Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3230302e302e302f32312d3234203d3e203437353833.roa
File: 3139352e3230302e302e302f32312d3234203d3e203437353833.roa (raw, json)
Hash identifier: kq1mSHH9FMCXxtVAaWOUdRx1I+ztrYDJsabszhjz4aQ=
Subject key identifier: 05:F4:4D:80:27:DB:28:FA:90:85:87:2A:2F:A8:3A:79:04:74:04:FD
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 35F1F2C78449E1985EAD8E48D29D6F48CB0A987B
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3230302e302e302f32312d3234203d3e203437353833.roa
Signing time: Thu 16 Apr 2026 11:23:41 +0000
ROA not before: Thu 16 Apr 2026 11:18:41 +0000
ROA not after: Thu 15 Apr 2027 11:23:41 +0000
asID: 47583
IP address blocks: 195.200.0.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:f1:f2:c7:84:49:e1:98:5e:ad:8e:48:d2:9d:6f:48:cb:0a:98:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 16 11:18:41 2026 GMT
Not After : Apr 15 11:23:41 2027 GMT
Subject: CN=05F44D8027DB28FA9085872A2FA83A79047404FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1a:7e:ff:2c:cc:ea:53:37:ac:0b:6a:4f:46:
72:9d:22:fa:28:62:ff:72:e2:e7:61:e9:ae:d6:81:
77:43:ab:74:02:aa:f9:d9:e5:68:40:0f:a2:25:7c:
1d:9e:f5:fe:99:87:af:89:cc:ab:b3:52:15:4a:0f:
2a:c8:31:91:97:c1:15:94:3c:97:8a:78:95:b6:9a:
e8:ac:52:0d:60:b6:ec:f7:9b:1e:f7:98:61:27:03:
7c:0f:28:9c:ce:e6:04:78:f3:a4:38:e8:dc:c9:29:
34:dc:91:50:17:ca:ff:55:49:a2:77:a7:ab:4c:0f:
29:da:96:99:0b:42:6d:31:81:eb:ec:28:1f:69:cd:
56:39:98:40:85:9d:3a:a9:01:c6:ef:16:93:e4:8c:
f7:1a:c4:ee:18:e0:25:be:5b:98:84:3e:cf:24:22:
f8:71:d6:2a:b4:3a:b2:e1:27:76:9d:d1:ab:f3:21:
1f:2e:c0:86:3d:2d:0e:9a:6d:87:d8:89:26:48:08:
66:da:50:bd:12:21:b7:dc:d9:82:87:78:46:aa:60:
56:92:6f:a6:04:51:65:98:fc:b5:6a:e9:d4:33:16:
01:48:08:72:89:14:1f:bf:50:e4:fa:88:29:10:e1:
d0:90:93:bb:5a:1d:26:28:63:22:8a:94:af:38:1b:
54:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:F4:4D:80:27:DB:28:FA:90:85:87:2A:2F:A8:3A:79:04:74:04:FD
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3230302e302e302f32312d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.200.0.0/21
Signature Algorithm: sha256WithRSAEncryption
6c:bc:da:92:21:8a:ef:be:33:68:5c:79:20:0e:c6:64:dc:f6:
dc:d9:f9:ed:12:37:e2:1d:99:36:17:49:36:ba:11:ba:9c:a0:
96:8a:f3:44:fd:f2:8b:be:9e:68:61:3f:cd:51:6f:e3:d8:b8:
f1:80:a7:e4:5b:2f:b1:7b:6c:dd:b7:e6:c7:3f:8b:a9:6c:6e:
e4:2a:c8:4a:34:e0:68:96:b3:68:ec:16:af:d8:76:d3:6f:7d:
52:f3:7d:3e:21:bd:ac:99:9f:ee:ad:10:5a:59:77:6b:4b:cc:
cd:e8:21:e5:82:86:85:b4:79:f4:02:b2:fa:74:18:b8:6a:03:
da:56:74:c6:db:24:45:c9:cb:4e:ee:03:9b:c4:eb:18:7c:43:
e7:2b:9a:7b:3c:ea:40:fa:55:e6:7a:a6:d2:a2:1f:81:bd:fe:
8f:35:30:79:a6:3e:26:28:a0:04:9a:e1:62:66:43:c6:0e:96:
1a:ee:b9:9f:99:09:92:26:76:b2:1f:43:59:13:db:0f:e8:97:
4c:ad:57:74:63:5e:d1:dc:d7:08:79:5d:30:e5:30:c8:8e:9d:
10:ba:fa:ef:af:dc:d5:49:83:16:c2:ac:4e:28:2c:40:56:f3:
52:49:b3:aa:19:28:d3:c2:fe:08:f9:bc:99:3f:40:2c:9d:c8:
ba:fa:c2:6a
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUNfHyx4RJ4ZherY5I0p1vSMsKmHswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA0MTYxMTE4NDFaFw0yNzA0MTUxMTIzNDFaMDMxMTAvBgNV
BAMTKDA1RjQ0RDgwMjdEQjI4RkE5MDg1ODcyQTJGQTgzQTc5MDQ3NDA0RkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfGn7/LMzqUzesC2pPRnKdIvoo
Yv9y4udh6a7WgXdDq3QCqvnZ5WhAD6IlfB2e9f6Zh6+JzKuzUhVKDyrIMZGXwRWU
PJeKeJW2muisUg1gtuz3mx73mGEnA3wPKJzO5gR486Q46NzJKTTckVAXyv9VSaJ3
p6tMDynalpkLQm0xgevsKB9pzVY5mECFnTqpAcbvFpPkjPcaxO4Y4CW+W5iEPs8k
Ivhx1iq0OrLhJ3ad0avzIR8uwIY9LQ6abYfYiSZICGbaUL0SIbfc2YKHeEaqYFaS
b6YEUWWY/LVq6dQzFgFICHKJFB+/UOT6iCkQ4dCQk7taHSYoYyKKlK84G1QdAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUBfRNgCfbKPqQhYcqL6g6eQR0BP0wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzOTM1MmUzMjMwMzAyZTMw
MmUzMDJmMzIzMTJkMzIzNDIwM2QzZTIwMzQzNzM1MzgzMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8PI
ADANBgkqhkiG9w0BAQsFAAOCAQEAbLzakiGK774zaFx5IA7GZNz23Nn57RI34h2Z
NhdJNroRupyglorzRP3yi76eaGE/zVFv49i48YCn5FsvsXts3bfmxz+LqWxu5CrI
SjTgaJazaOwWr9h20299UvN9PiG9rJmf7q0QWll3a0vMzegh5YKGhbR59AKy+nQY
uGoD2lZ0xtskRcnLTu4Dm8TrGHxD5yuaezzqQPpV5nqm0qIfgb3+jzUweaY+Jiig
BJrhYmZDxg6WGu65n5kJkiZ2sh9DWRPbD+iXTK1XdGNe0dzXCHldMOUwyI6dELr6
76/c1UmDFsKsTigsQFbzUkmzqhko08L+CPm8mT9ALJ3IuvrCag==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:04:53 2026 by rpki-client