Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3137392e3230302e302f32342d3234203d3e20313431303339.roa
File: 3139352e3137392e3230302e302f32342d3234203d3e20313431303339.roa (raw, json)
Hash identifier: 4qiV2McS4hsH5T6cV0tiXDpRZ2GBtFuiltbGkKcQMWw=
Subject key identifier: F7:0C:6C:8D:25:69:AC:6E:9A:C6:E3:4D:3E:1F:CD:A9:6D:91:88:23
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 60CAA48C4A93AE40E0F1B6B2B680B1DD0A014AA6
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3137392e3230302e302f32342d3234203d3e20313431303339.roa
Signing time: Thu 12 Feb 2026 10:23:20 +0000
ROA not before: Thu 12 Feb 2026 10:18:20 +0000
ROA not after: Thu 11 Feb 2027 10:23:20 +0000
asID: 141039
IP address blocks: 195.179.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:04:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:ca:a4:8c:4a:93:ae:40:e0:f1:b6:b2:b6:80:b1:dd:0a:01:4a:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 12 10:18:20 2026 GMT
Not After : Feb 11 10:23:20 2027 GMT
Subject: CN=F70C6C8D2569AC6E9AC6E34D3E1FCDA96D918823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4a:75:50:8e:c0:d6:45:64:76:6e:86:39:b6:
ce:12:38:2f:d9:a7:5f:11:81:43:32:d5:e9:f1:bf:
5b:d3:fc:a6:f7:17:66:d6:af:bd:d6:dc:65:cf:26:
3d:16:21:e1:ec:dc:38:00:bc:60:67:6b:4a:4d:e6:
c7:f8:c4:5f:2c:13:4c:7f:0c:fa:62:23:df:1a:ec:
a7:32:b6:e8:26:09:f9:bd:5c:d3:3c:a7:c0:ea:32:
3f:a3:d9:ec:c0:b6:7d:ba:39:aa:7a:8a:8d:46:64:
72:42:f6:cb:f6:47:2b:52:77:f5:89:39:dd:6a:39:
50:7f:61:94:33:c0:1b:c2:52:1b:1a:b6:36:a4:f3:
12:3a:06:89:98:0b:c5:5e:69:35:f7:51:6f:cc:f8:
ef:5f:54:63:8a:a5:10:ee:12:a7:a4:e9:eb:80:a3:
7a:52:ea:00:99:14:43:b0:f5:32:1f:05:9e:63:a8:
3a:be:70:de:a3:5f:37:cf:4d:cb:97:a0:36:a4:b9:
af:ab:0c:f7:61:dd:df:8e:4d:bb:7f:15:b6:38:ac:
a6:f8:d7:f7:2e:af:f9:29:b8:83:88:2e:78:02:81:
d9:4f:60:e6:02:ca:08:5a:59:ec:6a:70:a3:d0:d9:
2d:3f:c3:54:99:7d:68:9c:8c:99:9f:58:eb:ed:b1:
a8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:0C:6C:8D:25:69:AC:6E:9A:C6:E3:4D:3E:1F:CD:A9:6D:91:88:23
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3137392e3230302e302f32342d3234203d3e20313431303339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.179.200.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:91:2e:52:ee:46:fc:3c:4d:11:5e:1b:76:58:80:42:85:49:
8e:2e:41:6f:ff:a1:5e:7d:20:1e:f6:c4:31:30:7d:26:31:97:
6b:85:18:3b:81:5f:86:b1:00:20:2b:2c:5f:02:fa:24:d2:64:
1b:e1:6e:79:c3:0a:f3:4c:d6:49:e6:11:24:70:d2:0b:a8:c5:
8c:8a:a6:06:4e:c3:4c:12:7d:c4:1f:c7:45:aa:a0:69:3a:bd:
13:9d:0b:ab:02:fe:5b:f1:c7:00:ec:a6:b7:66:75:7e:2e:30:
5b:c7:41:06:59:18:9e:ad:96:00:41:e6:ed:04:39:82:da:8d:
b4:ca:3f:1f:0a:4b:93:48:ab:09:60:a6:a8:dc:33:9b:2d:60:
91:49:98:dc:34:05:78:73:01:15:70:db:14:7a:9c:29:ec:e7:
a1:9a:c9:bf:af:cc:a6:53:09:69:cd:78:5c:fe:a0:d7:1a:fc:
b6:5c:29:1f:c1:05:9a:e3:18:f2:85:de:67:35:54:ae:fb:33:
5a:9b:4c:ed:48:0a:8c:92:64:b8:f8:5f:f6:cb:db:c3:06:9d:
c7:3a:4c:1c:9e:9e:da:12:e6:6b:b5:7c:6b:78:7b:fe:f1:c6:
ef:1b:ae:1c:cd:91:85:a4:9d:42:ff:9d:47:0a:9a:0f:ed:fa:
cb:6d:c2:72
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUYMqkjEqTrkDg8baytoCx3QoBSqYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjAyMTIxMDE4MjBaFw0yNzAyMTExMDIzMjBaMDMxMTAvBgNV
BAMTKEY3MEM2QzhEMjU2OUFDNkU5QUM2RTM0RDNFMUZDREE5NkQ5MTg4MjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnSnVQjsDWRWR2boY5ts4SOC/Z
p18RgUMy1enxv1vT/Kb3F2bWr73W3GXPJj0WIeHs3DgAvGBna0pN5sf4xF8sE0x/
DPpiI98a7KcytugmCfm9XNM8p8DqMj+j2ezAtn26Oap6io1GZHJC9sv2RytSd/WJ
Od1qOVB/YZQzwBvCUhsatjak8xI6BomYC8VeaTX3UW/M+O9fVGOKpRDuEqek6euA
o3pS6gCZFEOw9TIfBZ5jqDq+cN6jXzfPTcuXoDakua+rDPdh3d+OTbt/FbY4rKb4
1/cur/kpuIOILngCgdlPYOYCyghaWexqcKPQ2S0/w1SZfWicjJmfWOvtsajfAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQU9wxsjSVprG6axuNNPh/NqW2RiCMwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzOTM1MmUzMTM3MzkyZTMy
MzAzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzMTMwMzMzOS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAMOzyDANBgkqhkiG9w0BAQsFAAOCAQEAPJEuUu5G/DxNEV4bdliAQoVJji5B
b/+hXn0gHvbEMTB9JjGXa4UYO4FfhrEAICssXwL6JNJkG+FuecMK80zWSeYRJHDS
C6jFjIqmBk7DTBJ9xB/HRaqgaTq9E50LqwL+W/HHAOymt2Z1fi4wW8dBBlkYnq2W
AEHm7QQ5gtqNtMo/HwpLk0irCWCmqNwzmy1gkUmY3DQFeHMBFXDbFHqcKeznoZrJ
v6/MplMJac14XP6g1xr8tlwpH8EFmuMY8oXeZzVUrvszWptM7UgKjJJkuPhf9svb
wwadxzpMHJ6e2hLma7V8a3h7/vHG7xuuHM2RhaSdQv+dRwqaD+36y23Ccg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:17:50 2026 by rpki-client