Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135372e3137332e3131322e302f32302d3332203d3e203531313637.roa
File: 3135372e3137332e3131322e302f32302d3332203d3e203531313637.roa (raw, json)
Hash identifier: e8giab43+uFiRHDm2yGvPi8q3gvijlleDw+eoRAB6oY=
Subject key identifier: 45:0A:91:C2:79:87:8B:17:8E:78:05:12:43:9A:43:DA:04:9A:83:22
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 01C092DF6FE1F821765470563AC6C474E45251BC
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135372e3137332e3131322e302f32302d3332203d3e203531313637.roa
Signing time: Fri 17 Apr 2026 19:23:47 +0000
ROA not before: Fri 17 Apr 2026 19:18:47 +0000
ROA not after: Fri 16 Apr 2027 19:23:47 +0000
asID: 51167
IP address blocks: 157.173.112.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 10:56:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:c0:92:df:6f:e1:f8:21:76:54:70:56:3a:c6:c4:74:e4:52:51:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 17 19:18:47 2026 GMT
Not After : Apr 16 19:23:47 2027 GMT
Subject: CN=450A91C279878B178E780512439A43DA049A8322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:55:16:c3:e5:5b:d8:a5:77:e9:45:0a:ff:b3:
3d:08:66:a8:a2:aa:f8:12:f4:38:6d:c5:36:01:7d:
90:31:58:d3:60:a6:5b:a1:71:b1:78:ba:c9:5f:6a:
c7:d8:e4:ab:c7:7f:91:65:99:13:8d:e4:c3:e6:a3:
80:86:eb:9e:a1:35:5c:c6:fe:8c:02:4f:8d:45:48:
0e:8f:fb:e9:8a:31:e3:de:fe:81:39:87:ad:dc:6f:
98:05:3c:ed:c7:b1:e9:6c:95:7d:03:78:c7:51:91:
c9:3a:c8:e1:38:eb:e7:27:6a:e5:21:82:e9:d4:8e:
d8:9f:f1:75:6e:64:14:2e:64:46:d7:02:79:8d:1e:
f0:7d:4f:2e:3a:91:17:9c:ba:5c:4b:f6:ad:f5:41:
60:0b:7f:c3:fb:74:ca:1c:71:7d:95:0e:5e:bd:84:
65:19:36:c8:8e:83:62:e7:7d:7d:e7:5a:0f:18:34:
b4:40:e9:b9:1c:a9:4c:ab:91:0b:44:a4:fa:fe:e5:
44:df:2c:7b:92:84:25:a5:fc:17:f9:e7:80:2c:69:
05:91:83:0c:27:5d:ec:76:25:04:41:aa:bf:9d:72:
92:06:82:c1:b5:65:3c:09:de:c9:23:c0:bc:b1:c8:
51:61:4e:aa:18:c0:d8:fb:5f:9d:e1:78:0d:63:a6:
18:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:0A:91:C2:79:87:8B:17:8E:78:05:12:43:9A:43:DA:04:9A:83:22
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135372e3137332e3131322e302f32302d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.173.112.0/20
Signature Algorithm: sha256WithRSAEncryption
49:3c:7c:a6:55:9a:83:bc:80:10:23:4e:30:1a:a0:df:cc:c5:
4b:95:84:be:26:7f:c1:fa:11:cc:8b:8b:e3:7d:63:48:ee:5a:
40:2d:c1:a8:43:5c:34:ae:f2:2b:b8:8d:ba:5a:11:5c:33:9e:
9b:d8:fe:18:07:f3:e4:38:de:a3:e0:b3:af:c4:5b:3f:45:21:
8f:98:33:18:bb:f6:13:9b:9c:a9:4b:c8:04:d6:85:41:b8:a1:
81:73:0a:1e:47:8c:30:8e:cb:ab:11:3a:c3:5d:06:27:0f:fd:
e0:09:a2:ce:db:7c:ed:ed:04:c3:a6:1c:97:5c:9f:e1:6c:a0:
9e:23:8d:9a:93:bb:f3:0d:6f:ec:57:7e:d0:94:d7:59:b3:0d:
f8:c9:49:fc:47:62:b5:e3:ed:55:36:19:86:c7:da:9e:58:c4:
b0:36:e8:2f:7a:4e:2a:90:a9:80:57:2e:13:3e:dc:2d:44:f1:
9c:58:d5:3a:05:64:90:00:5b:7a:5b:07:15:16:9d:92:0e:cb:
05:f5:47:68:1a:6a:7f:ed:3b:af:cb:1b:21:9c:7f:23:6e:d2:
bb:f5:ef:84:8b:f7:c5:8a:ff:47:a5:1c:85:cc:d6:34:b9:3f:
5c:ac:b9:f1:e0:c2:c0:26:f7:61:03:2e:4a:b4:49:43:b5:62:
99:10:fb:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 23:06:45 2026 by rpki-client