Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3130372e3136302e302f32342d3234203d3e20313336373837.roa
File: 3139342e3130372e3136302e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 5GfixUXOnYV8HPv3MGIk1BJljhVNKirddrAZy/WfZZI=
Subject key identifier: 7C:46:7C:E4:7D:A2:6B:47:45:E2:EB:3F:D7:D5:22:72:A8:06:A6:93
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 535453096EF25D956D492377DEE2181003B922C2
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3130372e3136302e302f32342d3234203d3e20313336373837.roa
Signing time: Tue 22 Sep 2026 11:29:06 +0000
ROA not before: Tue 22 Sep 2026 11:24:06 +0000
ROA not after: Tue 21 Sep 2027 11:29:06 +0000
asID: 136787
IP address blocks: 194.107.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:49:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:54:53:09:6e:f2:5d:95:6d:49:23:77:de:e2:18:10:03:b9:22:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 22 11:24:06 2026 GMT
Not After : Sep 21 11:29:06 2027 GMT
Subject: CN=7C467CE47DA26B4745E2EB3FD7D52272A806A693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ba:3c:0b:e1:a0:4f:cc:d3:bd:6d:37:70:6d:
98:1b:2d:69:31:60:f7:bc:fb:e2:52:47:15:c2:c9:
2e:5c:8f:21:88:1c:81:da:af:88:95:9c:35:4c:22:
84:27:0e:b1:5f:37:73:f5:e4:73:f9:a0:84:2e:c2:
99:d8:fc:a5:b1:eb:12:fd:7f:2e:5e:e1:29:35:d6:
70:e8:2d:36:dc:2f:58:f9:83:89:0e:45:17:68:6b:
11:33:24:1d:83:66:3a:25:03:e4:ae:e6:42:69:79:
7d:ea:d6:7b:63:ae:9d:7f:bb:62:4a:67:41:58:31:
ad:6d:b2:9b:ba:ed:8b:b7:cc:a1:de:7b:8f:6b:28:
43:60:43:6e:de:71:d4:f4:52:1f:38:15:eb:00:ce:
a1:e0:4a:7b:2f:f3:bf:07:69:c7:fa:db:4b:d2:19:
ed:c9:80:9a:64:37:89:ad:0e:e9:93:35:3b:a2:86:
bc:69:37:1f:4c:cf:d4:50:3f:18:f1:31:b7:c2:bc:
21:4f:33:a9:15:4f:f9:1c:f6:18:c7:9e:c6:90:a8:
98:80:f1:4e:ac:91:d5:99:5f:8b:ba:c2:67:ca:23:
7c:9d:9b:73:c9:7d:bc:9b:43:32:db:be:d7:60:57:
92:4f:c5:19:ae:98:26:4d:a2:dc:fd:50:15:ea:bc:
ad:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:46:7C:E4:7D:A2:6B:47:45:E2:EB:3F:D7:D5:22:72:A8:06:A6:93
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3130372e3136302e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.107.160.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:9e:82:19:a0:c4:e4:b9:e7:3d:6d:ca:5f:c9:ab:18:d0:27:
3f:69:22:cd:de:ee:a3:65:f8:8d:19:06:0d:24:e7:43:b5:c1:
67:8f:df:b0:23:09:bf:08:43:df:8f:ac:02:e6:c0:ea:00:64:
0a:27:ef:b8:91:35:9d:91:8c:0d:50:65:80:ad:d8:bb:31:bb:
f0:59:d4:4a:db:7b:6c:72:6d:a2:16:fa:1e:5f:33:82:2d:cb:
97:d6:67:e1:b8:c5:70:1d:f4:7c:57:b6:6a:6f:67:f3:7c:22:
18:c0:e8:83:51:f4:62:df:fe:cf:43:6b:9f:8a:50:ff:2f:91:
be:4f:84:3d:fd:98:d8:34:2f:84:ec:70:9f:65:d3:df:d3:6e:
29:8c:05:6a:35:f2:d0:f3:8f:e8:de:44:56:ce:47:16:4b:44:
61:a1:cf:d6:2b:6a:b9:37:46:22:3b:3c:66:03:89:38:a7:ad:
aa:58:b2:bc:ec:6f:d2:84:15:70:8d:f9:2a:ab:c4:2c:68:36:
c9:97:a9:be:8e:c9:f9:a4:c5:f9:d2:59:1a:b5:1b:bc:53:84:
c3:de:8e:de:2c:15:97:c9:48:c2:88:a9:dd:dc:f7:99:2f:a5:
1f:f9:ec:05:2d:5d:66:21:28:3d:e9:26:cd:ce:2c:f5:f1:40:
41:44:1d:85
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUU1RTCW7yXZVtSSN33uIYEAO5IsIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA5MjIxMTI0MDZaFw0yNzA5MjExMTI5MDZaMDMxMTAvBgNV
BAMTKDdDNDY3Q0U0N0RBMjZCNDc0NUUyRUIzRkQ3RDUyMjcyQTgwNkE2OTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNujwL4aBPzNO9bTdwbZgbLWkx
YPe8++JSRxXCyS5cjyGIHIHar4iVnDVMIoQnDrFfN3P15HP5oIQuwpnY/KWx6xL9
fy5e4Sk11nDoLTbcL1j5g4kORRdoaxEzJB2DZjolA+Su5kJpeX3q1ntjrp1/u2JK
Z0FYMa1tspu67Yu3zKHee49rKENgQ27ecdT0Uh84FesAzqHgSnsv878Hacf620vS
Ge3JgJpkN4mtDumTNTuihrxpNx9Mz9RQPxjxMbfCvCFPM6kVT/kc9hjHnsaQqJiA
8U6skdWZX4u6wmfKI3ydm3PJfbybQzLbvtdgV5JPxRmumCZNotz9UBXqvK3VAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUfEZ85H2ia0dF4us/19UicqgGppMwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzOTM0MmUzMTMwMzcyZTMx
MzYzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAMJroDANBgkqhkiG9w0BAQsFAAOCAQEAa56CGaDE5LnnPW3KX8mrGNAnP2ki
zd7uo2X4jRkGDSTnQ7XBZ4/fsCMJvwhD34+sAubA6gBkCifvuJE1nZGMDVBlgK3Y
uzG78FnUStt7bHJtohb6Hl8zgi3Ll9Zn4bjFcB30fFe2am9n83wiGMDog1H0Yt/+
z0Nrn4pQ/y+Rvk+EPf2Y2DQvhOxwn2XT39NuKYwFajXy0POP6N5EVs5HFktEYaHP
1itquTdGIjs8ZgOJOKetqliyvOxv0oQVcI35KqvELGg2yZepvo7J+aTF+dJZGrUb
vFOEw96O3iwVl8lIwoip3dz3mS+lH/nsBS1dZiEoPekmzc4s9fFAQUQdhQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 18:25:17 2026 by rpki-client