Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e33352e31362e302f32322d3234203d3e203437353833.roa
File: 3139352e33352e31362e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: bgYDQC16721d8vukVj6PBKrf1EoTYyBixCtyV0qACQo=
Subject key identifier: FC:32:7B:C4:14:68:ED:5C:6E:88:10:7F:B5:85:BE:DB:BE:E4:E4:06
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 756A840AB220E164FCFD78E7238974BFE97FDA12
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e33352e31362e302f32322d3234203d3e203437353833.roa
Signing time: Thu 16 Apr 2026 11:23:43 +0000
ROA not before: Thu 16 Apr 2026 11:18:43 +0000
ROA not after: Thu 15 Apr 2027 11:23:43 +0000
asID: 47583
IP address blocks: 195.35.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:6a:84:0a:b2:20:e1:64:fc:fd:78:e7:23:89:74:bf:e9:7f:da:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 16 11:18:43 2026 GMT
Not After : Apr 15 11:23:43 2027 GMT
Subject: CN=FC327BC41468ED5C6E88107FB585BEDBBEE4E406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:59:a4:e5:01:72:4a:7d:92:36:3e:3b:88:da:
97:67:b5:e2:41:8c:ee:c9:14:ab:6e:62:65:39:77:
0e:06:1e:7c:9e:06:e7:59:fc:cf:a8:6b:60:d4:8c:
1c:f6:a6:de:d0:bc:af:5a:e6:7e:66:89:57:19:c8:
62:97:8f:ab:d3:d7:a4:8a:af:4b:b1:b7:6a:a1:f8:
32:a3:6b:57:75:9a:a1:51:c4:39:a8:99:af:a5:4f:
e0:86:f3:17:05:b7:cb:59:43:f2:d4:75:e1:f8:fa:
69:b7:6a:56:72:50:c7:51:7c:f1:87:80:53:dc:33:
14:80:3f:83:fe:f5:3f:7d:75:f2:89:ca:20:b0:ea:
4d:90:3c:8e:d7:1e:6d:47:0c:73:c9:6b:c0:48:dd:
8f:83:43:5c:7a:29:e8:da:63:02:6d:b7:29:9e:f3:
96:bb:1c:d0:09:c6:31:e9:2a:46:93:da:21:78:99:
0a:ab:64:6f:06:bc:b9:95:0d:f1:f0:54:94:cb:12:
c9:30:4e:cd:ad:57:57:92:94:4c:78:03:66:08:49:
ae:04:80:2f:16:c3:9e:aa:4d:18:07:d9:fb:2e:34:
d7:34:dd:d4:ba:45:d6:ab:49:2f:de:4f:07:c9:56:
a0:3f:9e:60:d9:74:ed:ab:7c:94:94:4e:5a:63:24:
83:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:32:7B:C4:14:68:ED:5C:6E:88:10:7F:B5:85:BE:DB:BE:E4:E4:06
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e33352e31362e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.35.16.0/22
Signature Algorithm: sha256WithRSAEncryption
99:66:0c:ab:b1:f3:6a:cd:5c:98:2e:63:64:e7:6a:42:3d:91:
7c:e5:67:ae:58:e6:22:b5:62:c5:34:ed:e4:21:3c:c6:8f:c2:
a6:23:ae:05:06:21:c5:c6:3d:b6:80:db:18:7d:e5:7a:66:54:
93:81:ed:92:63:b0:87:17:db:ac:ee:b0:d3:7d:75:3a:08:49:
56:19:ed:09:23:59:14:0f:fd:16:08:18:1c:7d:ec:5c:ab:ce:
27:b1:5f:69:9c:a2:1a:5d:af:f0:4e:78:94:1c:6e:50:14:65:
66:73:6c:97:0e:d6:cd:a0:26:50:59:9c:87:25:3d:d9:8e:3b:
55:f5:87:3a:6c:bf:0b:13:93:74:6b:51:91:4f:82:53:8f:cf:
6a:d2:1b:07:32:37:01:62:f2:70:0a:44:76:18:90:13:bd:d0:
22:ac:bf:68:17:c6:53:f1:8c:18:12:51:06:1e:66:f0:bb:05:
4f:86:6a:80:59:4b:63:b6:b9:7e:d5:f1:3b:fc:e1:c5:cf:da:
a6:14:4b:39:aa:ec:92:d0:f0:47:dd:52:23:44:f6:d8:73:ef:
5f:4f:5c:6b:44:d1:2e:6c:3b:7f:a3:f1:9c:3f:41:ef:ae:a5:
97:1b:8a:4e:31:79:ea:d1:41:4b:a3:4d:bd:b7:52:88:a4:9a:
30:9e:7c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:22:17 2026 by rpki-client