Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e3230332e3136302e302f32322d3234203d3e203437353833.roa
File: 3139332e3230332e3136302e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: 7vvZbkqr5GkwKXiOzomYInSmos0C0t/M6DZFOH7/D5E=
Subject key identifier: E4:4E:02:8F:2C:EE:F4:80:70:BD:1C:E0:55:74:12:08:19:73:3E:9B
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 36D1A88CCD70B2C249EA7FACC96664A84B6F0774
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e3230332e3136302e302f32322d3234203d3e203437353833.roa
Signing time: Fri 05 Jun 2026 12:25:00 +0000
ROA not before: Fri 05 Jun 2026 12:20:00 +0000
ROA not after: Fri 04 Jun 2027 12:25:00 +0000
asID: 47583
IP address blocks: 193.203.160.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:42:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:d1:a8:8c:cd:70:b2:c2:49:ea:7f:ac:c9:66:64:a8:4b:6f:07:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 5 12:20:00 2026 GMT
Not After : Jun 4 12:25:00 2027 GMT
Subject: CN=E44E028F2CEEF48070BD1CE05574120819733E9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:39:ed:59:97:81:af:e2:e7:39:b3:6f:cc:e4:
41:3c:27:a8:f0:3c:f9:b1:c7:d7:97:e1:67:38:f5:
24:77:67:b4:8f:70:05:83:fa:c0:10:b8:fd:be:a4:
83:ea:45:84:44:05:37:6e:cb:69:b0:fe:24:b1:e2:
f9:5c:dc:e6:55:6e:50:34:fc:08:14:2a:81:43:8d:
0c:0b:05:a9:e1:b2:a8:29:87:13:cd:86:70:30:21:
7d:77:69:ef:ef:00:df:8b:8f:8b:0d:ad:72:44:33:
d0:5b:93:c1:e4:aa:72:01:e8:c2:29:b5:8f:62:c1:
70:28:14:27:33:c2:c8:fe:48:9b:e5:75:b8:4f:21:
32:4e:2b:d4:2d:1c:e7:5e:e2:e1:90:a0:60:27:c5:
53:a1:5d:27:a5:22:1e:85:4c:33:e4:a3:de:d1:89:
76:ff:e4:a6:8f:a9:9e:93:c4:9e:21:1b:c7:27:75:
37:ce:cd:13:4c:d5:52:c4:88:3f:94:5f:9b:8a:66:
83:c0:6a:cc:30:cf:50:42:69:f8:0b:b9:da:54:a3:
18:3e:e8:bb:0c:52:2e:50:25:03:9d:0e:e7:8c:df:
35:4f:3f:4b:18:50:76:d2:8d:7e:03:35:48:fc:f7:
c6:77:ab:47:ff:48:90:65:c2:42:fd:29:ec:86:71:
d8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:4E:02:8F:2C:EE:F4:80:70:BD:1C:E0:55:74:12:08:19:73:3E:9B
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e3230332e3136302e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.160.0/22
Signature Algorithm: sha256WithRSAEncryption
25:39:ae:32:da:1e:a0:b2:50:d4:47:f5:bc:b2:96:12:bf:c0:
33:a4:36:7b:c3:48:6a:77:02:f7:1e:a9:06:69:6e:c8:8b:eb:
2b:a1:3d:68:f7:82:c5:61:80:aa:d1:e2:23:2d:36:40:92:55:
f1:ef:1f:c2:2c:80:69:77:15:ad:a3:af:b8:f2:aa:cc:24:87:
f4:98:ac:f3:42:36:72:48:6b:1e:51:83:3c:78:3b:14:f9:4e:
75:5f:d5:26:27:5a:d2:4d:ef:36:44:6f:69:c3:94:92:af:0b:
fe:f3:ef:af:7b:60:bb:71:63:5a:12:20:74:96:e4:1f:3a:ff:
ff:a7:ad:94:bd:7c:3e:95:b8:51:7c:50:7e:da:76:a3:39:ec:
56:23:a0:53:f0:f2:01:71:94:c8:ed:99:20:80:94:39:68:63:
d2:cc:c1:eb:b9:2b:8e:16:f3:a5:ec:d5:68:a9:87:e6:83:07:
bd:51:54:77:11:29:1b:a4:06:24:fb:07:e0:49:5c:e0:e8:de:
71:87:cb:b8:e1:71:61:72:ce:26:4f:f5:8b:a4:6e:37:6f:9f:
41:39:83:7f:14:db:04:eb:62:0b:f4:02:6a:08:ef:75:e4:45:
5b:64:b7:bc:50:24:bd:8e:36:1e:10:52:22:8f:08:59:ec:7f:
48:0c:92:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:48:17 2026 by rpki-client