Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e3230332e3137322e302f32332d3234203d3e203437353833.roa
File: 3139332e3230332e3137322e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: eGESHDL1VsPLd7AWR/5fY4JvFhVdKkT5Cv4ZuF7vKFk=
Subject key identifier: D7:76:0D:E2:3D:B9:F2:49:28:E8:32:02:F8:39:9E:4B:BC:21:E7:54
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7414FA4C49A1EF6B8DBEEA311933835B7086403B
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e3230332e3137322e302f32332d3234203d3e203437353833.roa
Signing time: Fri 05 Jun 2026 12:25:00 +0000
ROA not before: Fri 05 Jun 2026 12:20:00 +0000
ROA not after: Fri 04 Jun 2027 12:25:00 +0000
asID: 47583
IP address blocks: 193.203.172.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:42:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:14:fa:4c:49:a1:ef:6b:8d:be:ea:31:19:33:83:5b:70:86:40:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 5 12:20:00 2026 GMT
Not After : Jun 4 12:25:00 2027 GMT
Subject: CN=D7760DE23DB9F24928E83202F8399E4BBC21E754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:22:08:fb:84:98:0a:75:63:29:e4:fe:6e:7e:
92:e0:4a:0d:0b:b3:ed:5d:a0:cf:f4:35:b7:86:26:
3c:58:b0:3e:fd:62:03:3c:d4:6d:0d:00:1a:45:96:
f2:d7:ec:a2:21:f4:97:76:46:71:de:c1:ec:a1:47:
41:24:e9:61:70:f7:e7:e4:75:2f:b7:ff:df:f8:74:
d3:d4:1b:8a:dd:4f:4f:05:b9:f3:3d:9c:ae:37:9a:
f3:da:ae:71:f5:8c:a5:f9:45:6e:cf:de:e3:96:78:
fa:0d:40:09:96:94:c3:db:2d:a5:19:c2:f4:3f:70:
d1:6e:65:84:0d:38:50:02:de:46:56:1a:fb:10:2b:
b7:d9:8f:de:99:cc:20:bf:61:42:3d:5d:66:8f:01:
ec:31:8f:ea:ea:2f:24:b9:c9:cf:05:13:3d:77:97:
39:cf:e0:7a:25:d8:9a:0e:df:49:db:58:aa:4e:f3:
56:35:7b:8e:3f:73:1a:7a:30:14:53:69:8a:b9:7e:
05:33:40:4f:4e:52:ef:d7:e6:4c:84:03:79:66:91:
32:18:9f:74:56:5f:d9:48:06:01:af:2a:3a:d7:af:
d8:41:38:cb:6e:15:70:ae:89:01:38:4f:8a:5a:ba:
74:4b:9a:d4:7d:58:cb:92:61:9b:76:f8:63:59:92:
b2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:76:0D:E2:3D:B9:F2:49:28:E8:32:02:F8:39:9E:4B:BC:21:E7:54
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e3230332e3137322e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.172.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:75:34:c4:3b:91:70:78:ae:3f:d9:60:7f:f2:38:44:3a:e8:
6a:9b:e8:d5:ed:44:ec:66:fd:9d:f7:df:56:3d:6e:dc:df:70:
10:37:03:29:45:fb:c8:c4:6c:5d:e4:04:3f:e7:63:32:15:5a:
a2:8d:1b:76:a5:5c:fc:b4:56:20:97:8b:30:14:0d:5a:e7:07:
d8:de:8d:29:79:85:8b:fc:16:a1:da:42:a6:4d:cc:e4:d2:5b:
ba:09:31:19:d8:27:d7:9e:35:f3:dc:ec:b2:c6:74:3a:32:d5:
0a:0e:37:90:6a:4f:59:0d:fd:53:31:56:fd:5a:a0:02:c0:ef:
0e:3f:fd:7e:5b:92:ce:20:44:40:db:07:f8:40:ce:f6:77:3e:
04:96:4b:48:7b:56:7d:c0:c1:e4:26:2c:6e:b1:0b:b0:57:de:
46:94:48:aa:72:ac:44:b9:7a:30:b1:aa:1b:cc:a4:d0:41:6c:
d9:84:ee:ed:5e:7e:89:20:e0:e8:9a:2f:78:59:8f:24:de:91:
e6:ba:d9:65:b4:70:46:70:8b:80:2b:43:69:f9:06:25:86:64:
0c:14:86:2e:bf:61:eb:1c:4c:b8:40:79:17:82:b9:b6:70:c1:
cd:e3:5c:b9:73:44:0c:25:67:e8:1f:8f:57:cb:48:dc:e5:72:
e3:51:a6:8e
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUdBT6TEmh72uNvuoxGTODW3CGQDswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA2MDUxMjIwMDBaFw0yNzA2MDQxMjI1MDBaMDMxMTAvBgNV
BAMTKEQ3NzYwREUyM0RCOUYyNDkyOEU4MzIwMkY4Mzk5RTRCQkMyMUU3NTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeIgj7hJgKdWMp5P5ufpLgSg0L
s+1doM/0NbeGJjxYsD79YgM81G0NABpFlvLX7KIh9Jd2RnHeweyhR0Ek6WFw9+fk
dS+3/9/4dNPUG4rdT08FufM9nK43mvParnH1jKX5RW7P3uOWePoNQAmWlMPbLaUZ
wvQ/cNFuZYQNOFAC3kZWGvsQK7fZj96ZzCC/YUI9XWaPAewxj+rqLyS5yc8FEz13
lznP4Hol2JoO30nbWKpO81Y1e44/cxp6MBRTaYq5fgUzQE9OUu/X5kyEA3lmkTIY
n3RWX9lIBgGvKjrXr9hBOMtuFXCuiQE4T4paunRLmtR9WMuSYZt2+GNZkrLFAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQU13YN4j258kko6DIC+DmeS7wh51QwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzOTMzMmUzMjMwMzMyZTMx
MzczMjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM0MzczNTM4MzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAHBy6wwDQYJKoZIhvcNAQELBQADggEBAF91NMQ7kXB4rj/ZYH/yOEQ66Gqb6NXt
ROxm/Z3331Y9btzfcBA3AylF+8jEbF3kBD/nYzIVWqKNG3alXPy0ViCXizAUDVrn
B9jejSl5hYv8FqHaQqZNzOTSW7oJMRnYJ9eeNfPc7LLGdDoy1QoON5BqT1kN/VMx
Vv1aoALA7w4//X5bks4gREDbB/hAzvZ3PgSWS0h7Vn3AweQmLG6xC7BX3kaUSKpy
rES5ejCxqhvMpNBBbNmE7u1efokg4OiaL3hZjyTekea62WW0cEZwi4ArQ2n5BiWG
ZAwUhi6/YescTLhAeReCubZwwc3jXLlzRAwlZ+gfj1fLSNzlcuNRpo4=
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:51:09 2026 by rpki-client