Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3136392e35382e302e302f31372d3137203d3e203531313637.roa
File: 3136392e35382e302e302f31372d3137203d3e203531313637.roa (raw, json)
Hash identifier: xhLZvUN/UWt9MLN5001ufNbS7kFgIY9aOhyGmuYd3fE=
Subject key identifier: 0A:C0:5D:2B:2A:E8:07:1D:80:A9:C6:C7:52:62:1F:64:74:10:29:8F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6C20FB99EA9A37A9FAF23795C0A72099874D389A
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3136392e35382e302e302f31372d3137203d3e203531313637.roa
Signing time: Fri 10 Jul 2026 08:58:40 +0000
ROA not before: Fri 10 Jul 2026 08:53:40 +0000
ROA not after: Fri 09 Jul 2027 08:58:40 +0000
asID: 51167
IP address blocks: 169.58.0.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:20:fb:99:ea:9a:37:a9:fa:f2:37:95:c0:a7:20:99:87:4d:38:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 10 08:53:40 2026 GMT
Not After : Jul 9 08:58:40 2027 GMT
Subject: CN=0AC05D2B2AE8071D80A9C6C752621F647410298F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:22:19:1f:bb:c4:47:de:7f:15:95:30:1c:38:
e9:e3:65:03:ad:a2:53:06:15:30:48:37:e0:3c:cc:
29:93:7e:13:7d:0f:03:c0:d8:42:c1:96:da:15:b4:
a7:ab:64:ca:5c:90:27:26:27:a2:89:4e:f2:f7:7c:
f3:4a:07:49:5c:1c:2d:34:2a:27:9c:30:73:f0:2a:
00:55:fd:99:2e:77:d8:71:79:3c:78:81:f9:b9:c2:
41:f9:3d:27:a1:3e:33:13:87:c5:d9:33:fb:b5:67:
33:61:ad:83:16:9a:3b:ef:e0:7d:3c:73:1f:02:85:
98:01:b1:58:99:95:12:38:2b:4d:e7:72:a9:f3:85:
6a:02:50:aa:85:af:b7:2b:31:6d:b3:a0:b0:44:e5:
75:99:e0:49:18:6e:6f:d2:53:3b:26:21:e4:25:97:
f9:e8:ed:68:12:a6:44:b0:d2:f9:7e:a5:b7:53:99:
dd:c1:7f:d1:52:93:9e:b3:6a:dd:11:61:a0:1e:7e:
3d:45:b3:dc:57:4e:07:27:d5:a7:df:5e:33:b3:d4:
75:6c:98:32:a2:42:36:fa:04:56:14:9a:45:03:18:
f5:b1:b1:1c:2e:73:70:d3:0c:96:21:66:af:a3:83:
01:a5:e8:d0:0c:d4:c5:f9:68:68:72:4f:94:66:7e:
ec:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C0:5D:2B:2A:E8:07:1D:80:A9:C6:C7:52:62:1F:64:74:10:29:8F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3136392e35382e302e302f31372d3137203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
169.58.0.0/17
Signature Algorithm: sha256WithRSAEncryption
02:38:f7:be:17:dd:78:e2:43:f8:fd:30:be:af:41:b3:f5:88:
42:e1:27:49:ae:fc:32:0f:52:90:75:73:60:44:fb:fa:3f:ba:
e1:d7:3c:be:33:f6:0c:f8:2f:c3:44:f7:a7:19:98:ee:e1:46:
ff:df:f5:dd:c3:32:d9:d6:ba:f0:0f:c4:08:26:bc:f2:47:fc:
25:cd:5b:bf:1e:f6:a1:a2:64:86:1d:e3:17:ba:82:23:c0:12:
ec:41:0c:dc:e1:86:d8:b2:3f:69:c7:36:df:cd:6a:bf:7a:1f:
36:f3:db:ec:bd:06:29:25:d3:b4:32:0e:34:41:c5:ee:bd:06:
1d:13:66:d0:72:48:93:d9:63:91:e3:87:a8:b5:81:f6:71:2c:
9f:d3:af:f7:fc:18:e8:56:b5:f8:77:6a:ad:a8:32:25:a4:cf:
9d:39:46:d2:30:d6:ba:72:f8:e9:6b:ea:e7:06:70:ef:a7:c6:
d8:54:c4:40:26:64:37:4a:0b:c9:3b:02:94:e7:72:6c:e5:22:
8b:9a:37:dc:21:09:4e:20:b7:8d:fc:5c:51:c2:8b:e8:cc:bd:
06:a0:eb:da:ab:a5:31:fb:d5:1f:11:1b:c9:39:51:9a:62:6a:
b8:b5:9f:55:fe:20:25:23:9e:71:9d:2c:94:ec:b6:ac:9c:54:
52:1b:04:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:53:51 2026 by rpki-client