Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3233332e39382e302f32342d3234203d3e20323132323338.roa
File: 3139342e3233332e39382e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: SIJN0uXyTqyauWwT93clxlkPKfQpOK20o/6yzewOVE8=
Subject key identifier: 82:4E:34:F4:46:45:FC:3C:D8:48:56:56:11:CF:2A:AD:47:A5:3C:DC
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 795ADA7D111A8DD4E960B4BB589A484F79203557
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3233332e39382e302f32342d3234203d3e20323132323338.roa
Signing time: Mon 25 May 2026 12:24:33 +0000
ROA not before: Mon 25 May 2026 12:19:33 +0000
ROA not after: Mon 24 May 2027 12:24:33 +0000
asID: 212238
IP address blocks: 194.233.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:42:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:5a:da:7d:11:1a:8d:d4:e9:60:b4:bb:58:9a:48:4f:79:20:35:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 25 12:19:33 2026 GMT
Not After : May 24 12:24:33 2027 GMT
Subject: CN=824E34F44645FC3CD848565611CF2AAD47A53CDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:ad:45:bf:f2:2d:ad:5e:ba:72:c7:5f:c5:8f:
0f:ca:8d:9b:cf:0c:e1:b1:e5:18:63:1d:3b:6b:27:
27:4f:5f:18:c2:db:5a:81:4c:0b:e5:e6:2b:28:53:
0a:6f:95:c8:fb:51:13:72:9c:22:30:97:36:bc:cb:
1c:5f:38:65:55:75:68:31:48:df:1c:05:e4:a4:3e:
a5:f9:7a:1b:ba:bb:2c:fc:68:ef:53:e5:2f:c2:83:
db:e4:87:67:41:ad:5b:f0:b4:f9:3a:86:c5:52:f2:
54:d3:41:91:bd:79:19:08:75:c3:bc:6d:7e:50:1b:
d1:67:0f:03:d8:24:b9:ca:35:51:3a:c0:0a:ff:19:
2b:a2:e5:1a:bd:12:92:14:33:4b:f5:a9:f7:37:12:
fd:4f:47:82:16:22:3a:3b:24:54:86:fc:3a:c3:46:
ed:e3:4b:27:aa:52:f2:11:21:06:63:66:0f:97:d2:
67:94:0d:35:06:57:04:96:bf:ef:53:1b:7b:37:f5:
26:4b:eb:d5:f8:be:dd:3c:4a:31:68:8c:bd:49:1d:
4f:48:a5:55:0a:c5:18:53:de:61:0f:68:a8:8b:c1:
11:c3:7f:8f:82:c4:64:79:43:82:1b:c9:8d:d3:a6:
fa:62:26:1f:ba:5d:de:6b:5d:df:76:20:94:96:d0:
a6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:4E:34:F4:46:45:FC:3C:D8:48:56:56:11:CF:2A:AD:47:A5:3C:DC
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3233332e39382e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.233.98.0/24
Signature Algorithm: sha256WithRSAEncryption
35:36:40:45:a5:5d:89:40:0e:f3:7f:2e:08:a2:c4:16:15:bd:
24:b0:28:bd:ca:26:f9:3a:68:14:d2:dc:30:e6:be:77:86:00:
4f:70:d4:0e:96:3d:15:ef:16:c4:55:9f:0b:b6:09:7d:2e:25:
c7:c6:52:43:bf:e2:e1:78:9a:bf:fa:79:a8:f4:0c:b0:a5:76:
1d:4a:1f:b1:1e:42:e0:8f:25:24:e5:83:72:5b:a3:81:b2:97:
ff:3d:5c:db:6b:7c:c8:bf:4e:a1:51:b7:a4:96:52:ad:f4:0f:
82:d8:cd:f1:d9:00:19:dc:64:d9:db:2a:ae:44:26:49:11:cb:
fa:c9:6f:1c:ef:3f:07:3d:bc:eb:d5:20:54:72:79:d2:49:8b:
58:2b:0a:d3:cf:33:9f:6f:d6:be:db:be:21:fe:a3:a7:66:9e:
41:cd:90:75:6d:a0:28:18:7f:50:d9:3a:08:4f:ee:95:2f:35:
1f:a7:49:d9:94:3d:24:7f:38:a2:3d:33:3a:b9:27:90:bc:b0:
7e:a5:b6:57:78:7f:16:ab:c6:1f:ad:55:b7:9b:7c:16:13:57:
78:64:ef:5d:89:b9:46:27:64:d0:92:d8:85:46:3c:c7:6b:a6:
60:58:e8:ea:c2:e9:1e:9b:2b:ad:f5:9e:96:e1:9a:01:0a:b9:
12:2e:07:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:06:22 2026 by rpki-client