Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3234322e3234312e302f32342d3234203d3e20313336373837.roa
File: 3139352e3234322e3234312e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: NYI1yEEfPx0Hu0h9qYCba2/I3AHAVqC4g9K38mRpNYI=
Subject key identifier: B9:3D:FE:1A:BD:49:83:05:E7:80:31:97:AC:4A:F0:2B:E0:6D:35:58
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 116D6DA1AF36176A009DB9B8D2FB0D0874DBD1D6
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3234322e3234312e302f32342d3234203d3e20313336373837.roa
Signing time: Thu 17 Sep 2026 16:29:01 +0000
ROA not before: Thu 17 Sep 2026 16:24:01 +0000
ROA not after: Thu 16 Sep 2027 16:29:01 +0000
asID: 136787
IP address blocks: 195.242.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:6d:6d:a1:af:36:17:6a:00:9d:b9:b8:d2:fb:0d:08:74:db:d1:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 17 16:24:01 2026 GMT
Not After : Sep 16 16:29:01 2027 GMT
Subject: CN=B93DFE1ABD498305E7803197AC4AF02BE06D3558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:51:80:cf:bb:9a:63:46:62:7b:23:a7:ed:00:
06:18:c7:9f:b2:ce:79:34:5d:e7:6c:be:be:a0:f2:
e3:7c:e5:cc:d0:3b:5f:5c:30:c4:2b:9e:22:1a:b7:
dd:52:17:da:89:e8:eb:b0:30:f2:13:80:ef:c2:fc:
b5:b4:0c:19:97:9a:92:06:49:04:3d:06:8a:12:29:
25:2c:58:a4:cd:0a:b7:64:0f:8b:0f:9d:21:ee:07:
74:b5:4a:fc:89:39:9c:9b:ed:54:c9:08:c0:f8:8c:
1f:a4:00:47:9c:85:10:6d:16:87:29:30:8d:77:e6:
86:3c:50:b3:3f:07:ce:f2:9f:f7:46:fa:7b:4a:82:
0b:de:b3:1b:a6:6b:85:f0:81:b0:9c:d2:6f:5e:23:
27:e2:5a:80:ca:f2:70:41:2b:d7:f3:d0:3c:e6:60:
e1:a6:f3:92:75:bf:4e:92:e4:2a:b3:4f:15:de:5d:
0d:4b:4a:50:2a:e5:73:80:9b:f3:bb:a5:ee:99:25:
0a:1d:62:e7:99:c5:54:6a:78:31:08:5c:49:b3:8d:
57:5b:3c:4f:94:20:2d:8e:77:a1:93:71:44:65:7b:
9f:2a:a4:5c:a0:c2:db:19:0c:69:5b:78:12:25:fb:
5e:2d:7f:ec:10:fa:7c:7c:f5:5c:7a:f4:f8:e0:b3:
9c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:3D:FE:1A:BD:49:83:05:E7:80:31:97:AC:4A:F0:2B:E0:6D:35:58
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3234322e3234312e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.242.241.0/24
Signature Algorithm: sha256WithRSAEncryption
99:f0:42:db:8e:86:02:07:2d:4f:66:2a:bf:8e:7a:4a:75:38:
c0:a5:4d:98:a9:c8:94:58:7b:da:3b:3f:8d:59:c8:8b:c7:29:
60:20:63:43:46:44:67:1b:f9:e6:26:a6:75:71:bc:7c:6b:50:
5a:e8:9d:81:5e:f2:90:de:ad:61:4b:67:b8:ab:04:e7:6f:a2:
60:ed:17:f9:bc:e6:4d:d5:9c:b0:39:3d:44:47:a6:fe:e6:c0:
78:a3:0b:76:16:9c:cf:8a:06:9c:f0:74:46:1d:c4:d5:fa:ef:
75:6c:8d:87:d7:48:f8:5a:88:1f:38:fe:c9:78:ca:5a:85:6f:
8d:d4:e9:72:61:b9:cc:d0:c5:64:98:3b:21:e3:d0:a4:07:95:
4d:86:ad:cf:49:d8:5d:af:8c:9a:a6:af:9d:4a:f2:9b:8e:9f:
93:72:35:e5:e0:05:df:3c:13:2e:74:b9:bc:bc:3d:9a:9d:9b:
12:e7:48:1c:dd:ce:18:f5:ec:5b:cd:81:bd:70:6f:48:ed:9d:
42:cf:68:ac:5e:cf:96:1d:c5:ec:4e:34:0d:bb:74:96:8b:06:
c7:16:bc:08:16:0c:08:26:5b:76:5d:c1:e0:ba:dc:97:a2:af:
8e:08:de:af:f1:5c:e7:ba:11:56:c5:4c:bc:fd:b9:62:92:fc:
62:71:48:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 22:26:57 2026 by rpki-client