Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3136342e352e3235322e302f32342d3234203d3e20313336373837.roa
File: 3136342e352e3235322e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: rGUPg9M0PP6qHJjOOMX1zKYBMl1oZ14fZL42kdTiKj8=
Subject key identifier: 91:DF:43:56:AE:63:12:F7:AA:E9:C3:D7:D0:D4:3E:7A:E0:CE:1D:C8
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 21B8BF27A9539371EEDA0B5CBCBADA45526CF3B2
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3136342e352e3235322e302f32342d3234203d3e20313336373837.roa
Signing time: Thu 15 Oct 2026 17:29:48 +0000
ROA not before: Thu 15 Oct 2026 17:24:48 +0000
ROA not after: Thu 14 Oct 2027 17:29:48 +0000
asID: 136787
IP address blocks: 164.5.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 15:04:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:b8:bf:27:a9:53:93:71:ee:da:0b:5c:bc:ba:da:45:52:6c:f3:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 15 17:24:48 2026 GMT
Not After : Oct 14 17:29:48 2027 GMT
Subject: CN=91DF4356AE6312F7AAE9C3D7D0D43E7AE0CE1DC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:59:07:7e:e1:0f:51:df:2a:9f:29:2c:be:27:
ae:d1:95:35:eb:8a:ff:7c:cf:7b:9c:ee:47:c8:96:
aa:cc:46:8c:b3:44:e8:96:ce:b7:57:62:16:fc:d9:
de:66:1c:fa:38:3e:da:01:c1:26:b5:2b:2a:41:55:
92:14:6a:aa:35:19:6a:a4:ec:fb:f4:88:99:7d:60:
aa:76:51:07:ed:5c:be:e9:31:8f:a9:a6:73:65:be:
ee:17:fc:47:4c:40:6e:73:38:cb:6c:92:28:09:0b:
d3:1c:08:d7:50:87:52:67:4d:7b:38:e1:56:f3:f3:
e7:20:24:d6:39:1c:ac:29:ef:0d:07:91:9c:ac:33:
bd:d8:57:12:fb:ac:35:2d:4e:ae:c3:6a:0f:fe:f9:
4b:07:57:cc:20:d7:a5:a4:43:ca:14:29:4d:85:4e:
6f:8c:bd:de:41:62:7a:2b:14:7e:fa:9a:c2:c5:46:
d3:6e:3d:85:af:c0:3c:72:27:07:ba:3c:ac:8c:d7:
29:f2:7f:b9:81:10:74:be:5c:01:bf:1b:72:41:7a:
11:b5:ed:42:d3:d1:0c:31:be:d8:35:f2:42:e1:b2:
35:7b:5a:78:5f:e0:e2:ec:fa:7c:ea:7e:20:39:40:
0c:42:74:5c:1e:b2:67:7c:10:97:0d:87:50:66:04:
cf:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:DF:43:56:AE:63:12:F7:AA:E9:C3:D7:D0:D4:3E:7A:E0:CE:1D:C8
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3136342e352e3235322e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.5.252.0/24
Signature Algorithm: sha256WithRSAEncryption
24:14:9f:fd:da:48:e5:65:f6:26:2a:55:ba:41:7b:1f:1a:61:
58:9a:69:db:81:e2:7b:c4:4b:2d:8a:80:85:1a:a7:cc:63:1e:
f9:cc:ea:a5:87:09:d4:8e:59:f2:68:a6:a0:ed:8f:6e:8c:6c:
ab:a6:c1:31:dc:74:c3:c7:84:ad:45:93:8e:54:54:5f:c8:c5:
cb:45:4a:7e:19:9f:05:1b:e8:59:7e:a1:6d:4f:c2:4f:c0:63:
eb:d2:0f:8b:9d:13:d4:e2:e1:98:cd:83:76:33:a6:78:22:6a:
b4:6e:61:ce:2e:3f:c8:49:2d:fe:35:a7:bf:8e:18:88:dc:f8:
8a:f9:2f:99:11:6d:b4:58:f2:21:0e:af:72:7d:3c:90:4a:c0:
65:4d:fa:26:b5:c0:05:74:a9:aa:dd:a2:b5:9e:28:e8:a4:f9:
17:f2:1d:0c:01:1a:b9:f6:db:bd:08:76:00:e7:8d:04:7d:a9:
48:f8:05:05:12:36:8f:6a:4c:ed:5b:55:15:a7:86:d8:59:56:
21:00:61:bb:5c:61:c6:37:14:8a:c8:28:4a:e7:f3:35:c1:56:
67:a3:32:5f:01:17:9c:8a:59:a0:33:84:99:bf:87:ea:ea:f2:
b8:4d:c2:bc:2f:2f:5e:34:a1:91:c4:c7:4c:43:22:8f:b3:8d:
af:61:c6:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 03:02:34 2026 by rpki-client