Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e33352e33302e302f32332d3234203d3e203437353833.roa
File: 3139352e33352e33302e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: C5msXC0ilPMd+IWt43PCKcy1rDsoQwTzDxDC30zB2Nw=
Subject key identifier: 3F:24:97:26:0E:75:D9:AB:E0:4D:DE:51:C0:88:67:9F:88:9B:B8:09
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 456383FF2A9EE8C6AD8B1F3F6DBE330EE635C3FE
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e33352e33302e302f32332d3234203d3e203437353833.roa
Signing time: Thu 16 Apr 2026 11:23:43 +0000
ROA not before: Thu 16 Apr 2026 11:18:43 +0000
ROA not after: Thu 15 Apr 2027 11:23:43 +0000
asID: 47583
IP address blocks: 195.35.30.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:63:83:ff:2a:9e:e8:c6:ad:8b:1f:3f:6d:be:33:0e:e6:35:c3:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 16 11:18:43 2026 GMT
Not After : Apr 15 11:23:43 2027 GMT
Subject: CN=3F2497260E75D9ABE04DDE51C088679F889BB809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:35:4f:6e:19:83:80:a8:f6:58:fe:b2:54:58:
98:21:81:63:65:37:55:73:9a:d1:0a:8d:8d:9f:48:
b8:8e:2b:6e:6b:bd:ac:95:e1:cc:a0:e2:4b:ef:a8:
3f:6c:f9:46:01:9e:23:3d:b7:bb:30:93:96:45:1f:
16:20:10:c1:0e:35:47:4f:31:35:e5:b7:e4:4f:36:
b4:1d:8c:ed:e6:86:c6:5f:f1:7e:f3:ec:bc:19:a3:
94:d7:07:ce:d7:41:a4:1c:20:92:0b:ed:3e:00:0e:
16:6d:3c:85:28:1c:ae:42:ce:77:a8:79:e3:3d:06:
4b:0d:31:91:ac:f9:62:b5:7b:37:33:b9:13:45:77:
4e:74:aa:79:0b:fe:ba:07:12:50:8c:b5:7d:68:17:
d1:20:c2:4c:df:2b:f2:29:71:d7:7a:b5:f5:bf:2e:
80:f4:d3:62:6a:55:e8:53:c0:88:17:c3:fd:0b:ad:
d3:0c:81:18:ac:17:7a:46:c0:c0:c8:23:9f:85:c2:
d5:75:0e:d9:35:40:02:c3:c9:1c:ba:22:d5:94:cc:
e9:47:54:b0:1b:26:d4:b8:f7:75:79:2e:71:b6:5b:
cb:1b:ec:65:58:2f:7a:78:91:a2:73:ec:1c:ad:a4:
84:c2:c6:b1:db:66:2e:bf:01:0f:e1:7a:8e:ce:75:
97:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:24:97:26:0E:75:D9:AB:E0:4D:DE:51:C0:88:67:9F:88:9B:B8:09
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e33352e33302e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.35.30.0/23
Signature Algorithm: sha256WithRSAEncryption
04:6b:f7:ed:ac:3b:f4:ae:36:91:f7:3d:27:24:9e:19:8c:d7:
91:53:8f:07:13:3d:33:fa:8e:9d:98:3a:4d:d7:d2:f5:a6:d3:
0b:ed:8d:90:cb:58:45:f0:3f:ab:70:97:e8:1e:ea:03:06:33:
5e:a4:0f:4e:05:27:fc:c0:c3:72:a6:f9:87:6e:41:04:a6:44:
5d:18:27:07:63:49:f7:ba:bd:91:3a:b2:66:d2:52:bf:b6:f3:
51:24:ef:53:c2:92:04:43:c9:d6:a2:29:97:4a:89:95:ef:41:
5f:6a:f0:01:27:0d:c4:0a:23:68:89:12:a9:bc:4d:62:69:a7:
32:2d:c0:69:87:61:98:e8:7f:66:93:72:d7:bc:d3:9b:00:71:
df:8e:e9:fa:2e:98:29:b1:7e:04:37:6f:5a:9f:d9:f4:79:ff:
a6:49:0e:0d:4b:11:02:1b:76:4a:d1:0c:db:43:1e:30:fd:9d:
92:5c:ae:ad:0d:dc:17:93:9b:7b:3f:1f:6a:07:07:9d:00:a6:
7a:43:99:9d:ad:c2:9a:ad:7d:44:dc:fe:37:98:02:f9:bb:af:
45:a4:20:a4:f2:b7:02:4c:60:a9:f0:d5:76:b3:9a:58:6c:81:
08:bc:28:f3:95:8e:09:36:5e:12:1c:09:d3:94:a7:cc:45:25:
3c:57:1d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:31:35 2026 by rpki-client