Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3136392e34302e31332e302f32342d3234203d3e20323037333539.roa
File: 3136392e34302e31332e302f32342d3234203d3e20323037333539.roa (raw, json)
Hash identifier: CQKncaeVuD/KhtekLTRs4apgVLOFxyYtDNduTjJgdnI=
Subject key identifier: F6:3B:3E:7A:3E:88:F2:8F:51:C1:D0:3B:A7:B6:21:06:11:D0:DB:D7
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0DCF39D17EB816D9437C31CC3D4263D6258420ED
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3136392e34302e31332e302f32342d3234203d3e20323037333539.roa
Signing time: Mon 02 Mar 2026 11:43:39 +0000
ROA not before: Mon 02 Mar 2026 11:38:39 +0000
ROA not after: Mon 01 Mar 2027 11:43:39 +0000
asID: 207359
IP address blocks: 169.40.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:cf:39:d1:7e:b8:16:d9:43:7c:31:cc:3d:42:63:d6:25:84:20:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 2 11:38:39 2026 GMT
Not After : Mar 1 11:43:39 2027 GMT
Subject: CN=F63B3E7A3E88F28F51C1D03BA7B6210611D0DBD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:3c:26:0c:b5:c2:0f:af:21:8a:07:88:ed:d1:
42:2f:9b:a9:a0:74:39:8f:60:4f:1e:67:e0:5b:2d:
24:cf:b8:be:cd:3b:2c:c5:6a:84:c5:3d:cb:5e:b2:
ac:ee:08:7e:b6:cf:9f:7e:c5:61:ff:17:e5:49:83:
af:42:0a:e4:50:3e:f0:da:aa:a6:8e:2c:3d:f3:b0:
91:a1:bd:9b:90:65:0f:7e:4f:42:d3:ff:16:5e:7a:
23:50:98:cc:03:43:dd:65:04:18:8b:36:d0:57:c3:
0a:40:aa:16:0d:56:bf:7c:a5:75:60:85:d2:c0:51:
e5:df:6b:8b:5f:3f:7b:6e:ab:e8:aa:83:4e:65:2e:
db:c2:9c:cf:5c:05:44:a3:6f:73:44:5c:d0:74:ea:
27:94:15:3b:cf:39:e1:b3:16:b3:a4:2e:43:d6:ac:
05:6d:32:f3:dd:7a:22:8f:c3:92:d3:6c:a4:1f:73:
b1:e8:fa:a7:32:a9:a1:02:66:2c:5b:bc:0f:2a:45:
6c:eb:8b:a4:a8:20:8f:0a:b0:0b:79:19:b2:28:8b:
a7:b5:a1:1f:de:89:88:ee:52:4c:61:44:e6:c4:0e:
ee:98:d4:f9:03:3e:c9:24:32:63:29:41:9d:bf:55:
90:67:b2:31:87:b3:6d:a2:db:71:3f:dd:23:ab:43:
6d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:3B:3E:7A:3E:88:F2:8F:51:C1:D0:3B:A7:B6:21:06:11:D0:DB:D7
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3136392e34302e31332e302f32342d3234203d3e20323037333539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
169.40.13.0/24
Signature Algorithm: sha256WithRSAEncryption
33:3f:9b:6d:ff:40:9a:7e:de:38:37:df:24:b2:b0:03:f1:c2:
f0:95:36:e3:dd:aa:6e:39:79:d7:44:16:4c:61:41:22:67:1a:
5d:d7:07:66:b0:3c:89:ff:e6:e6:d3:b4:6b:b0:53:30:51:ee:
6d:a9:fc:8e:60:a8:e5:bb:ab:72:50:1e:62:56:19:54:51:50:
5a:93:64:48:b2:27:6a:83:a0:aa:3d:b9:68:9c:10:f7:43:e8:
5b:25:ca:42:d9:8d:d1:0e:e0:ac:84:fe:a3:28:48:94:29:84:
3c:56:66:a6:b1:c0:6d:7b:25:88:82:56:15:89:96:9f:6c:15:
d4:86:8b:8f:01:79:f4:95:8f:d0:dc:09:23:3b:33:33:07:ed:
5f:4c:42:d1:74:96:77:fc:4a:d3:57:d0:f1:3e:97:5a:4f:e1:
2c:60:66:81:ea:3d:3e:19:45:c6:53:0e:78:74:ef:ce:7f:e3:
33:88:a8:0a:71:32:1f:e0:c5:e1:60:1e:36:f4:86:06:c9:d4:
bb:6c:c8:27:01:f6:f8:14:71:b4:a3:2f:6c:2e:15:e1:f6:79:
8b:2c:75:f7:de:b1:a1:a8:be:96:f1:34:9f:21:94:c2:fd:7d:
64:57:9f:a7:2b:5e:8e:48:27:30:f1:f3:df:d1:dc:93:97:64:
df:d4:24:a8
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUDc850X64FtlDfDHMPUJj1iWEIO0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjAzMDIxMTM4MzlaFw0yNzAzMDExMTQzMzlaMDMxMTAvBgNV
BAMTKEY2M0IzRTdBM0U4OEYyOEY1MUMxRDAzQkE3QjYyMTA2MTFEMERCRDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpPCYMtcIPryGKB4jt0UIvm6mg
dDmPYE8eZ+BbLSTPuL7NOyzFaoTFPctesqzuCH62z59+xWH/F+VJg69CCuRQPvDa
qqaOLD3zsJGhvZuQZQ9+T0LT/xZeeiNQmMwDQ91lBBiLNtBXwwpAqhYNVr98pXVg
hdLAUeXfa4tfP3tuq+iqg05lLtvCnM9cBUSjb3NEXNB06ieUFTvPOeGzFrOkLkPW
rAVtMvPdeiKPw5LTbKQfc7Ho+qcyqaECZixbvA8qRWzri6SoII8KsAt5GbIoi6e1
oR/eiYjuUkxhRObEDu6Y1PkDPskkMmMpQZ2/VZBnsjGHs22i23E/3SOrQ20xAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQU9js+ej6I8o9RwdA7p7YhBhHQ29cwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNjM5MmUzNDMwMmUzMTMz
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDM3MzMzNTM5LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
qSgNMA0GCSqGSIb3DQEBCwUAA4IBAQAzP5tt/0Caft44N98ksrAD8cLwlTbj3apu
OXnXRBZMYUEiZxpd1wdmsDyJ/+bm07RrsFMwUe5tqfyOYKjlu6tyUB5iVhlUUVBa
k2RIsidqg6CqPblonBD3Q+hbJcpC2Y3RDuCshP6jKEiUKYQ8VmamscBteyWIglYV
iZafbBXUhouPAXn0lY/Q3AkjOzMzB+1fTELRdJZ3/ErTV9DxPpdaT+EsYGaB6j0+
GUXGUw54dO/Of+MziKgKcTIf4MXhYB429IYGydS7bMgnAfb4FHG0oy9sLhXh9nmL
LHX33rGhqL6W8TSfIZTC/X1kV5+nK16OSCcw8fPf0dyTl2Tf1CSo
-----END CERTIFICATE-----
Generated at Thu Mar 5 17:33:19 2026 by rpki-client