Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e3230332e3136382e302f32322d3234203d3e203437353833.roa
File: 3139332e3230332e3136382e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: +LKLjO+Nm4JtYYnvrQiCzD4c01HbC5nHe9LK+rsrpso=
Subject key identifier: CF:AB:05:CF:1C:36:69:A1:59:3A:EE:7F:C3:7A:D1:95:10:DB:CF:D0
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 20FE35490068E637A2C52F0435C8E8802B2FB92B
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e3230332e3136382e302f32322d3234203d3e203437353833.roa
Signing time: Fri 05 Jun 2026 12:25:00 +0000
ROA not before: Fri 05 Jun 2026 12:20:00 +0000
ROA not after: Fri 04 Jun 2027 12:25:00 +0000
asID: 47583
IP address blocks: 193.203.168.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:fe:35:49:00:68:e6:37:a2:c5:2f:04:35:c8:e8:80:2b:2f:b9:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 5 12:20:00 2026 GMT
Not After : Jun 4 12:25:00 2027 GMT
Subject: CN=CFAB05CF1C3669A1593AEE7FC37AD19510DBCFD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5c:cf:ea:f7:b3:d6:1d:f4:66:55:be:04:f6:
88:7b:a3:cf:f8:f5:af:d5:2a:96:ea:e5:12:93:cf:
d3:a7:10:82:c5:50:18:1a:e1:2c:45:56:87:68:ca:
d8:e7:2f:22:ab:4c:3e:89:42:26:06:89:78:58:ca:
eb:ca:8f:db:74:1c:3e:4b:71:f7:35:3d:da:ae:27:
e1:9f:81:3b:47:65:b5:38:b9:da:d6:ce:e8:63:3a:
32:bd:23:2e:d3:da:fa:55:7b:cb:6d:11:19:28:73:
de:72:0e:46:0f:91:d9:0c:bf:1c:d6:09:90:de:53:
fe:c7:d7:67:e0:d3:95:81:82:86:c6:30:49:70:f0:
bb:0d:a6:19:5e:d6:3c:e6:ef:50:2b:33:40:2a:42:
a7:fd:12:6d:d2:2d:66:45:e9:9e:e2:01:f8:ce:a3:
91:38:02:9f:cf:0e:cf:d4:3e:92:73:96:06:c4:fa:
b3:f4:be:59:23:74:a6:68:80:d7:d2:ea:18:1d:1f:
46:df:e8:be:d8:20:ea:fc:ce:99:6d:1a:b9:43:cf:
cd:af:b6:1d:62:5d:9f:82:29:29:42:26:52:6f:e1:
8c:e5:a9:f1:0a:df:4d:98:56:ea:bd:f1:bb:3e:c4:
22:5e:4a:34:bf:fc:97:3b:9f:5e:c1:4b:b3:2c:0f:
d4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:AB:05:CF:1C:36:69:A1:59:3A:EE:7F:C3:7A:D1:95:10:DB:CF:D0
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e3230332e3136382e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.168.0/22
Signature Algorithm: sha256WithRSAEncryption
36:eb:f1:5e:df:a9:2b:87:99:84:9c:1f:0d:fd:8d:86:0f:d3:
73:b7:ef:61:5c:56:92:34:7c:55:6d:7d:fc:14:1b:2b:bc:18:
02:78:d1:77:ca:61:93:63:ec:d8:81:69:6f:17:b6:98:1d:0b:
cf:2e:9a:76:86:8b:95:a3:47:5a:87:5a:ef:6e:47:cf:9b:af:
3d:a4:49:0b:41:8b:85:83:b8:63:81:b0:3c:b6:1c:67:57:bc:
e7:a1:aa:8a:31:d6:be:f5:80:55:dc:18:9d:b6:6a:12:de:77:
31:b6:b4:2e:e8:92:d4:e9:72:11:d5:b2:c3:00:12:64:bc:44:
4f:ef:1b:86:be:de:28:f7:f3:d3:58:26:73:ea:9c:47:13:67:
bb:6a:8b:5e:d1:94:6f:1c:d2:ec:c3:00:cf:3b:ed:46:96:9e:
ec:64:1b:58:2c:77:92:da:00:9b:bc:db:e8:e8:18:3a:16:1c:
43:b6:30:9c:2e:75:50:d2:b5:7d:69:98:86:8d:ce:47:6c:a4:
0d:a8:9b:8d:80:ea:fc:6a:b1:ff:12:ac:3b:aa:fe:5e:bc:87:
74:6a:3b:7d:0f:b8:1c:36:19:28:a3:d4:48:76:49:c6:ea:f1:
82:1d:80:e9:05:8f:b3:33:79:00:cf:44:a5:7e:58:8b:73:ec:
f8:9d:3a:75
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUIP41SQBo5jeixS8ENcjogCsvuSswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA2MDUxMjIwMDBaFw0yNzA2MDQxMjI1MDBaMDMxMTAvBgNV
BAMTKENGQUIwNUNGMUMzNjY5QTE1OTNBRUU3RkMzN0FEMTk1MTBEQkNGRDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeXM/q97PWHfRmVb4E9oh7o8/4
9a/VKpbq5RKTz9OnEILFUBga4SxFVodoytjnLyKrTD6JQiYGiXhYyuvKj9t0HD5L
cfc1PdquJ+GfgTtHZbU4udrWzuhjOjK9Iy7T2vpVe8ttERkoc95yDkYPkdkMvxzW
CZDeU/7H12fg05WBgobGMElw8LsNphle1jzm71ArM0AqQqf9Em3SLWZF6Z7iAfjO
o5E4Ap/PDs/UPpJzlgbE+rP0vlkjdKZogNfS6hgdH0bf6L7YIOr8zpltGrlDz82v
th1iXZ+CKSlCJlJv4YzlqfEK302YVuq98bs+xCJeSjS//Jc7n17BS7MsD9TPAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUz6sFzxw2aaFZOu5/w3rRlRDbz9AwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzOTMzMmUzMjMwMzMyZTMx
MzYzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM0MzczNTM4MzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BALBy6gwDQYJKoZIhvcNAQELBQADggEBADbr8V7fqSuHmYScHw39jYYP03O372Fc
VpI0fFVtffwUGyu8GAJ40XfKYZNj7NiBaW8XtpgdC88umnaGi5WjR1qHWu9uR8+b
rz2kSQtBi4WDuGOBsDy2HGdXvOehqoox1r71gFXcGJ22ahLedzG2tC7oktTpchHV
ssMAEmS8RE/vG4a+3ij389NYJnPqnEcTZ7tqi17RlG8c0uzDAM877UaWnuxkG1gs
d5LaAJu82+joGDoWHEO2MJwudVDStX1pmIaNzkdspA2om42A6vxqsf8SrDuq/l68
h3RqO30PuBw2GSij1Eh2Scbq8YIdgOkFj7MzeQDPRKV+WItz7PidOnU=
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:56:01 2026 by rpki-client