Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3230302e382e302f32322d3234203d3e203437353833.roa
File: 3139352e3230302e382e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: TjRCjVRuxcJLsAlRZeBQIF1p6N/R818yl0G+Ems3A7k=
Subject key identifier: C6:F1:43:F8:34:4C:50:8F:5E:E1:69:B8:28:10:72:37:35:A9:F1:AF
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 502A2704ECEDF7E02ADC3A6AF31F2895E75A06A5
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3230302e382e302f32322d3234203d3e203437353833.roa
Signing time: Thu 16 Apr 2026 11:23:42 +0000
ROA not before: Thu 16 Apr 2026 11:18:42 +0000
ROA not after: Thu 15 Apr 2027 11:23:42 +0000
asID: 47583
IP address blocks: 195.200.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:2a:27:04:ec:ed:f7:e0:2a:dc:3a:6a:f3:1f:28:95:e7:5a:06:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 16 11:18:42 2026 GMT
Not After : Apr 15 11:23:42 2027 GMT
Subject: CN=C6F143F8344C508F5EE169B82810723735A9F1AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:30:3c:ac:c1:bc:d0:34:1e:db:28:6a:d0:c4:
fa:a3:d2:41:5a:f9:22:fc:18:5b:ee:08:d9:82:8c:
c8:c8:1e:be:e3:fe:59:df:ce:c2:b9:66:e9:0e:6b:
0b:3d:ed:ed:86:f4:eb:e9:67:35:48:76:86:8d:da:
ae:ca:d2:f5:05:ba:8a:5b:82:53:ff:d4:eb:9b:e4:
cc:4b:fb:51:3c:de:d4:5a:bb:50:de:23:7a:47:2a:
92:37:ab:7e:4e:69:85:bf:3c:69:88:88:72:10:2d:
50:6e:3a:3b:e3:6c:12:1d:40:6c:00:da:0d:4c:28:
da:56:aa:cb:98:63:e5:d8:24:a2:01:a2:80:b2:b1:
13:d9:f8:5b:9a:8a:7f:07:94:73:36:62:c5:a9:25:
47:47:69:61:a9:e9:23:9f:02:dc:09:cb:4a:1a:09:
a8:90:56:c2:7c:42:68:dc:54:70:f2:8e:7a:e2:9c:
56:78:4d:66:5c:57:f9:17:0f:12:8b:69:16:b9:e0:
e7:48:a8:b1:5e:62:e1:3e:ce:d3:40:ae:62:da:6b:
b2:e0:22:e2:33:74:5e:93:59:6d:54:45:ea:43:98:
25:8d:f5:dc:61:6b:dd:e4:ba:5f:a9:6e:aa:4f:72:
04:0d:55:7b:33:47:2d:2a:da:87:36:6a:2b:f7:8e:
05:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F1:43:F8:34:4C:50:8F:5E:E1:69:B8:28:10:72:37:35:A9:F1:AF
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3230302e382e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.200.8.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:d4:4f:17:9b:7a:32:37:0e:36:8a:61:5a:5a:d8:30:20:a6:
83:7e:c4:b9:6a:cc:13:ff:1e:db:17:be:0c:d7:07:e7:48:3e:
bd:f2:a5:4e:63:63:18:01:47:23:1c:57:20:c3:ed:6d:e8:8a:
5c:ee:b4:02:81:60:80:c2:0b:5c:bc:ab:57:e4:16:1e:23:a7:
f1:4d:15:6a:a9:c8:30:76:7e:88:b8:73:01:b1:19:8c:cf:2b:
ff:75:11:94:38:4b:ed:6b:5d:7c:6b:4d:ab:e3:5f:82:fd:90:
38:20:06:13:d5:6d:e6:3c:70:49:9e:ec:2d:64:36:5e:db:fa:
12:e3:ee:19:67:9c:b6:ab:cd:c9:55:b0:63:e0:5e:54:8f:38:
2a:29:be:d9:a9:7b:64:ce:48:82:70:81:30:59:87:5a:3f:f8:
b9:70:e5:f1:d5:9a:64:d0:d2:ef:3b:15:88:be:ee:6b:1b:e7:
d8:c4:49:1d:94:74:c3:06:c6:bc:94:1e:b0:7c:ca:28:9b:7f:
c4:13:99:92:35:18:4a:ce:f0:4d:65:bd:d5:ef:39:b4:8c:13:
67:32:6e:16:be:2d:36:62:3c:26:0b:ac:98:af:86:d8:77:f1:
b7:32:88:ee:39:ae:62:69:5a:cb:96:4b:c4:bb:23:05:4f:d0:
14:1f:1f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:50:58 2026 by rpki-client