Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e392e33342e302f32342d3234203d3e20323132323338.roa
File: 3139332e392e33342e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: aVpLzaDeZH0s+SIFYwVKpK0SLewv9CNYyVO/sXgDszM=
Subject key identifier: 1B:3E:62:F5:D1:05:1A:77:58:68:7D:9B:78:C7:91:72:20:AD:BB:F9
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 72C90A00E8279155870838A2935AAD7F33C473A8
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e392e33342e302f32342d3234203d3e20323132323338.roa
Signing time: Tue 21 Oct 2025 13:22:37 +0000
ROA not before: Tue 21 Oct 2025 13:17:37 +0000
ROA not after: Tue 20 Oct 2026 13:22:37 +0000
asID: 212238
IP address blocks: 193.9.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:c9:0a:00:e8:27:91:55:87:08:38:a2:93:5a:ad:7f:33:c4:73:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 21 13:17:37 2025 GMT
Not After : Oct 20 13:22:37 2026 GMT
Subject: CN=1B3E62F5D1051A7758687D9B78C7917220ADBBF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:28:00:e7:a4:26:88:97:15:a2:41:6a:e8:2b:
6f:d6:83:a9:ae:1b:83:a0:16:71:d6:fd:f0:fe:aa:
ba:bf:cd:36:d5:f0:3f:19:24:61:bb:6f:a6:3e:50:
21:07:57:bc:d0:88:af:1c:23:38:6e:b1:05:de:be:
f6:21:6d:e4:8c:a4:5e:af:d2:f7:52:d7:e5:7b:8c:
38:03:6e:34:e3:7d:b5:25:8f:9b:6b:7d:ce:6e:09:
11:d9:c4:e3:b2:70:ad:04:0d:09:26:ff:85:8e:49:
c6:d3:be:53:41:15:18:eb:37:61:48:54:d5:6a:e7:
73:35:8a:33:7b:73:80:49:0d:17:c3:35:ad:37:3a:
f5:ae:dc:42:05:f8:f6:b3:d3:f3:2c:5d:18:c5:db:
df:37:c6:a8:92:13:80:f7:65:37:5b:41:41:87:1a:
70:9d:9c:d1:95:38:52:d9:56:d1:90:08:ff:07:8a:
bd:be:4d:50:1d:59:43:a5:b1:82:28:35:94:2f:ae:
38:4c:1d:7f:b1:cf:0b:c7:8d:4f:ea:c0:18:e4:4d:
9b:61:55:d4:05:08:30:51:94:13:bc:53:d9:ef:45:
56:f9:8f:63:8b:bc:aa:71:15:4c:b8:81:98:8b:42:
fe:96:12:d3:68:b6:41:42:ae:d9:93:3e:58:eb:d5:
e8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:3E:62:F5:D1:05:1A:77:58:68:7D:9B:78:C7:91:72:20:AD:BB:F9
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e392e33342e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.9.34.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:48:4b:12:cd:fb:88:fe:8e:bf:8a:50:ee:0a:ac:7a:02:be:
d7:8f:89:be:5d:30:70:78:c6:a7:a4:c1:4f:cf:2b:4b:c5:b3:
28:3c:9e:4a:ef:70:5f:a4:d5:bd:f3:51:db:49:a4:28:49:2b:
6b:91:8e:3d:96:55:c3:cb:fd:32:d9:8a:33:44:57:66:e0:9b:
67:87:cd:f7:66:52:6f:f6:7c:76:92:d3:23:3f:da:a0:8d:5c:
a6:2c:89:6d:2b:26:13:69:51:76:b7:0e:4c:04:b7:15:11:d5:
c7:d8:b8:ad:38:dd:8a:85:ab:2f:a6:ff:ca:fa:da:f7:2e:41:
49:82:0d:67:45:3a:7c:c0:bb:87:41:87:66:eb:a3:06:87:14:
a5:3b:78:f6:01:f7:f4:58:b2:c1:a0:e5:76:dd:55:bf:37:2f:
1f:af:74:08:44:87:b1:8a:19:f0:54:1c:0f:63:06:c4:58:70:
52:77:4b:ed:82:52:7c:6f:24:6d:1c:45:b4:b4:59:d3:7b:ba:
25:0c:e6:47:d7:8c:c4:e1:6a:c5:ee:01:b1:11:93:a4:4f:57:
92:3d:68:d3:36:b0:7c:ea:0c:ef:17:58:a3:bb:a8:43:4d:2c:
e7:61:69:50:53:b7:d0:f9:c9:85:ce:b4:97:64:ac:fe:ae:6e:
55:34:90:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:48:25 2025 by rpki-client