Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3136392e34302e3234302e302f32302d3234203d3e203232373733.roa
File: 3136392e34302e3234302e302f32302d3234203d3e203232373733.roa (raw, json)
Hash identifier: zIozWR3oAupHncp5/E+HfmJq1HpVyqA1qUpTgwsS7JQ=
Subject key identifier: 34:25:C1:D4:14:1F:74:CA:D8:DE:6E:25:E2:62:04:46:AE:89:A4:78
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7A37076DF922C4E0980D40C0052F053863CCE071
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3136392e34302e3234302e302f32302d3234203d3e203232373733.roa
Signing time: Wed 04 Feb 2026 06:34:50 +0000
ROA not before: Wed 04 Feb 2026 06:29:50 +0000
ROA not after: Wed 03 Feb 2027 06:34:50 +0000
asID: 22773
IP address blocks: 169.40.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Feb 2026 14:43:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:37:07:6d:f9:22:c4:e0:98:0d:40:c0:05:2f:05:38:63:cc:e0:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 4 06:29:50 2026 GMT
Not After : Feb 3 06:34:50 2027 GMT
Subject: CN=3425C1D4141F74CAD8DE6E25E2620446AE89A478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:63:b8:48:02:05:8d:ba:40:b4:a5:a6:d4:f8:
c0:94:5e:fd:a8:a1:27:35:b6:a3:52:f8:9f:ef:1c:
90:07:34:cb:b0:d5:2b:0e:cc:0e:06:0f:8b:70:05:
0f:94:01:8c:00:6e:59:7f:a7:8f:0d:da:c1:40:9e:
73:2c:57:9a:63:dc:12:07:70:ed:bb:43:a7:92:f0:
3a:07:8f:c4:fb:68:73:46:4c:b9:80:05:e7:36:87:
51:a7:d2:9f:f6:4a:fb:3b:48:23:71:a5:3b:83:25:
1e:eb:1d:6d:fe:80:78:9c:c2:7b:3b:ce:d8:17:4c:
dc:b2:ae:f4:34:ae:c0:42:ee:18:91:0a:b9:ca:a1:
95:63:e6:e7:db:f6:82:50:b4:f4:98:3b:38:c5:cc:
52:18:ba:fc:d1:ad:56:94:7b:08:50:43:44:08:e7:
a3:94:f4:bc:11:af:55:d1:f9:78:a1:8f:f0:08:b9:
6a:c3:ec:8e:00:ed:85:d5:83:f5:0f:37:4b:40:6d:
e7:eb:bb:cf:cd:9e:aa:ae:d2:54:d8:ea:24:97:cf:
c3:06:cd:44:de:06:24:6d:11:b5:e9:58:25:d7:80:
5a:f7:ec:09:76:e7:cc:a5:55:32:38:04:94:8b:a7:
ab:06:e0:20:c2:27:6f:2b:9a:ab:24:75:a8:60:2d:
04:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:25:C1:D4:14:1F:74:CA:D8:DE:6E:25:E2:62:04:46:AE:89:A4:78
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3136392e34302e3234302e302f32302d3234203d3e203232373733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
169.40.240.0/20
Signature Algorithm: sha256WithRSAEncryption
1b:ca:27:ed:3a:fb:a0:b3:41:e7:2f:e7:b2:b0:3e:29:98:b4:
cf:da:54:a8:c6:a4:68:b6:7b:f5:c4:b1:2d:dd:d5:e3:0b:87:
70:73:ea:d5:77:d2:1c:38:05:f3:bd:8e:88:f1:76:1b:8c:94:
47:69:0e:72:80:49:07:7c:ca:7a:58:30:4c:73:1f:a8:85:f2:
b5:53:e6:1a:8b:26:53:22:e1:c0:f2:cd:a5:f8:f9:4c:e5:7e:
56:ca:08:89:cb:df:9a:61:e2:10:49:65:27:50:16:d5:77:94:
ba:d7:85:02:33:07:76:d2:2e:d0:85:5c:d5:c1:87:ef:e1:c1:
f7:51:38:38:d1:a9:52:43:72:f5:e0:cb:9a:09:08:8b:0e:e1:
5d:8a:54:07:40:06:5f:f8:fc:3c:74:70:34:b3:6e:b0:df:01:
88:60:57:c2:e9:a1:2a:8c:ac:05:03:2d:2a:88:58:de:41:e9:
c8:01:a3:ba:67:c1:66:e6:55:4f:95:14:68:de:ce:5b:c7:5c:
09:d1:df:03:9b:c8:ca:86:15:0a:63:3e:e8:fe:6a:54:c4:af:
69:14:26:7c:ed:55:77:db:f6:3c:0f:ea:c4:1f:6a:06:8d:3d:
cd:e5:ab:ab:25:54:17:63:f7:8d:78:7f:64:4a:3b:25:fe:53:
92:e1:bc:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 06:55:29 2026 by rpki-client