Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e33352e302e302f32322d3234203d3e203437353833.roa
File: 3139352e33352e302e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: uK9gqy+4TmXd1vYaDWAYlErYANAD85WD5qe0N7oQpoM=
Subject key identifier: 23:D8:36:42:0E:18:53:D6:81:B1:3C:29:94:D1:10:43:FA:1B:C7:C6
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7242C4C719740464314DBBD6385408152C02B0C4
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e33352e302e302f32322d3234203d3e203437353833.roa
Signing time: Thu 16 Apr 2026 11:23:40 +0000
ROA not before: Thu 16 Apr 2026 11:18:40 +0000
ROA not after: Thu 15 Apr 2027 11:23:40 +0000
asID: 47583
IP address blocks: 195.35.0.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:42:c4:c7:19:74:04:64:31:4d:bb:d6:38:54:08:15:2c:02:b0:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 16 11:18:40 2026 GMT
Not After : Apr 15 11:23:40 2027 GMT
Subject: CN=23D836420E1853D681B13C2994D11043FA1BC7C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4d:9f:85:e0:f2:9f:10:74:30:d7:2e:d9:af:
4c:97:e0:12:67:85:53:db:b7:9c:39:f7:0e:62:08:
cf:f5:02:ef:71:0c:47:29:3d:d9:ae:58:4a:3f:a6:
58:42:52:13:d5:73:bb:2f:00:45:a2:d9:8d:39:24:
95:58:31:c3:82:a3:43:00:60:0e:c0:18:c6:9e:b3:
14:6d:d1:21:ed:6d:20:da:e4:d3:61:a1:59:86:68:
a6:be:64:13:75:a5:81:68:1d:9d:8b:65:42:83:dd:
58:2d:59:bb:6a:f9:71:6f:46:2d:12:62:09:2a:e4:
09:68:7f:c1:8e:4b:8e:60:e9:35:10:cf:7e:40:2c:
8a:b3:e6:45:b1:f9:c6:5d:fa:d5:85:52:f0:11:06:
7f:45:3c:dd:f4:61:c8:44:98:2c:95:b0:c3:0e:b3:
ac:16:c9:26:6d:40:6e:de:1b:cd:38:11:38:77:05:
d5:8a:0f:d4:92:e4:55:5f:f2:a7:fd:48:f3:26:a9:
ff:16:f4:74:ce:92:0b:20:b4:b9:fe:c7:0f:11:92:
37:95:1d:62:91:97:23:8d:a0:2e:a2:d0:75:bd:46:
44:01:a3:75:5f:6d:27:d6:b0:5e:bf:37:9e:c3:f3:
cb:ba:6d:f4:fd:09:75:9d:16:df:70:c9:9a:ae:60:
36:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:D8:36:42:0E:18:53:D6:81:B1:3C:29:94:D1:10:43:FA:1B:C7:C6
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e33352e302e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.35.0.0/22
Signature Algorithm: sha256WithRSAEncryption
43:44:38:70:ec:16:ea:b1:79:9f:de:45:14:1a:be:23:71:27:
b9:80:90:22:3c:32:fd:e3:60:ad:64:ce:f1:67:b2:a6:6e:52:
24:c9:6a:9b:6f:61:2f:6b:a5:33:4b:43:7b:20:e2:f4:a3:7d:
e3:e0:53:40:5c:e8:5c:0c:55:89:f5:2b:c0:91:1a:e4:f3:56:
65:a9:a6:fc:53:e0:b9:f3:c8:fb:88:a7:04:ae:16:00:92:55:
eb:b2:31:40:a4:10:c5:2f:79:6d:91:25:b7:dd:fc:f4:ca:50:
ae:82:ac:cb:6a:fe:41:8d:17:38:e6:dd:76:58:0e:8f:8b:7c:
69:2e:68:da:77:d3:05:ac:fd:0e:e6:b5:d5:34:03:0e:62:58:
18:20:86:10:fd:5c:83:98:4b:a2:28:7b:79:ad:3d:e4:74:d9:
d0:6d:d2:27:dc:d5:eb:e6:4d:0b:f1:35:c8:b4:57:7d:2e:44:
ed:df:5a:4d:a0:95:ba:b2:63:3e:16:ba:73:a1:94:88:46:03:
72:7f:e9:37:31:59:a1:b9:ad:c1:58:1b:c6:57:ce:27:dd:66:
36:57:f3:68:96:60:2c:00:7a:f8:97:b3:77:da:d7:c8:85:5a:
f9:f1:a2:84:86:c3:b6:c7:22:ef:22:f6:be:7f:53:93:ff:1f:
f0:3d:66:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:31:43 2026 by rpki-client