Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e33352e34382e302f32332d3234203d3e203437353833.roa
File: 3139352e33352e34382e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: HuqeFcGY2jZzHkHDX9feoXyncXNDBZVaxvbonQYixas=
Subject key identifier: 5F:71:8B:8E:86:C7:F1:EB:BD:7B:07:4A:02:F7:FD:33:DE:8C:00:AC
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 025BDDE2038139A809F106CFF49656EFF7541119
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e33352e34382e302f32332d3234203d3e203437353833.roa
Signing time: Thu 16 Apr 2026 11:23:42 +0000
ROA not before: Thu 16 Apr 2026 11:18:42 +0000
ROA not after: Thu 15 Apr 2027 11:23:42 +0000
asID: 47583
IP address blocks: 195.35.48.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:5b:dd:e2:03:81:39:a8:09:f1:06:cf:f4:96:56:ef:f7:54:11:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 16 11:18:42 2026 GMT
Not After : Apr 15 11:23:42 2027 GMT
Subject: CN=5F718B8E86C7F1EBBD7B074A02F7FD33DE8C00AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:b3:75:3f:ef:49:94:86:0c:f1:d1:bb:ca:7d:
36:6a:fd:74:28:a5:ca:79:61:a2:27:a6:f4:bd:f0:
84:c1:e5:7c:48:95:63:4c:b6:ea:47:be:bc:dc:7c:
2b:55:ff:0e:cf:89:07:68:19:ef:05:3a:24:07:5f:
6f:a9:b9:c3:ad:ba:03:ad:17:a3:ee:a0:4a:08:d6:
05:52:6a:91:1b:9b:3c:06:09:61:4f:73:16:bc:d9:
30:62:64:fc:3a:30:f7:a6:b3:a0:5e:25:12:a6:2b:
b2:58:63:38:c2:81:eb:7b:4b:d0:2d:c6:ca:14:0c:
0d:b5:44:ed:b3:f7:e9:63:25:4b:c4:98:3e:a7:32:
5a:38:b0:0e:5d:f0:3e:50:0d:a5:9d:20:4f:36:17:
7c:0b:24:d9:c4:da:ee:ee:d9:4c:de:88:97:ab:03:
71:35:d4:51:3c:fa:05:7f:71:1a:93:cc:b3:77:65:
0e:49:2c:3a:c4:f4:d8:73:0c:2a:55:ec:b4:5e:c8:
45:7c:04:aa:a1:d5:cd:b8:d9:f1:e3:5a:d0:96:f1:
3e:fc:f4:f5:78:b4:32:d1:ea:44:cd:08:0a:fd:12:
d1:b4:9a:c6:48:6a:7c:c0:84:3d:70:c1:bb:14:64:
4d:3e:4f:bc:43:8e:56:45:bb:b6:41:2b:25:25:52:
83:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:71:8B:8E:86:C7:F1:EB:BD:7B:07:4A:02:F7:FD:33:DE:8C:00:AC
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e33352e34382e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.35.48.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:ce:b3:24:e2:4b:03:a2:a5:0c:27:54:bf:e1:d4:33:a3:cb:
2d:bd:2c:5e:70:8c:e8:3e:cd:24:72:c7:d8:98:9d:7e:5a:cc:
40:e0:fc:2f:4c:dc:af:bb:a3:2b:68:12:60:1c:52:8a:53:3a:
5b:79:fe:86:e6:05:53:51:88:f4:84:0e:18:74:1e:96:06:19:
27:b3:05:2e:0d:bf:23:c0:10:da:4d:43:de:b8:d9:10:39:30:
bc:19:c5:3d:30:a4:90:0f:f1:8d:ab:c4:9a:c0:6d:0b:86:24:
14:fb:78:5c:0f:9e:93:e8:12:58:52:22:ec:39:de:d2:07:fc:
01:04:5f:0a:0f:f6:9c:82:13:7e:60:aa:8c:28:8d:e2:54:a5:
b0:a5:83:90:18:09:ea:1a:61:66:bb:26:9b:40:cc:e9:03:89:
09:bf:9a:7f:b7:cf:24:22:ef:08:cd:dd:8b:58:46:8f:72:ea:
0b:f2:10:2e:17:64:36:dc:db:1d:81:5b:77:9b:11:f5:d3:42:
28:09:31:fa:67:f5:3a:c5:5a:de:b1:29:bb:ee:6b:d4:bd:e6:
6f:e9:18:dd:2d:b4:db:04:f6:ed:ba:9c:38:78:ae:59:f8:c1:
1b:02:72:9b:4d:cd:9a:ac:b6:38:6b:54:65:ef:83:0b:59:48:
6e:73:9a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:51:07 2026 by rpki-client