Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e33352e382e302f32312d3234203d3e203437353833.roa
File: 3139352e33352e382e302f32312d3234203d3e203437353833.roa (raw, json)
Hash identifier: GX+FsUsrMjrWAf8HJLOxZMB6J29eGjbPjqJosmw2K/o=
Subject key identifier: FF:5D:13:B4:0A:23:62:87:74:71:C0:56:13:97:25:8B:D2:86:C5:CC
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7FCAD2D594EFCBBC9F35888E0B7087EF660122E2
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e33352e382e302f32312d3234203d3e203437353833.roa
Signing time: Thu 16 Apr 2026 11:23:42 +0000
ROA not before: Thu 16 Apr 2026 11:18:42 +0000
ROA not after: Thu 15 Apr 2027 11:23:42 +0000
asID: 47583
IP address blocks: 195.35.8.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:ca:d2:d5:94:ef:cb:bc:9f:35:88:8e:0b:70:87:ef:66:01:22:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 16 11:18:42 2026 GMT
Not After : Apr 15 11:23:42 2027 GMT
Subject: CN=FF5D13B40A2362877471C0561397258BD286C5CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b4:49:82:12:92:cf:d3:5b:2c:07:d2:d1:a0:
ec:5a:96:f3:f2:7d:50:a1:f8:d2:df:2d:7c:de:57:
88:6b:a0:98:9e:7e:82:15:5c:fd:cf:bd:0e:e6:67:
da:ca:7d:55:b0:c3:10:a7:b2:05:87:4d:02:5d:e1:
e8:a8:a9:8a:04:1b:ec:17:38:a7:1b:61:68:3b:0d:
9a:94:17:b9:17:a1:96:70:12:fe:98:c1:61:63:05:
37:6b:86:17:5b:2f:a4:37:d1:db:31:af:ed:28:41:
b1:fa:3f:05:65:71:c3:96:c8:ce:d6:e9:f4:da:d2:
45:8d:c2:f2:83:78:a3:97:ab:b9:0e:18:db:f7:42:
bd:f6:a1:01:1a:1b:d1:5c:8f:44:d1:78:ee:ad:31:
49:45:48:dd:d7:f6:d9:3e:24:8c:0c:50:03:f7:e9:
06:63:40:f9:7c:1c:5d:ab:f4:e1:39:45:78:d5:04:
dd:47:97:a3:9f:34:f7:23:c5:04:53:ff:0a:53:9d:
b8:88:8a:37:09:04:2d:14:9b:34:a5:78:af:69:81:
b7:48:7d:ca:75:84:cb:be:3a:27:06:91:59:65:bd:
18:40:78:f8:26:df:5a:88:f8:ce:a5:a4:e9:d4:c3:
3f:f4:43:0f:b3:0c:1b:78:33:72:32:55:01:4a:2e:
7d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:5D:13:B4:0A:23:62:87:74:71:C0:56:13:97:25:8B:D2:86:C5:CC
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e33352e382e302f32312d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.35.8.0/21
Signature Algorithm: sha256WithRSAEncryption
14:0a:59:92:eb:75:40:7f:eb:79:9c:ee:c5:22:90:c0:5d:12:
9a:1f:fd:74:5b:8d:42:11:42:2d:14:57:2b:b6:a8:39:aa:25:
bd:7c:02:23:2b:dc:02:de:e8:1e:17:c1:90:70:fa:41:21:9d:
79:a3:b4:48:06:82:04:47:2b:18:94:2a:da:a7:bb:5b:b3:18:
3a:9b:72:6a:83:7f:c9:7b:b9:9a:df:d9:8d:a8:05:d6:8b:fd:
c9:d1:5a:ff:9c:f0:fa:95:be:28:a3:e1:dd:5c:40:8b:3b:e5:
55:50:d2:1b:d0:00:7d:c1:de:de:08:87:24:8d:b9:b9:07:4d:
91:70:be:86:b6:19:81:2f:a1:ab:1b:ec:71:80:2c:5b:1c:a7:
29:21:9e:6a:15:db:ac:9a:4e:f0:d5:09:4b:eb:8b:a9:f2:8d:
02:f2:e1:69:db:4a:a7:48:6b:73:83:1f:87:df:26:f1:dd:1f:
3a:86:09:05:67:13:ca:41:25:e5:d0:28:c1:93:08:dc:d3:c7:
57:e7:2c:7e:3c:75:c9:70:ca:45:5c:22:80:89:74:d8:9a:f9:
44:82:71:05:85:78:a5:05:a3:c2:6a:cc:ee:2a:b1:89:c0:00:
1a:8c:28:28:cf:38:a5:49:fd:b4:77:24:fd:18:3d:7b:f2:6a:
74:74:9a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:05:25 2026 by rpki-client