Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135372e3137332e39362e302f32302d3332203d3e203531313637.roa
File: 3135372e3137332e39362e302f32302d3332203d3e203531313637.roa (raw, json)
Hash identifier: ps5OMFkQiGbh7EsIEPJ55UUGkdp85KBfKEzJWLAdk9E=
Subject key identifier: 80:E0:F3:E6:11:0F:54:62:65:71:59:26:C8:26:BE:B9:57:D6:65:86
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 62622E5955E6B43D72ECB574C6D3EC3CEDDB660E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135372e3137332e39362e302f32302d3332203d3e203531313637.roa
Signing time: Fri 17 Apr 2026 19:23:47 +0000
ROA not before: Fri 17 Apr 2026 19:18:47 +0000
ROA not after: Fri 16 Apr 2027 19:23:47 +0000
asID: 51167
IP address blocks: 157.173.96.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 10:56:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:62:2e:59:55:e6:b4:3d:72:ec:b5:74:c6:d3:ec:3c:ed:db:66:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 17 19:18:47 2026 GMT
Not After : Apr 16 19:23:47 2027 GMT
Subject: CN=80E0F3E6110F546265715926C826BEB957D66586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:87:e9:c7:c6:f7:d4:67:6b:2a:37:de:26:bf:
33:99:ac:46:b2:ec:05:e2:66:6e:9f:c1:29:9f:9a:
01:3d:01:a4:8e:bf:f1:20:85:31:e1:a6:32:bd:ed:
b7:a9:00:78:4c:be:a2:9f:37:92:3b:72:70:4b:29:
f5:80:d7:a3:33:8a:96:30:99:c6:9b:79:2c:69:7f:
38:4e:68:9f:e0:bc:19:a9:fc:25:11:03:90:8c:91:
57:89:22:81:e4:2d:c1:db:73:f0:08:74:d8:e0:62:
ad:08:55:f7:88:d1:bd:fb:4b:ea:d2:76:5d:d9:42:
e1:12:be:78:2e:03:c1:c3:47:dd:cf:73:34:29:39:
97:f5:53:ba:7e:32:4f:d3:70:f3:54:48:31:6f:ec:
7c:5f:80:94:d8:61:de:a2:8f:01:08:68:35:97:b4:
7b:17:87:fc:b5:45:bb:19:6b:3a:6a:27:72:50:9e:
7b:a9:ca:d9:d7:60:3f:8f:74:7f:fb:8d:21:1c:e1:
af:9d:94:03:9c:be:eb:d4:36:9d:ef:15:16:86:e6:
83:aa:ae:16:e7:bc:b3:9d:a1:a7:b9:e0:67:d7:e7:
a3:fa:f5:d9:88:b3:ba:5b:13:0b:88:d2:3d:fc:ee:
19:82:5b:dc:1c:b9:a8:c0:d1:3e:d6:7a:dc:a1:0f:
2c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:E0:F3:E6:11:0F:54:62:65:71:59:26:C8:26:BE:B9:57:D6:65:86
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135372e3137332e39362e302f32302d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.173.96.0/20
Signature Algorithm: sha256WithRSAEncryption
04:4c:01:30:df:da:86:23:39:37:d1:d4:b0:84:75:9f:3e:8e:
df:df:46:db:48:a2:34:b3:7a:c3:15:9c:ca:86:a6:14:f8:c4:
f9:3d:fa:f0:a0:1b:c1:2a:a3:d6:69:50:7f:a7:ee:7f:99:40:
21:c7:1b:5e:e9:3b:96:5a:73:35:d8:6b:be:e4:28:46:38:dc:
dc:54:84:a4:17:0c:e8:b9:e1:77:f5:1e:9e:31:fc:8a:3b:6e:
89:91:c2:de:09:73:3e:64:84:91:45:fc:c5:fc:1e:3f:0b:05:
b8:1f:41:15:57:f3:83:1c:89:c1:1c:86:12:97:ea:7a:ff:64:
d4:de:d1:e2:16:41:17:ce:24:e9:2f:39:db:b9:b9:3e:5b:5c:
30:1a:49:5d:fe:a6:9e:6c:b7:62:bc:28:51:e2:9c:d6:fc:a9:
9a:89:01:a4:b7:35:40:5c:e4:81:d0:ff:d4:8c:13:d9:c4:d5:
32:2d:1c:50:45:eb:c7:3b:c8:3b:1e:b4:5c:46:21:61:6c:dc:
cc:d4:a7:68:bd:15:a6:43:06:ae:c0:b2:b7:a8:81:0d:85:e9:
44:ac:d6:4a:dc:e7:72:b7:38:9c:58:74:95:0d:0b:f0:70:f7:
81:25:3c:07:26:58:23:cc:f6:eb:07:34:4d:80:fc:94:54:a3:
5b:be:0f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 23:05:57 2026 by rpki-client