Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e3136302e3131382e302f32342d3234203d3e20323132323338.roa
File: 3139332e3136302e3131382e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: 9HjSQiI9jQucz9QSqI1J1hiDyehc2cYKorZVW4BIayk=
Subject key identifier: A0:04:BE:8B:34:63:6E:61:02:01:C8:27:A8:E0:63:A9:40:29:0D:01
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 212A728E9B97A231AF0741AD3AE31C0656B8B4FC
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e3136302e3131382e302f32342d3234203d3e20323132323338.roa
Signing time: Fri 17 Apr 2026 10:23:45 +0000
ROA not before: Fri 17 Apr 2026 10:18:45 +0000
ROA not after: Fri 16 Apr 2027 10:23:45 +0000
asID: 212238
IP address blocks: 193.160.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:2a:72:8e:9b:97:a2:31:af:07:41:ad:3a:e3:1c:06:56:b8:b4:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 17 10:18:45 2026 GMT
Not After : Apr 16 10:23:45 2027 GMT
Subject: CN=A004BE8B34636E610201C827A8E063A940290D01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a5:8a:37:99:28:dc:4c:3e:bf:88:6c:02:58:
b4:2a:5e:7f:9b:ad:bf:74:7b:98:70:ff:16:f1:fe:
82:8e:7d:dd:21:bb:ac:9e:8e:a7:a2:5a:a7:92:d4:
fd:89:97:09:e3:05:25:47:c3:02:7b:6a:5a:6f:5d:
ca:ec:9b:03:8d:34:44:8c:99:a0:fc:9b:de:0e:64:
7e:09:1f:f2:54:10:ae:24:37:ff:63:39:59:a9:c3:
d2:c4:04:ba:35:d7:c3:d8:26:45:14:d8:82:3b:d9:
bb:d3:ad:21:58:e0:59:9d:af:20:05:e0:11:7e:4a:
f9:1d:4f:fe:de:1c:3f:71:2f:7a:17:d0:63:14:7c:
37:b5:81:ed:43:59:5a:ba:01:ed:9a:66:4a:30:f7:
f0:76:2d:d2:34:e2:c6:10:78:b4:1b:a4:f2:1e:2b:
87:dc:a5:82:6d:bb:0e:71:87:46:c8:36:f4:f4:18:
9e:cf:d8:e1:d0:cd:da:4b:25:f2:1b:6f:a9:d0:84:
33:f3:80:4c:2a:aa:7f:85:e4:68:ae:16:85:f5:95:
ab:89:20:22:3d:62:7f:1b:fb:61:ea:ad:d8:04:9b:
83:63:61:55:de:c5:6d:0b:35:7d:e6:cf:23:5d:39:
f7:97:5b:0d:0f:c5:83:8c:77:ee:94:4f:a1:f2:ac:
64:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:04:BE:8B:34:63:6E:61:02:01:C8:27:A8:E0:63:A9:40:29:0D:01
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e3136302e3131382e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.118.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:fd:11:5b:8d:98:85:02:56:ea:4b:88:71:56:82:74:3f:bc:
f9:32:4a:81:f9:d5:bf:23:7b:f6:3d:8b:9c:f6:87:e1:a9:ed:
a7:7d:09:a8:ad:ec:1b:9b:2e:29:4f:77:ed:19:f1:71:4b:53:
6a:2d:4b:c4:5f:a6:63:35:e6:18:b0:31:bb:63:80:3f:5a:00:
62:32:70:00:f5:df:fb:eb:9e:06:eb:e8:52:79:bb:01:e4:19:
db:0a:92:81:20:e6:05:b1:0e:57:b4:36:f0:35:74:35:b2:da:
86:34:44:78:cd:92:63:51:c3:b1:3f:54:15:0c:b6:2f:87:33:
e8:d7:bd:bd:a2:a0:8c:ae:52:b9:03:ee:b0:71:24:66:04:2f:
67:30:20:5e:86:3b:b6:8d:56:a8:55:14:2c:13:40:d7:14:57:
20:da:d9:4a:49:1e:2b:99:5a:fb:db:79:71:3e:22:e1:b3:7e:
7f:5b:1d:d7:c2:0a:ed:0c:3e:b9:fe:25:40:47:2c:d8:ec:58:
4f:26:c5:c3:9e:04:4b:ee:ed:03:89:84:ae:c0:fd:5c:82:5f:
24:90:76:32:1f:d1:23:69:0b:8d:67:45:0c:95:b0:85:cb:a2:
07:e3:b5:ea:26:30:33:5a:84:7b:bf:42:1b:8d:fb:80:c3:b5:
b6:2b:00:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:34:15 2026 by rpki-client