Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137382e3133322e3130392e302f32342d3234203d3e20323132323338.roa
File: 3137382e3133322e3130392e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: oy89Uwqo6aM5dVW3w5CyG1/px3GRR+PUou/472VxhtY=
Subject key identifier: 44:E7:6E:F0:48:BE:35:9D:B8:B5:AB:63:A4:A9:F7:7D:CE:CC:B8:10
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 160E989973CA0D6CF297B384FFCD991E936947BC
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137382e3133322e3130392e302f32342d3234203d3e20323132323338.roa
Signing time: Mon 01 Jun 2026 22:24:46 +0000
ROA not before: Mon 01 Jun 2026 22:19:46 +0000
ROA not after: Mon 31 May 2027 22:24:46 +0000
asID: 212238
IP address blocks: 178.132.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:42:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:0e:98:99:73:ca:0d:6c:f2:97:b3:84:ff:cd:99:1e:93:69:47:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 1 22:19:46 2026 GMT
Not After : May 31 22:24:46 2027 GMT
Subject: CN=44E76EF048BE359DB8B5AB63A4A9F77DCECCB810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0b:40:36:b7:18:11:cb:3e:91:f5:c1:a2:8f:
8c:5b:4d:a2:8d:39:c2:73:f4:c9:95:e7:3b:d2:37:
33:80:93:f5:17:6d:0a:b8:b8:02:45:60:05:42:17:
68:a1:e3:2b:c9:d4:60:01:44:d7:38:bc:d2:ee:1e:
7b:09:05:48:4b:0e:cd:ff:27:82:f7:7f:92:e4:18:
09:43:1f:40:80:e9:e0:fd:cc:84:4f:51:54:74:2b:
f6:5c:20:3f:b2:b1:01:3b:71:40:36:1d:6c:0f:0a:
7d:b6:2c:7c:b9:19:31:9b:50:b5:ee:79:83:ab:f2:
5d:f8:9b:f5:10:0a:2c:4e:8f:ad:6f:7a:a2:e9:bd:
0f:c3:20:55:1f:42:e4:0a:6a:e3:64:78:c9:96:bd:
3d:77:35:d4:ff:1a:78:64:b6:9b:87:69:94:67:2a:
26:af:f1:7d:01:80:be:bf:46:df:3f:31:8e:a8:2e:
77:8b:1b:b6:ce:01:f1:33:8b:7a:84:b3:dc:ad:c9:
37:81:c5:75:b4:8f:53:53:99:a9:a5:d7:d8:a1:d2:
88:f0:48:86:f8:d9:b8:d0:e3:fc:7e:02:e7:66:bf:
99:76:27:04:e8:e3:5a:39:d1:14:23:99:0d:a0:53:
50:b5:87:9c:f4:24:a0:04:0f:6e:8a:53:77:86:d6:
b6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E7:6E:F0:48:BE:35:9D:B8:B5:AB:63:A4:A9:F7:7D:CE:CC:B8:10
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137382e3133322e3130392e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.132.109.0/24
Signature Algorithm: sha256WithRSAEncryption
15:54:f1:14:82:76:2d:41:c6:36:e8:6f:67:76:0a:57:ab:c4:
6b:b7:e6:fb:a8:50:1d:c2:56:45:90:74:2d:45:6b:3b:83:d6:
55:64:24:8c:c6:86:b3:6c:c9:b8:8a:66:31:47:f4:25:59:3b:
e3:21:2c:84:9e:30:fd:71:13:b4:b6:9b:58:14:51:b6:cb:e8:
99:a6:b6:96:89:7f:11:92:92:7f:99:c8:80:4f:94:eb:28:03:
1c:6d:fb:59:9d:fb:0b:57:71:71:a7:af:a1:a4:11:20:ad:f2:
c2:eb:bb:94:d9:7d:96:89:ca:82:e1:a2:1d:7c:79:d0:15:4d:
ef:ae:f6:9f:5f:3a:71:63:9a:1b:26:21:33:22:5b:14:cd:15:
ab:9c:b0:73:81:be:ae:c3:45:d3:21:d1:12:09:c5:91:14:a1:
94:f6:b9:02:32:9d:87:43:86:56:4e:fd:e0:e0:33:fd:0e:73:
f1:94:40:59:e4:cb:b6:c6:45:cb:ef:b7:0e:71:f8:a2:e7:1f:
60:38:e0:fb:57:8a:e3:2b:43:fe:5a:81:26:d6:5b:a6:cc:d7:
90:8c:b1:c2:ad:fb:1c:f0:84:13:7c:34:49:33:6c:0e:4f:f2:
84:a1:32:10:e6:d8:7c:df:79:8e:d1:d9:bc:5e:92:d2:dd:e5:
e8:85:c4:e9
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUFg6YmXPKDWzyl7OE/82ZHpNpR7wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA2MDEyMjE5NDZaFw0yNzA1MzEyMjI0NDZaMDMxMTAvBgNV
BAMTKDQ0RTc2RUYwNDhCRTM1OURCOEI1QUI2M0E0QTlGNzdEQ0VDQ0I4MTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLC0A2txgRyz6R9cGij4xbTaKN
OcJz9MmV5zvSNzOAk/UXbQq4uAJFYAVCF2ih4yvJ1GABRNc4vNLuHnsJBUhLDs3/
J4L3f5LkGAlDH0CA6eD9zIRPUVR0K/ZcID+ysQE7cUA2HWwPCn22LHy5GTGbULXu
eYOr8l34m/UQCixOj61veqLpvQ/DIFUfQuQKauNkeMmWvT13NdT/GnhktpuHaZRn
Kiav8X0BgL6/Rt8/MY6oLneLG7bOAfEzi3qEs9ytyTeBxXW0j1NTmaml19ih0ojw
SIb42bjQ4/x+Audmv5l2JwTo41o50RQjmQ2gU1C1h5z0JKAED26KU3eG1rbzAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUROdu8Ei+NZ24tatjpKn3fc7MuBAwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNzM4MmUzMTMzMzIyZTMx
MzAzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzMjMyMzMzOC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEALKEbTANBgkqhkiG9w0BAQsFAAOCAQEAFVTxFIJ2LUHGNuhvZ3YKV6vEa7fm
+6hQHcJWRZB0LUVrO4PWVWQkjMaGs2zJuIpmMUf0JVk74yEshJ4w/XETtLabWBRR
tsvomaa2lol/EZKSf5nIgE+U6ygDHG37WZ37C1dxcaevoaQRIK3ywuu7lNl9lonK
guGiHXx50BVN7672n186cWOaGyYhMyJbFM0Vq5ywc4G+rsNF0yHREgnFkRShlPa5
AjKdh0OGVk794OAz/Q5z8ZRAWeTLtsZFy++3DnH4oucfYDjg+1eK4ytD/lqBJtZb
pszXkIyxwq37HPCEE3w0STNsDk/yhKEyEObYfN95jtHZvF6S0t3l6IXE6Q==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:27:43 2026 by rpki-client