Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137382e31362e3133322e302f32322d3234203d3e203437353833.roa
File: 3137382e31362e3133322e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: X/dWhv/38fDD8yO7ox2eTEa48ij8FuAjmFRKbro4ju0=
Subject key identifier: 3E:CF:36:19:E5:3D:CF:D3:5D:8C:9A:7F:36:D4:43:16:D4:AB:F8:D3
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 733A51A2E713EABBC2917352F6D92361D325B26A
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137382e31362e3133322e302f32322d3234203d3e203437353833.roa
Signing time: Thu 16 Apr 2026 11:23:42 +0000
ROA not before: Thu 16 Apr 2026 11:18:42 +0000
ROA not after: Thu 15 Apr 2027 11:23:42 +0000
asID: 47583
IP address blocks: 178.16.132.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:3a:51:a2:e7:13:ea:bb:c2:91:73:52:f6:d9:23:61:d3:25:b2:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 16 11:18:42 2026 GMT
Not After : Apr 15 11:23:42 2027 GMT
Subject: CN=3ECF3619E53DCFD35D8C9A7F36D44316D4ABF8D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b4:8c:ca:7c:40:de:39:b2:a0:ae:5d:73:4e:
60:d9:d8:d3:64:e0:cc:c5:66:18:72:fd:c8:61:dd:
18:1c:a9:67:4e:1f:ef:c2:c1:73:ea:7f:f1:ee:d8:
30:13:f4:71:ed:c3:e4:02:cf:64:f6:b9:45:c2:02:
df:87:70:60:1c:43:a0:89:a0:32:ee:5b:d8:fa:0e:
1c:b3:0e:ce:02:e6:97:15:dc:f2:10:bb:d6:30:24:
c4:0a:b1:3b:97:17:09:ed:d4:e8:bb:8b:17:45:cf:
9d:83:39:d5:87:75:5f:a2:da:74:b4:65:00:68:47:
90:d4:f7:84:ca:e0:1f:b0:65:fa:25:95:ce:25:ac:
b3:10:c4:29:b7:bd:18:ec:b4:dc:73:cb:fb:9a:0a:
fe:af:9d:60:5f:8b:17:84:ea:01:7c:eb:dd:37:c4:
ee:01:88:0a:14:fa:2a:76:74:c3:38:a0:96:b9:62:
f5:b4:6b:33:66:32:5a:f9:07:cd:ec:ac:56:89:a2:
5e:c6:f7:d5:6b:a7:ee:b3:07:98:21:76:a6:4d:62:
fe:b7:ca:d7:6f:ec:89:a1:a3:c9:e5:a7:27:87:7d:
cc:6f:75:18:ff:64:3a:ed:8e:44:6c:d4:8d:44:21:
f4:b6:70:68:b1:3c:4c:c2:fe:29:da:fb:02:a9:7f:
7c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:CF:36:19:E5:3D:CF:D3:5D:8C:9A:7F:36:D4:43:16:D4:AB:F8:D3
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137382e31362e3133322e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.16.132.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:dc:f9:88:0c:dd:f9:92:d6:3c:a6:12:62:10:94:c4:a8:5d:
90:92:6b:4a:2f:3e:9e:0b:73:94:50:55:a1:f4:7c:0f:64:24:
7f:01:b2:f0:fc:88:98:f0:83:f1:a7:2f:ca:78:a5:ae:f4:94:
cd:b4:ff:fb:c3:2e:92:af:63:99:06:6b:76:ce:af:e3:20:36:
68:fd:10:5c:1d:c9:46:7f:0c:f8:42:63:8a:85:b7:9a:75:f7:
30:c2:ba:93:9c:25:7e:cb:d4:a2:69:1f:3e:8e:3f:d5:86:29:
6a:ae:1f:56:15:91:66:1c:3d:f1:8a:85:04:f5:7f:63:93:11:
a6:52:06:a1:f4:e7:d5:56:c5:6b:9a:2f:d9:2b:0e:39:5e:cb:
49:0d:d5:8b:4b:bd:04:ad:9b:48:ad:00:69:24:3b:d1:4a:47:
ef:ef:7f:a8:6c:5c:3a:50:36:b3:0f:0b:ab:0d:c3:81:5b:76:
de:33:bb:b3:f1:66:87:9c:fa:e3:61:b8:f3:92:ee:10:ba:56:
16:89:48:9a:8f:e0:fb:7a:23:c2:f1:b0:68:1d:dc:b0:7a:f1:
3e:a3:cf:66:db:7f:7b:f5:b2:d3:b3:27:99:53:67:f2:b8:a4:
42:f6:dd:3a:cd:37:dd:67:3c:8f:fc:7f:0c:4d:14:1d:96:bb:
b9:4e:bf:ef
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUczpRoucT6rvCkXNS9tkjYdMlsmowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA0MTYxMTE4NDJaFw0yNzA0MTUxMTIzNDJaMDMxMTAvBgNV
BAMTKDNFQ0YzNjE5RTUzRENGRDM1RDhDOUE3RjM2RDQ0MzE2RDRBQkY4RDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLtIzKfEDeObKgrl1zTmDZ2NNk
4MzFZhhy/chh3RgcqWdOH+/CwXPqf/Hu2DAT9HHtw+QCz2T2uUXCAt+HcGAcQ6CJ
oDLuW9j6DhyzDs4C5pcV3PIQu9YwJMQKsTuXFwnt1Oi7ixdFz52DOdWHdV+i2nS0
ZQBoR5DU94TK4B+wZfollc4lrLMQxCm3vRjstNxzy/uaCv6vnWBfixeE6gF86903
xO4BiAoU+ip2dMM4oJa5YvW0azNmMlr5B83srFaJol7G99Vrp+6zB5ghdqZNYv63
ytdv7Imho8nlpyeHfcxvdRj/ZDrtjkRs1I1EIfS2cGixPEzC/ina+wKpf3yDAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUPs82GeU9z9NdjJp/NtRDFtSr+NMwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNzM4MmUzMTM2MmUzMTMz
MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNDM3MzUzODMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
shCEMA0GCSqGSIb3DQEBCwUAA4IBAQBa3PmIDN35ktY8phJiEJTEqF2QkmtKLz6e
C3OUUFWh9HwPZCR/AbLw/IiY8IPxpy/KeKWu9JTNtP/7wy6Sr2OZBmt2zq/jIDZo
/RBcHclGfwz4QmOKhbeadfcwwrqTnCV+y9SiaR8+jj/Vhilqrh9WFZFmHD3xioUE
9X9jkxGmUgah9OfVVsVrmi/ZKw45XstJDdWLS70ErZtIrQBpJDvRSkfv73+obFw6
UDazDwurDcOBW3beM7uz8WaHnPrjYbjzku4QulYWiUiaj+D7eiPC8bBoHdywevE+
o89m23979bLTsyeZU2fyuKRC9t06zTfdZzyP/H8MTRQdlru5Tr/v
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:35:45 2026 by rpki-client