Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137382e31362e3134302e302f32322d3234203d3e203437353833.roa
File: 3137382e31362e3134302e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: 29lN1J2WMku04dANUuINyYjw75YAH7JqC1NwFnmW0Jk=
Subject key identifier: F5:57:79:C0:4A:5A:24:1A:D9:85:21:EC:C8:5D:D5:5A:AB:EE:B0:59
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 05F51551518D2DFE1206512E36CB20BDEB568502
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137382e31362e3134302e302f32322d3234203d3e203437353833.roa
Signing time: Thu 16 Apr 2026 11:23:41 +0000
ROA not before: Thu 16 Apr 2026 11:18:41 +0000
ROA not after: Thu 15 Apr 2027 11:23:41 +0000
asID: 47583
IP address blocks: 178.16.140.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:f5:15:51:51:8d:2d:fe:12:06:51:2e:36:cb:20:bd:eb:56:85:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 16 11:18:41 2026 GMT
Not After : Apr 15 11:23:41 2027 GMT
Subject: CN=F55779C04A5A241AD98521ECC85DD55AABEEB059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:57:4b:d1:dc:e2:f6:01:22:aa:92:e7:4e:15:
ef:2f:9c:6d:65:06:0c:68:bb:94:24:4f:f3:f6:a6:
fd:12:43:80:fb:fc:3d:36:cf:db:a2:28:cb:8a:75:
3b:cd:42:a3:31:fb:ed:1c:55:c8:b6:0f:0e:02:52:
2d:11:e8:5c:4e:0c:3d:4a:fc:65:b2:94:e0:3c:70:
cc:76:cb:f0:b3:14:19:62:b9:3b:48:ff:69:6e:42:
97:d3:74:a5:a5:2d:79:f6:80:38:da:f1:50:46:b9:
01:bc:84:19:81:49:10:0a:2d:8e:da:9e:05:1e:34:
99:04:1d:cd:5c:aa:24:a0:65:c6:1c:15:8f:1c:d6:
cb:e4:50:b9:cd:20:31:5c:c7:bc:13:3f:c0:b5:27:
56:2b:19:9a:52:f9:08:6b:60:8d:b2:b8:6b:b6:a4:
42:48:26:cf:c7:ed:32:db:e5:cc:0a:2e:ac:c7:40:
33:10:32:8f:33:c2:b4:6f:b7:2a:3e:54:b9:8c:35:
3d:d7:d5:39:8e:2f:57:23:5c:92:c1:c2:20:05:86:
e7:ee:f3:45:19:e3:95:f7:73:f2:9e:f9:22:64:1b:
15:f3:cf:5d:5a:65:34:d0:d3:67:fc:52:f4:e8:4c:
29:88:01:23:3b:84:20:d1:38:e7:28:af:2e:46:91:
5a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:57:79:C0:4A:5A:24:1A:D9:85:21:EC:C8:5D:D5:5A:AB:EE:B0:59
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137382e31362e3134302e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.16.140.0/22
Signature Algorithm: sha256WithRSAEncryption
22:0c:0d:1d:f4:9a:62:2b:1e:b5:13:f7:db:df:91:bc:6e:57:
44:96:47:e6:38:0a:b8:8c:9c:12:82:6a:6c:ad:8a:9c:d8:34:
d0:c1:07:41:90:60:8a:dc:54:9f:95:39:12:2c:50:30:76:5d:
0d:fe:79:4c:c4:2e:58:5f:94:63:fd:12:5b:f0:9b:be:58:68:
76:ec:e8:0e:6d:dc:e2:c0:e5:7f:8d:ac:de:ee:1c:b4:83:e0:
fc:f2:45:fb:3e:a1:9c:cd:cd:4f:c7:60:c7:a2:99:72:06:82:
4f:6f:8c:96:e6:51:6d:01:bc:e9:ab:f3:75:1c:44:24:73:e2:
06:43:b3:89:4f:35:f3:38:d1:41:f3:9c:e9:66:4b:af:d6:f5:
08:9d:bd:45:0c:d3:6a:19:54:b9:70:d2:93:95:ee:b6:d1:15:
df:d1:18:59:0f:b4:1f:a8:bf:c4:58:af:e4:37:0d:52:ff:79:
36:78:70:b4:33:c9:25:8c:61:5b:0b:bb:de:80:b6:b2:bb:d5:
cf:7d:b9:25:09:02:a8:2f:d5:99:17:60:94:9b:57:9c:72:92:
9a:08:19:ab:90:bf:1f:76:bd:ae:7b:23:c1:2e:e8:2e:f4:13:
cd:0b:95:63:f0:7c:f4:58:7b:4f:f0:cf:29:37:d0:32:5c:66:
0f:89:19:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:29:00 2026 by rpki-client