Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e3230332e3136342e302f32322d3234203d3e203437353833.roa
File: 3139332e3230332e3136342e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: vEDor0sR+jOWOMGztLVy9g24SnsSD5tXlcwgJzUgFHE=
Subject key identifier: C3:0C:25:E5:9A:EE:B3:C9:73:B5:2E:A3:CB:C9:D1:1F:22:67:A2:50
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3322E79C9D97A152FED6F3A89A6FFED442EE1F1B
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e3230332e3136342e302f32322d3234203d3e203437353833.roa
Signing time: Fri 05 Jun 2026 12:25:00 +0000
ROA not before: Fri 05 Jun 2026 12:20:00 +0000
ROA not after: Fri 04 Jun 2027 12:25:00 +0000
asID: 47583
IP address blocks: 193.203.164.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:22:e7:9c:9d:97:a1:52:fe:d6:f3:a8:9a:6f:fe:d4:42:ee:1f:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 5 12:20:00 2026 GMT
Not After : Jun 4 12:25:00 2027 GMT
Subject: CN=C30C25E59AEEB3C973B52EA3CBC9D11F2267A250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b7:95:7e:57:2c:ab:3c:a0:75:97:65:05:44:
d6:89:6f:64:d2:b0:a4:ec:89:8b:e4:cf:b7:68:c0:
f1:c8:86:d0:61:c6:fb:87:69:c4:84:9e:17:0b:fd:
86:1e:4b:94:85:71:fa:64:f4:46:58:7d:a6:35:f8:
c2:c9:f4:b1:34:9f:19:03:ae:bb:e6:b4:a2:77:42:
aa:dd:e3:70:53:40:b3:ed:16:75:f7:0a:6d:2c:cd:
b2:65:0b:3b:80:82:38:73:a5:49:b0:0c:85:92:6f:
ad:58:c2:5c:b5:c2:22:ae:7c:e4:60:c1:dd:5c:6a:
0e:74:6c:46:49:c5:be:27:61:f0:6a:6b:7d:e1:58:
d0:ec:b0:2e:df:c7:ec:2f:9b:20:e2:29:30:b0:b1:
ce:79:df:5c:bf:da:b0:c5:cf:7e:40:00:c3:ab:ad:
e8:43:e5:d7:38:bb:7b:53:39:ac:fe:e4:c3:47:fd:
72:ab:1b:c6:c5:67:80:49:7c:bb:ad:26:5f:ff:ee:
9a:10:ee:13:4d:27:52:31:a7:13:57:80:54:aa:75:
d6:83:94:f3:32:d8:8f:cb:1a:7a:4d:19:d2:28:1e:
77:50:81:61:e5:6f:37:f7:d6:38:94:b4:ae:84:05:
b3:80:d3:5c:40:98:b8:94:b4:f3:f6:3d:62:e9:e4:
7f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:0C:25:E5:9A:EE:B3:C9:73:B5:2E:A3:CB:C9:D1:1F:22:67:A2:50
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e3230332e3136342e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.164.0/22
Signature Algorithm: sha256WithRSAEncryption
65:b3:2f:85:f6:89:08:3f:82:4f:1f:2e:e9:f8:7c:96:dc:8e:
f2:a1:82:56:89:4a:ec:e2:2b:79:c5:fc:7d:43:9d:8f:50:8f:
9a:09:eb:76:89:ea:8b:c8:f6:41:86:ad:b4:33:35:54:ee:fd:
4a:c0:64:39:e5:17:82:08:e1:33:74:87:b9:34:1c:1f:26:32:
09:bf:d7:54:a2:71:a9:08:4a:4b:6c:4b:9b:32:21:71:1c:be:
fa:d0:02:fd:6c:85:91:1f:d7:58:16:26:78:95:3a:c9:ef:93:
5e:ed:c8:46:b4:7e:02:b2:ff:4a:83:c8:96:7d:33:56:da:6a:
14:b2:61:96:ed:c5:0b:f3:71:f6:84:2a:90:77:0c:39:a4:6b:
69:a6:67:46:d1:97:59:0a:70:b7:6d:fe:95:6f:35:01:4b:e3:
29:43:a8:ca:91:b4:aa:61:9d:4d:9f:c2:48:78:44:74:9a:7b:
81:64:18:e9:52:16:73:bc:31:9d:9e:25:37:72:c4:3b:7f:10:
3e:8d:a2:0e:0d:ae:ec:f1:e6:45:81:ef:7c:b9:52:6f:ce:8f:
c2:32:74:5a:4d:fb:ed:f0:71:cc:b3:5b:d2:b7:6b:0e:83:2f:
19:be:3a:cd:9b:a5:29:08:88:9d:2f:9b:4e:2e:9f:74:9a:e7:
b0:9c:bc:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:38:50 2026 by rpki-client