Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3130372e3136302e302f32342d3234203d3e20313336373837.roa
File: 3139342e3130372e3136302e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 5utrAEGiXTf+DQRECmp24JSb6vvxoptFJdpp2xQYa6Y=
Subject key identifier: 79:6E:C8:61:4E:F1:4C:27:E0:04:54:7A:53:43:70:2F:89:1F:45:B3
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 31FE020739D1D22BF27941828F8E54BF622E30DC
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3130372e3136302e302f32342d3234203d3e20313336373837.roa
Signing time: Tue 21 Oct 2025 10:47:56 +0000
ROA not before: Tue 21 Oct 2025 10:42:56 +0000
ROA not after: Tue 20 Oct 2026 10:47:56 +0000
asID: 136787
IP address blocks: 194.107.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:fe:02:07:39:d1:d2:2b:f2:79:41:82:8f:8e:54:bf:62:2e:30:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 21 10:42:56 2025 GMT
Not After : Oct 20 10:47:56 2026 GMT
Subject: CN=796EC8614EF14C27E004547A5343702F891F45B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:38:e8:b0:c2:6e:69:be:8a:ec:45:01:67:02:
1f:e6:be:20:56:d3:15:7d:e4:91:4a:0c:51:91:ad:
72:49:f3:fa:d9:4b:dd:0e:af:4d:7b:a6:8f:d1:63:
fb:51:a8:d6:fe:e8:88:e3:24:82:ec:44:f9:7c:c3:
45:90:40:f3:ca:0e:d1:ed:b5:7b:cf:70:25:06:15:
af:5f:5b:c2:e7:c2:bc:77:fe:50:f2:cc:fb:48:77:
38:97:16:00:10:7c:55:7c:92:ac:21:49:29:b9:21:
a2:da:11:b0:db:ea:ae:cc:5d:e7:04:08:01:66:65:
25:68:26:0f:c6:c7:7b:25:a9:f4:6b:63:54:7c:c5:
f2:1a:a2:21:f7:93:e6:78:5a:a2:9b:ba:50:78:4d:
43:c6:2e:26:15:1a:88:c3:ed:11:f7:7c:d1:12:8e:
b9:05:bb:db:6f:b9:cf:17:51:03:6c:2c:a9:d0:d6:
6f:e8:2a:a6:ad:72:d3:3b:59:63:5c:ca:06:a9:9d:
6f:49:f3:88:0a:db:43:fb:d9:1b:9e:af:74:d6:8b:
ad:ac:ed:45:4c:63:9c:3f:dd:a4:58:c5:46:2a:f3:
3a:f8:17:61:af:cd:34:f8:e3:0a:d5:4d:a7:af:fb:
13:23:45:f5:5c:a3:65:26:af:f5:f1:10:80:7f:73:
59:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:6E:C8:61:4E:F1:4C:27:E0:04:54:7A:53:43:70:2F:89:1F:45:B3
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3130372e3136302e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.107.160.0/24
Signature Algorithm: sha256WithRSAEncryption
77:c3:2e:9f:29:df:f5:87:a2:38:ee:1b:ec:9b:97:75:24:f7:
5d:71:5b:af:a0:19:e4:25:6c:7f:e2:29:7a:f2:67:32:9b:5c:
45:73:05:d6:9c:69:cb:6b:97:6c:c1:39:14:48:8e:46:d1:04:
a5:c5:b6:7f:cd:29:cc:77:ad:02:9a:54:6a:0b:cf:9a:63:a8:
16:3a:58:d4:c9:91:69:f4:a0:bb:ec:ec:d8:dd:df:f1:57:48:
95:dd:ce:81:0f:89:0f:66:01:e0:a0:96:7e:67:ab:9e:0c:0d:
8f:51:40:61:c6:dc:1d:34:c4:d4:51:94:ac:a7:64:38:2c:b8:
f5:1d:76:d6:d5:f8:99:fc:d2:0c:9d:b9:c2:9f:05:30:ef:93:
b2:8b:08:7c:18:e2:51:83:00:2e:db:48:7e:2e:a9:d7:e6:04:
8c:8e:7b:44:7e:4a:87:2f:64:a2:68:02:f7:32:d4:38:aa:93:
5d:cd:39:23:de:8d:74:89:e8:56:14:06:e5:48:67:d0:a3:de:
d2:cc:05:d6:9d:f4:e9:2c:c3:fa:f3:16:b7:c4:0f:da:1b:e2:
44:b5:a9:fa:8a:0d:59:80:71:82:63:b8:c4:40:4f:d1:41:09:
9e:9c:71:60:53:d7:9b:d4:6d:79:2b:1e:bc:8c:cf:ba:08:0f:
ac:8a:13:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:55:53 2025 by rpki-client