Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3233382e31362e302f32312d3234203d3e203437353833.roa
File: 3139342e3233382e31362e302f32312d3234203d3e203437353833.roa (raw, json)
Hash identifier: d0zePWfoQ22axFkd7Yo4pnEn4cATv0NkKfw0H27CHac=
Subject key identifier: D8:C3:72:80:B6:7A:A5:1E:16:E9:74:15:8E:60:4F:4E:BE:39:68:86
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3E7CF95D7BC4CC874BA0C7753A1F5FB3E0566238
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3233382e31362e302f32312d3234203d3e203437353833.roa
Signing time: Thu 16 Apr 2026 11:23:40 +0000
ROA not before: Thu 16 Apr 2026 11:18:40 +0000
ROA not after: Thu 15 Apr 2027 11:23:40 +0000
asID: 47583
IP address blocks: 194.238.16.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:7c:f9:5d:7b:c4:cc:87:4b:a0:c7:75:3a:1f:5f:b3:e0:56:62:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 16 11:18:40 2026 GMT
Not After : Apr 15 11:23:40 2027 GMT
Subject: CN=D8C37280B67AA51E16E974158E604F4EBE396886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:69:5e:ba:e5:22:cd:94:6a:2e:cf:e4:65:c3:
38:df:b7:4a:72:43:e0:ad:9b:74:40:12:0a:c2:10:
f2:95:1b:8a:64:89:02:f4:60:47:d9:52:0c:b7:5d:
b5:63:27:26:da:32:9c:49:3b:da:5f:c2:fa:11:22:
45:d0:ee:07:e4:de:6f:3f:52:f3:c5:9d:bc:c1:d6:
58:44:6a:fb:07:a4:31:74:07:61:eb:d5:f2:92:c0:
02:86:25:69:78:d6:fc:f3:ec:09:b3:df:2e:4d:a4:
49:6e:89:25:8e:5d:7f:ec:9d:9e:bf:d1:11:8e:49:
cc:ce:dd:09:87:20:01:7b:31:a5:f0:e5:b2:8a:0c:
f2:0e:a0:ba:02:97:f9:ea:a3:f1:69:cb:fd:0b:e8:
d8:b4:33:11:3c:56:d6:d9:5f:63:d8:8a:34:9c:b2:
dc:ef:88:72:4d:43:ea:99:cb:8e:ba:5f:cb:07:ba:
a8:74:de:aa:d2:42:f3:3e:be:78:6b:4e:6b:b8:e3:
ea:8b:01:2d:7f:e5:80:92:0b:2f:a1:87:aa:be:75:
f3:f5:0c:3e:ad:d2:8c:fc:3b:d7:f9:bb:b4:83:78:
1e:e2:f5:a4:3e:f5:b3:0b:85:d3:66:4c:16:ae:4d:
68:77:c8:2d:12:40:11:d9:e6:60:ca:d4:4d:60:bc:
20:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C3:72:80:B6:7A:A5:1E:16:E9:74:15:8E:60:4F:4E:BE:39:68:86
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3233382e31362e302f32312d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.238.16.0/21
Signature Algorithm: sha256WithRSAEncryption
a1:82:17:99:9d:ef:08:85:38:40:ba:19:7a:cd:18:60:08:64:
46:1d:70:08:71:1c:16:04:de:3a:86:b3:72:23:2d:d0:5c:f9:
d4:13:d5:1a:90:cf:08:ef:6f:48:e3:1d:8b:14:45:77:de:c4:
ba:26:de:1c:e6:13:9e:25:b1:88:5a:37:1e:2f:84:f4:dd:cb:
a9:f2:a0:97:58:ef:9c:df:ee:e2:87:4f:0c:0d:c6:01:10:eb:
a9:8d:83:a1:e5:dc:b5:ee:64:c0:ba:4c:c9:ad:4b:f6:0b:45:
dd:a6:50:f7:f1:35:93:11:1e:db:07:89:df:79:8c:4d:31:53:
5f:30:74:cc:88:ee:1f:7e:29:53:8a:ab:5f:41:f7:98:10:60:
7d:74:14:78:00:a9:5a:b6:35:5f:17:19:33:75:23:c0:5a:5e:
f4:8c:43:dc:86:90:a9:50:54:09:bf:ef:34:b7:f6:87:3d:8b:
60:a4:bc:8a:fa:1c:2d:0a:de:ac:c1:63:b1:3c:7b:96:5c:07:
17:91:58:f8:7f:03:0e:f1:4a:29:d8:f8:43:03:da:37:64:fa:
7f:93:ba:0d:1a:ee:ec:95:5a:a6:5e:68:80:12:14:7f:ca:b4:
45:2e:05:fc:71:33:b9:d2:0f:de:b6:19:7b:9f:72:d5:04:b4:
4e:9c:d4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:04:10 2026 by rpki-client