:d5:79:c7:49:d6:a6:61:66:d8:75:4a:ca:22:03:
af:aa:e9:f9:d4:a7:3f:ac:1e:99:0a:db:2a:5d:67:
3b:dc:85:2e:28:53:82:bb:66:68:9e:2f:98:33:2d:
6b:f9:11:17:6f:ad:60:80:89:f6:bf:5f:3c:b3:41:
a7:88:3c:e1:2b:31:ce:42:60:6a:6c:84:e1:81:7f:
e8:ba:db:b4:7a:99:7f:e3:41:82:70:d9:aa:7e:14:
1a:1f:17:9b:13:5a:dd:cc:af:bf:47:12:84:e1:da:
d0:12:28:4d:39:b3:19:55:93:7a:60:ba:9c:e6:e9:
30:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:D9:10:66:ED:F5:FE:B6:4A:89:BD:B0:73:FF:33:86:07:BE:80:09
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137382e3133322e3130362e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.132.106.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:c2:fe:1b:63:02:66:09:13:de:6a:95:11:b7:dd:34:d1:24:
d1:1e:8b:61:65:91:a1:56:69:07:c4:d5:33:b1:a0:f1:2d:b7:
9b:1e:38:c6:24:10:0f:a0:15:43:95:ee:ae:e1:51:bd:e7:ab:
5a:c5:c7:9e:87:ed:cb:cd:fa:38:22:79:5e:a5:5c:0b:3d:7f:
a8:43:ef:b6:92:87:1f:b7:a2:b9:93:a3:f6:84:f3:8b:22:23:
d4:58:fe:93:cb:e2:aa:6f:c0:82:1e:c1:10:50:4a:c4:e2:9a:
0a:6a:72:89:8b:2f:7a:f5:14:1b:15:41:7b:06:ab:23:2e:9f:
8f:9b:90:f9:6e:ea:43:99:ac:af:57:3f:d7:6f:65:bd:35:3a:
d1:9c:b2:08:87:6b:6c:a9:a4:af:b0:c6:97:87:7d:2a:9e:ed:
10:6a:b7:86:3e:c7:df:ba:9b:76:8f:c1:1b:34:90:80:e5:e7:
27:8b:0d:38:be:c2:eb:8c:a3:3c:33:3c:0d:75:6b:0c:15:ef:
73:88:77:9e:9c:af:07:85:7e:da:85:b8:c7:37:85:ed:61:5c:
7e:04:8a:eb:27:89:28:ed:45:07:3f:77:c1:1b:a6:6b:01:bd:
96:5c:40:1e:0c:b0:eb:d9:a6:f1:b3:42:d6:c4:28:7c:ce:44:
66:67:a3:8c
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUMXmOvS9CY2Ac5g5VrFO3BV5jab4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjAyMDQyMDE4MTZaFw0yNzAyMDMyMDIzMTZaMDMxMTAvBgNV
BAMTKDJGRDkxMDY2RURGNUZFQjY0QTg5QkRCMDczRkYzMzg2MDdCRTgwMDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBwvK2OPuNvFnDGvezY+Y91IAR
xSqPGQUhsSEP43CfeoqWA7FxENwR2RNp7jyIvO2O37jQcobdnJHK5hQf409sLzN7
iRRpajcS4xwOVjS0VZIPZoSdhk4lMJFe+txxn3t9dDsO+N4hVp2PZEMt1+4o2k9x
B/8hJwV1DYTP05/slCTYLFrIhI/VecdJ1qZhZth1SsoiA6+q6fnUpz+sHpkK2ypd
ZzvchS4oU4K7ZmieL5gzLWv5ERdvrWCAifa/XzyzQaeIPOErMc5CYGpshOGBf+i6
27R6mX/jQYJw2ap+FBofF5sTWt3Mr79HEoTh2tASKE05sxlVk3pgupzm6TBTAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUL9kQZu31/rZKib2wc/8zhge+gAkwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNzM4MmUzMTMzMzIyZTMx
MzAzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEALKEajANBgkqhkiG9w0BAQsFAAOCAQEASsL+G2MCZgkT3mqVEbfdNNEk0R6L
YWWRoVZpB8TVM7Gg8S23mx44xiQQD6AVQ5XuruFRveerWsXHnofty836OCJ5XqVc
Cz1/qEPvtpKHH7eiuZOj9oTziyIj1Fj+k8viqm/Agh7BEFBKxOKaCmpyiYsvevUU
GxVBewarIy6fj5uQ+W7qQ5msr1c/129lvTU60ZyyCIdrbKmkr7DGl4d9Kp7tEGq3
hj7H37qbdo/BGzSQgOXnJ4sNOL7C64yjPDM8DXVrDBXvc4h3npyvB4V+2oW4xzeF
7WFcfgSK6yeJKO1FBz93wRumawG9llxAHgyw69mm8bNC1sQofM5EZmejjA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:41:04 2026 by rpki-client