Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3136342e352e3235342e302f32332d3332203d3e203430303231.roa
File: 3136342e352e3235342e302f32332d3332203d3e203430303231.roa (raw, json)
Hash identifier: ryl8tmI2WQfwchaSnrzEGvAVCaVMqJ4bWTTeiirDOTo=
Subject key identifier: ED:26:75:BE:FF:63:A6:D7:9F:13:43:F8:49:81:44:FF:C6:1E:5E:6A
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0BDE606E012889CA33DBB6CFB25630BB845049BB
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3136342e352e3235342e302f32332d3332203d3e203430303231.roa
Signing time: Thu 13 Aug 2026 12:27:57 +0000
ROA not before: Thu 13 Aug 2026 12:22:57 +0000
ROA not after: Thu 12 Aug 2027 12:27:57 +0000
asID: 40021
IP address blocks: 164.5.254.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 12:31:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:de:60:6e:01:28:89:ca:33:db:b6:cf:b2:56:30:bb:84:50:49:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 13 12:22:57 2026 GMT
Not After : Aug 12 12:27:57 2027 GMT
Subject: CN=ED2675BEFF63A6D79F1343F8498144FFC61E5E6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e2:07:38:d4:43:e2:18:d5:cd:2b:68:e0:48:
1d:fa:f8:a4:61:98:c4:82:29:40:55:45:27:d8:05:
7b:e7:42:5e:b0:60:06:37:1b:bf:ea:4a:9f:71:c4:
a0:94:36:ae:d3:fe:9a:1c:f6:da:c5:5f:e3:b7:ec:
3e:84:70:3b:dd:31:8e:82:e1:c5:c9:7c:00:5e:6a:
9e:d1:11:f1:e5:f3:dc:2e:85:86:ae:34:41:2a:8e:
ea:4a:0d:dc:e7:92:48:29:f7:c9:58:5e:27:cd:fb:
7c:28:d6:75:5e:e0:bb:bc:55:25:83:d8:8a:36:4e:
16:8b:ce:4e:57:9f:42:2c:ea:49:16:1a:ed:ed:fc:
9e:d4:6a:43:b1:9f:12:49:95:b5:99:f4:18:17:04:
bf:5c:4f:50:22:e8:c6:da:3b:01:b2:bd:c5:ac:77:
81:ef:52:d1:08:90:04:a6:57:b2:d9:cd:f3:86:1a:
be:54:0f:7f:d1:f1:cb:5e:0c:68:25:a4:5e:4a:61:
51:ff:2c:55:89:9c:1c:7d:70:1f:77:01:03:88:50:
05:5f:65:33:ad:47:60:dd:9e:3e:67:8e:2b:71:32:
ee:e9:a5:99:7a:77:2b:65:a0:d6:93:17:4e:fe:75:
69:17:6b:ba:c2:e3:8d:60:c0:8c:7f:20:d0:f1:fc:
e7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:26:75:BE:FF:63:A6:D7:9F:13:43:F8:49:81:44:FF:C6:1E:5E:6A
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3136342e352e3235342e302f32332d3332203d3e203430303231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.5.254.0/23
Signature Algorithm: sha256WithRSAEncryption
54:6d:1c:17:30:c6:a0:54:5f:70:de:f8:e5:ee:e2:1e:aa:1e:
d7:10:b6:b5:b5:9c:64:d2:33:61:56:6f:3d:62:18:44:df:b3:
27:20:6d:2f:86:44:83:b4:8c:13:07:18:f6:c0:c3:e2:88:12:
ff:e5:89:a3:bc:e6:bb:b9:ab:55:c3:ed:db:61:70:a4:d1:b8:
00:88:30:a7:b9:77:1f:ab:7a:35:89:cb:f8:7a:47:74:70:6c:
0d:5f:ff:53:0e:ab:d9:9e:1b:5b:2f:b7:c4:e4:bd:8d:6b:d9:
99:36:8b:53:88:c8:82:a0:8c:37:84:1f:ba:59:24:ab:37:48:
9a:22:b7:16:ae:e2:6d:86:cf:ae:ba:aa:3d:9c:f5:be:fb:79:
d5:47:c6:8d:00:68:95:ce:af:51:b7:33:4e:ff:5e:3e:3f:0a:
ec:46:c9:5a:7b:3e:2c:5b:69:e6:1a:fb:70:42:a1:5b:51:99:
7b:92:72:5a:fe:2f:8f:6e:5c:b7:ea:fb:36:c5:6c:4d:99:bb:
2b:df:45:d2:fc:1f:55:33:98:42:22:dc:64:3e:38:0a:3d:b8:
5a:15:19:0c:b9:fd:4b:2e:b6:cf:65:26:b6:0b:36:32:5e:d4:
09:fe:db:67:67:57:08:da:cc:11:cd:5b:a6:93:2d:af:98:91:
51:c2:4e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 21:22:18 2026 by rpki-client