Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3135392e3235332e342e302f32342d3234203d3e20323134313433.roa
File: 3135392e3235332e342e302f32342d3234203d3e20323134313433.roa (raw, json)
Hash identifier: TqaGaeIMEAvs/WTyCQmUWp+DQtl6DU4XoEhBsVKyqRs=
Subject key identifier: AB:81:74:40:3C:21:BC:A1:93:74:A6:58:0A:7E:A2:B8:37:86:30:6A
Certificate issuer: /CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Certificate serial: 2471B7C110E46026F680A32953ED6095C10BF0FA
Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3135392e3235332e342e302f32342d3234203d3e20323134313433.roa
Signing time: Thu 21 May 2026 12:47:15 +0000
ROA not before: Thu 21 May 2026 12:42:15 +0000
ROA not after: Thu 20 May 2027 12:47:15 +0000
asID: 214143
IP address blocks: 159.253.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl
rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft
rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 05:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:71:b7:c1:10:e4:60:26:f6:80:a3:29:53:ed:60:95:c1:0b:f0:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Validity
Not Before: May 21 12:42:15 2026 GMT
Not After : May 20 12:47:15 2027 GMT
Subject: CN=AB8174403C21BCA19374A6580A7EA2B83786306A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8f:af:c6:be:72:71:31:56:b9:82:36:d9:61:
05:d0:0b:ac:ee:9a:77:a0:41:3e:52:6e:8e:94:46:
9b:08:fd:a0:8a:41:1f:6b:cc:e4:7b:20:8d:24:ec:
05:85:8f:de:ef:30:7c:e5:eb:30:41:57:28:63:69:
36:f8:f6:6a:cb:43:0d:e9:86:11:98:74:39:d8:b4:
d6:8c:36:5e:99:32:12:66:4f:ec:04:bb:02:bf:d0:
22:cc:54:5b:5d:da:88:69:53:25:c4:7c:6c:ef:7a:
91:fb:3a:cb:0f:7a:64:c9:0a:a5:b4:3b:74:6b:0e:
90:f6:1f:72:70:16:22:40:71:5c:c0:05:80:f1:bb:
b7:c6:fc:9f:eb:fb:55:2b:85:3d:14:9b:b5:dc:01:
7d:52:ae:be:62:17:c1:7d:e9:6e:1c:8f:78:42:9b:
5a:5b:25:2c:28:76:cc:bc:e0:e0:fb:22:50:b9:d1:
6a:77:7b:01:21:61:a6:4e:17:7b:c0:43:f2:5f:35:
30:d0:ba:01:a7:c1:a8:a7:2e:0d:b0:85:7f:40:1d:
33:30:ea:f8:e0:58:bd:2f:d8:14:e9:75:7e:3f:b8:
c8:83:1a:41:bf:09:cf:76:64:97:30:6f:60:34:f1:
b3:7b:a3:30:a7:9a:15:23:cb:0c:90:a3:19:5a:06:
ce:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:81:74:40:3C:21:BC:A1:93:74:A6:58:0A:7E:A2:B8:37:86:30:6A
X509v3 Authority Key Identifier:
keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3135392e3235332e342e302f32342d3234203d3e20323134313433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.253.4.0/24
Signature Algorithm: sha256WithRSAEncryption
89:12:ec:54:fe:e5:bc:f7:3a:bf:c0:e4:5a:6f:d5:1c:ee:86:
d1:74:8f:b7:e9:6c:41:1a:c7:da:dc:82:9d:91:9c:bb:9f:9d:
56:ed:3f:c9:6f:d3:4b:e2:00:a7:94:3c:30:f7:7a:d0:c7:c6:
88:ec:44:9b:8c:cf:21:04:45:05:4b:13:6a:06:fc:f8:8d:82:
6e:3c:26:32:90:75:6d:e0:ae:c2:60:6a:5f:60:96:c9:c8:8e:
c3:cc:ee:39:0e:04:87:97:d3:74:93:40:f7:e7:df:05:0d:5c:
49:b4:63:6f:0a:9d:d3:9c:4f:a0:d4:4b:92:ee:81:f7:08:d3:
1b:e8:ba:0f:13:10:a9:98:43:dd:47:d7:7f:e5:eb:25:72:99:
b0:0b:11:97:a7:00:18:ae:0a:c2:42:08:de:ab:e6:fb:e8:7f:
19:af:ea:49:72:ca:ea:d6:dd:60:a8:fb:ac:b9:87:a5:04:57:
0c:30:57:46:66:68:5a:4b:5b:bb:67:62:a4:9a:46:60:81:7a:
87:5d:de:36:ed:7b:60:7b:c9:35:61:75:5c:ce:73:51:19:7e:
b8:5e:2f:40:ee:83:90:82:a1:e5:d9:f7:66:e6:94:3f:18:42:
79:f9:69:cf:2c:1e:d5:63:89:77:20:d0:c4:5f:2b:27:24:6c:
9e:e5:58:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:52:27 2026 by rpki-client