Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e302e3230312e302f32342d3234203d3e20313432343633.roa
File: 3139342e302e3230312e302f32342d3234203d3e20313432343633.roa (raw, json)
Hash identifier: 0Wqboj0+eNLFjNB8toxg2TvbnMdS1gTkiY7h980LiGE=
Subject key identifier: 2B:45:FA:AD:A7:F2:CD:7B:74:81:34:25:F9:CD:BC:CD:FF:F5:45:3D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 58168FFDA31304DC068E25B744F2D0FD18E1E572
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e302e3230312e302f32342d3234203d3e20313432343633.roa
Signing time: Wed 09 Sep 2026 18:19:34 +0000
ROA not before: Wed 09 Sep 2026 18:14:34 +0000
ROA not after: Wed 08 Sep 2027 18:19:34 +0000
asID: 142463
IP address blocks: 194.0.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:16:8f:fd:a3:13:04:dc:06:8e:25:b7:44:f2:d0:fd:18:e1:e5:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 9 18:14:34 2026 GMT
Not After : Sep 8 18:19:34 2027 GMT
Subject: CN=2B45FAADA7F2CD7B74813425F9CDBCCDFFF5453D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:15:65:37:d4:cb:fc:89:c3:30:68:0d:62:34:
19:8a:13:34:02:ef:3b:7a:e5:62:2d:7c:08:5a:81:
f5:bf:80:77:91:71:34:4d:ea:c9:9b:be:bf:8c:ee:
e4:98:4f:39:ca:66:54:c4:99:9f:33:6c:50:ce:06:
dd:8d:db:f0:9e:88:52:ef:95:24:ea:8c:ab:2c:83:
46:bd:6d:a5:22:b0:07:c0:64:75:7d:5d:11:2e:d2:
a8:e8:a2:b3:43:9c:e9:19:5b:6f:67:d9:31:3f:ee:
49:67:6f:f9:25:3f:38:bf:56:b3:fa:c0:9c:16:a7:
ef:8a:15:c8:48:57:41:7e:88:71:7c:8e:98:17:3b:
55:41:25:a8:d9:66:75:28:48:64:2d:01:32:3c:d6:
ff:bb:40:33:29:33:72:8f:5e:63:91:a4:71:c3:c3:
57:e9:a2:7f:29:e4:8a:42:e1:81:a9:66:5d:c0:b3:
39:05:40:d3:86:95:78:25:1b:c2:d4:6f:d9:7e:a5:
3f:aa:b4:92:9c:4a:ff:69:d1:45:3f:38:fd:5b:13:
ce:ee:09:0a:9a:7d:43:80:51:ee:46:cf:e3:2d:64:
9e:3e:13:6f:49:06:39:52:a8:61:50:be:46:73:95:
3b:0e:ad:f5:b0:75:fc:37:13:a9:df:dd:38:4f:d8:
2d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:45:FA:AD:A7:F2:CD:7B:74:81:34:25:F9:CD:BC:CD:FF:F5:45:3D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e302e3230312e302f32342d3234203d3e20313432343633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.201.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:f8:ab:0f:e4:25:58:7a:0d:fe:f2:cc:2d:c5:6b:c2:ae:1f:
ae:88:fe:7f:5c:25:ce:d2:f8:b3:b4:84:ae:47:c6:00:71:e1:
a3:44:b6:98:bd:f2:db:26:94:26:42:0a:83:bb:0f:4b:b6:05:
15:e7:d7:97:cd:6f:12:8a:d9:98:67:89:17:89:d4:22:bb:a0:
ba:7b:3f:3f:8d:8e:c7:5f:29:a4:37:7f:e3:3e:d6:a4:be:89:
e9:7a:57:ff:aa:92:46:9c:b0:02:4c:b8:af:66:78:d5:0a:45:
c6:90:a5:3d:f3:43:d3:aa:25:bd:b0:02:6c:c2:fb:73:4a:ce:
e5:cd:65:4b:d4:40:52:60:25:8f:61:79:13:cc:50:f1:30:e9:
8f:57:80:28:79:73:3a:89:37:a0:42:34:e3:aa:70:a8:6f:3c:
2f:f8:27:4b:f3:ad:8b:55:a7:32:fd:24:7d:04:3a:ca:c2:a9:
35:cc:99:39:30:1d:d4:f0:13:a8:a8:42:77:d1:be:2c:80:09:
d6:40:a4:1b:b3:16:f4:cc:db:de:5d:69:8d:e9:91:6c:1c:e9:
3c:9a:ac:67:5f:9e:bc:74:d3:ff:b6:de:a2:f7:8e:99:8f:75:
1f:c2:72:15:67:b4:54:77:01:5f:e6:e4:bf:c0:ad:97:42:ad:
d3:13:d0:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:28:46 2026 by rpki-client