Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3136342e352e3235332e302f32342d3234203d3e203537313732.roa
File: 3136342e352e3235332e302f32342d3234203d3e203537313732.roa (raw, json)
Hash identifier: kmGzGVLfPRoOas8ukr0D9T17iTLN8bgpMaFJHdxk9as=
Subject key identifier: 37:C5:A4:C6:F0:CC:8E:83:5F:71:6C:60:52:30:D9:63:D3:DE:B9:6E
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3971779FBAF7E0D11DE22C4563731158C61A3F99
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3136342e352e3235332e302f32342d3234203d3e203537313732.roa
Signing time: Mon 19 Oct 2026 15:29:56 +0000
ROA not before: Mon 19 Oct 2026 15:24:56 +0000
ROA not after: Mon 18 Oct 2027 15:29:56 +0000
asID: 57172
IP address blocks: 164.5.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:71:77:9f:ba:f7:e0:d1:1d:e2:2c:45:63:73:11:58:c6:1a:3f:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 19 15:24:56 2026 GMT
Not After : Oct 18 15:29:56 2027 GMT
Subject: CN=37C5A4C6F0CC8E835F716C605230D963D3DEB96E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:18:5c:5d:ac:02:7c:d2:51:4a:a9:04:f1:06:
db:79:e7:dc:d6:4e:24:2c:50:0b:b3:28:a4:01:20:
a8:2a:22:4d:2b:d2:be:ea:f2:1a:b7:49:6f:f5:5c:
4c:89:f9:f5:88:86:9a:39:1c:23:0b:cf:1d:e8:28:
5e:c1:83:5b:9d:c8:7c:29:63:08:01:7c:59:70:bf:
96:fe:bc:46:6e:2d:fd:aa:5c:db:ef:c7:13:9c:5c:
5e:7e:45:21:1f:39:51:d2:5b:77:29:bd:8a:b4:4c:
4b:08:cf:bf:7e:3b:e1:a0:f3:20:92:40:ce:b8:7b:
d7:52:28:ba:4f:16:a9:2c:93:d2:af:9a:27:54:28:
63:a5:1d:87:c8:1f:23:de:fb:b0:09:65:13:e0:8a:
c0:92:6b:98:88:79:24:7b:d5:d9:ab:8d:d2:1d:e5:
3c:41:cd:74:74:9b:ce:95:42:84:99:71:14:2f:ee:
d9:52:b3:d8:88:e9:ee:59:24:70:94:a8:81:a6:02:
ac:37:59:9c:09:49:92:0e:23:cb:55:70:23:6b:aa:
89:71:39:e0:6e:ba:48:7b:41:3a:21:65:0b:c5:a3:
5c:3e:37:f6:b8:46:3d:d1:41:5a:49:8c:3f:d6:b9:
5b:2b:00:cd:27:ba:30:dc:30:1e:9b:62:86:fc:55:
5a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:C5:A4:C6:F0:CC:8E:83:5F:71:6C:60:52:30:D9:63:D3:DE:B9:6E
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3136342e352e3235332e302f32342d3234203d3e203537313732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.5.253.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:0d:c0:7b:b9:8f:d1:52:fc:dd:af:d5:c8:49:fe:75:c5:f7:
ef:e8:bd:40:e4:7d:eb:51:ec:53:86:aa:ad:b9:f6:91:18:12:
10:62:9b:fb:08:29:41:6d:ba:67:c3:5a:a7:49:c4:22:fc:84:
d5:ca:bc:76:5c:30:52:36:aa:2f:c8:ef:63:d0:1d:48:93:6f:
06:fa:9c:ef:44:59:4b:69:26:db:e7:3d:ef:ce:34:be:1e:16:
35:89:17:6e:72:c0:36:8c:2d:b5:bc:a4:49:2a:fa:0c:ce:7e:
1f:3d:9c:59:c7:fd:a2:66:3c:a5:f9:da:c3:d0:5b:b9:90:6b:
a5:55:98:36:fe:c9:9e:67:8d:0e:75:f1:a4:9a:32:fc:cb:10:
21:41:55:de:bf:30:b1:07:24:ff:25:33:48:5f:7b:1e:f8:92:
9e:b9:73:a0:2d:df:00:dd:ab:28:02:f5:fc:0d:14:2e:cb:bd:
bc:4d:4a:60:e2:42:c5:47:93:94:c2:b4:0f:78:d5:e1:b8:23:
7b:b0:7f:76:47:37:a0:c7:0e:c5:ac:c7:12:bc:33:94:b8:55:
90:34:ca:df:67:66:d9:7b:e0:73:93:e0:57:6e:94:e7:50:c7:
85:ad:79:f4:b1:f5:bb:b6:a9:d0:ab:17:21:5f:ea:bd:9a:06:
ec:7c:b8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:36:09 2026 by rpki-client