Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e392e33332e302f32342d3234203d3e20323132323338.roa
File: 3139332e392e33332e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: yWxu0v7ijr3NLBFMc8COEewknEhR8Xq38C/3QNCRwYg=
Subject key identifier: 25:FD:40:65:75:DE:3E:31:72:5C:05:D0:3F:6B:64:D7:FE:F3:E5:68
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6AED5F3CFD6E5B009FD8902194E5DD0E3E99FB3F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e392e33332e302f32342d3234203d3e20323132323338.roa
Signing time: Tue 22 Sep 2026 13:29:11 +0000
ROA not before: Tue 22 Sep 2026 13:24:11 +0000
ROA not after: Tue 21 Sep 2027 13:29:11 +0000
asID: 212238
IP address blocks: 193.9.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:ed:5f:3c:fd:6e:5b:00:9f:d8:90:21:94:e5:dd:0e:3e:99:fb:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 22 13:24:11 2026 GMT
Not After : Sep 21 13:29:11 2027 GMT
Subject: CN=25FD406575DE3E31725C05D03F6B64D7FEF3E568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:62:05:ce:6a:45:fd:d8:02:7e:f3:67:74:38:
8f:f8:02:0c:ff:de:95:4d:8e:c4:bd:56:81:08:fb:
17:9c:6a:cd:db:ce:4f:5f:0a:57:25:eb:88:07:29:
0a:eb:af:28:ad:84:e2:26:a9:4f:30:aa:11:58:9e:
52:15:45:16:a8:1a:b8:17:89:9d:4b:d3:ad:14:9e:
1c:6e:22:a6:a5:cb:96:be:36:11:fb:fb:f2:3f:9a:
e5:ee:e3:c4:e2:94:7b:ac:95:10:7a:eb:ff:53:6c:
b3:23:0d:03:ad:29:43:0e:99:f7:a2:d5:be:26:59:
04:cd:9a:45:dc:93:52:60:7f:b5:84:f4:b8:8b:df:
92:22:34:75:cf:9b:79:f4:15:2b:c3:6a:3e:11:15:
47:89:38:bd:64:8c:73:76:d1:34:74:9c:60:4b:4b:
5e:dd:d1:5b:4f:66:50:e5:10:52:36:ff:b0:05:6a:
c4:be:82:44:37:3f:73:82:7f:09:7f:72:cc:41:89:
d9:a3:07:94:bd:1c:41:40:f5:5a:c6:dd:79:c2:b4:
f0:1c:79:ec:30:42:09:51:63:aa:d8:bf:e7:58:6d:
4d:d4:8f:ab:1e:99:90:a2:25:12:7e:4a:5d:08:c2:
9a:23:25:93:eb:64:1b:0a:7c:21:dc:5d:bb:0a:9e:
59:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:FD:40:65:75:DE:3E:31:72:5C:05:D0:3F:6B:64:D7:FE:F3:E5:68
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e392e33332e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.9.33.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:48:c1:12:b5:a8:a0:ec:2b:75:1a:8b:85:e4:a4:41:57:19:
93:1d:32:68:58:c1:c1:d6:2f:e6:4b:18:ab:83:50:22:ae:7f:
4b:ed:27:b4:ac:03:c7:e7:27:05:19:32:05:9b:dd:6f:4d:3e:
61:ff:bf:d0:bd:c1:56:4b:e1:33:61:35:fe:1b:3c:ed:28:66:
3e:b7:36:32:f7:02:1b:d2:d7:54:7b:af:a5:35:4f:79:50:25:
a0:c9:13:cf:55:71:63:ba:bc:f8:53:2a:5d:3c:51:be:b6:06:
f4:8f:a1:94:fa:97:b7:99:58:56:2b:17:68:52:f8:51:65:0a:
92:05:ed:f9:26:1b:10:24:6c:65:a0:19:e6:b6:03:fd:c9:75:
75:b5:b5:77:bc:04:f9:77:c4:d7:12:7a:20:af:09:1a:6b:e5:
e0:45:ac:83:1a:25:98:99:76:29:6a:f5:fa:5a:c9:30:a0:61:
11:67:1b:21:52:d8:4f:59:57:78:0e:b5:51:23:2a:01:20:14:
bc:ce:93:71:ae:cc:d2:cf:6b:f9:ff:08:67:9a:06:58:c4:c1:
64:68:b4:7c:73:c9:46:09:e0:33:e9:b9:b8:f1:d9:bf:65:7c:
52:0b:5a:aa:60:66:a5:29:5b:bb:ed:ee:f9:0e:09:29:dc:7f:
e7:39:62:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:57:17 2026 by rpki-client