Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3136392e34302e31322e302f32342d3234203d3e20323037333539.roa
File: 3136392e34302e31322e302f32342d3234203d3e20323037333539.roa (raw, json)
Hash identifier: +36YWHqI0AyJeVCUhP3Ot1EUupeh4z6plQES4dOlNd4=
Subject key identifier: 5D:DF:5B:BE:43:6A:F4:6F:F4:4A:00:69:A6:FD:6F:2A:4D:C5:57:D1
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 63A7BA67CF6F3BAB1F92F17887A07C1A15BF504B
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3136392e34302e31322e302f32342d3234203d3e20323037333539.roa
Signing time: Mon 02 Mar 2026 11:43:31 +0000
ROA not before: Mon 02 Mar 2026 11:38:31 +0000
ROA not after: Mon 01 Mar 2027 11:43:31 +0000
asID: 207359
IP address blocks: 169.40.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 09:19:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:a7:ba:67:cf:6f:3b:ab:1f:92:f1:78:87:a0:7c:1a:15:bf:50:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 2 11:38:31 2026 GMT
Not After : Mar 1 11:43:31 2027 GMT
Subject: CN=5DDF5BBE436AF46FF44A0069A6FD6F2A4DC557D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5d:9c:b7:ad:8b:80:58:5e:11:fe:ce:a1:c7:
dd:db:6b:5b:8c:df:cb:7a:0b:c6:28:23:12:c3:b0:
77:8b:80:2e:12:d3:bb:b7:ab:11:83:10:da:02:4e:
60:48:e0:2e:b4:1e:71:2e:fc:d6:9e:65:d9:27:8d:
59:17:7b:ee:08:24:91:67:c4:74:0f:79:af:d3:d7:
52:3e:63:de:2e:7c:9c:09:e8:25:77:3e:98:8a:ea:
36:4b:9a:4d:b3:78:e6:0f:b5:92:db:0c:d7:b3:21:
b1:c4:34:54:9e:3d:00:e0:98:69:7c:71:8c:8e:0d:
22:d5:cd:82:f8:00:5c:89:8f:2c:17:83:ed:8f:a0:
14:ba:0c:8c:08:91:17:3a:91:0a:14:bd:d2:39:5c:
16:3b:eb:e4:29:65:d8:47:43:74:a3:c6:e1:5a:b5:
a5:ee:1e:f6:0b:49:0f:c7:52:16:69:72:c2:26:ac:
7b:5d:f8:b0:ad:8a:01:44:a6:2e:14:ff:43:bb:17:
d7:78:ed:17:1f:db:24:70:1b:60:17:c6:c1:fe:33:
16:d1:af:f5:e9:f1:29:55:2c:c7:3e:84:d1:56:54:
c7:dc:53:07:bf:d9:2e:0c:f0:e6:3f:bc:9e:55:44:
1e:6e:18:fc:73:3d:b1:be:87:fc:4a:54:d3:c8:c9:
15:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:DF:5B:BE:43:6A:F4:6F:F4:4A:00:69:A6:FD:6F:2A:4D:C5:57:D1
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3136392e34302e31322e302f32342d3234203d3e20323037333539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
169.40.12.0/24
Signature Algorithm: sha256WithRSAEncryption
39:ee:4d:a7:1c:aa:cf:67:0e:4c:e5:24:b6:52:fb:f8:9b:ac:
29:eb:da:6a:21:25:b9:80:2a:b5:40:4d:d2:6f:5e:01:94:8a:
ef:86:93:b1:dd:d9:ba:42:f8:63:c3:f1:f7:47:91:7f:bf:bf:
fd:8d:c3:b8:58:1a:1a:16:e4:31:3c:f3:dd:e8:b8:c4:34:f9:
a6:40:18:2e:8e:68:42:a1:cb:88:d4:f4:22:69:54:4c:d3:2b:
8d:17:9e:82:8e:7e:53:6c:f2:43:e0:6c:58:70:a1:8f:fe:9c:
19:e3:92:ae:c6:ae:df:1f:54:22:ee:66:8a:30:79:4d:a8:f9:
91:28:b6:f6:2f:e9:f8:3b:78:c6:09:f8:b0:64:fe:34:4e:00:
a6:07:d2:0d:5f:ce:04:9f:07:31:16:16:f0:30:0a:42:e4:42:
f7:d7:73:7c:0e:a6:f0:3a:32:a8:36:9c:07:b0:1f:5c:3e:33:
49:80:bb:2a:44:a8:87:80:81:18:c5:a0:51:25:d0:73:c6:0d:
02:fd:52:bb:a4:75:67:d9:0a:bf:e8:72:dc:af:2d:b6:6d:1a:
3c:77:68:77:e7:42:a0:db:39:de:ae:4e:b5:17:ef:06:07:2a:
12:e0:46:73:2d:65:b1:60:1c:eb:55:7d:7a:1e:c9:84:f5:d7:
9a:fe:15:7c
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUY6e6Z89vO6sfkvF4h6B8GhW/UEswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjAzMDIxMTM4MzFaFw0yNzAzMDExMTQzMzFaMDMxMTAvBgNV
BAMTKDVEREY1QkJFNDM2QUY0NkZGNDRBMDA2OUE2RkQ2RjJBNERDNTU3RDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxXZy3rYuAWF4R/s6hx93ba1uM
38t6C8YoIxLDsHeLgC4S07u3qxGDENoCTmBI4C60HnEu/NaeZdknjVkXe+4IJJFn
xHQPea/T11I+Y94ufJwJ6CV3PpiK6jZLmk2zeOYPtZLbDNezIbHENFSePQDgmGl8
cYyODSLVzYL4AFyJjywXg+2PoBS6DIwIkRc6kQoUvdI5XBY76+QpZdhHQ3SjxuFa
taXuHvYLSQ/HUhZpcsImrHtd+LCtigFEpi4U/0O7F9d47Rcf2yRwG2AXxsH+MxbR
r/Xp8SlVLMc+hNFWVMfcUwe/2S4M8OY/vJ5VRB5uGPxzPbG+h/xKVNPIyRXpAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUXd9bvkNq9G/0SgBppv1vKk3FV9EwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNjM5MmUzNDMwMmUzMTMy
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDM3MzMzNTM5LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
qSgMMA0GCSqGSIb3DQEBCwUAA4IBAQA57k2nHKrPZw5M5SS2Uvv4m6wp69pqISW5
gCq1QE3Sb14BlIrvhpOx3dm6Qvhjw/H3R5F/v7/9jcO4WBoaFuQxPPPd6LjENPmm
QBgujmhCocuI1PQiaVRM0yuNF56Cjn5TbPJD4GxYcKGP/pwZ45Kuxq7fH1Qi7maK
MHlNqPmRKLb2L+n4O3jGCfiwZP40TgCmB9INX84EnwcxFhbwMApC5EL313N8Dqbw
OjKoNpwHsB9cPjNJgLsqRKiHgIEYxaBRJdBzxg0C/VK7pHVn2Qq/6HLcry22bRo8
d2h350Kg2znerk61F+8GByoS4EZzLWWxYBzrVX16HsmE9dea/hV8
-----END CERTIFICATE-----
Generated at Thu Mar 5 17:33:18 2026 by rpki-client