Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3136392e35382e3132382e302f31372d3137203d3e203531313637.roa
File: 3136392e35382e3132382e302f31372d3137203d3e203531313637.roa (raw, json)
Hash identifier: V8H3rd3/5zPZ65E+yity1mwO0B4ZSmRozn3Urh4edeg=
Subject key identifier: B1:C8:4A:C9:E2:F7:36:A5:29:D3:7D:9B:DC:14:82:1C:AC:B3:B5:95
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5A4A120571076E1CF0C70DC3DAE117C5872A5A96
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3136392e35382e3132382e302f31372d3137203d3e203531313637.roa
Signing time: Fri 10 Jul 2026 08:59:15 +0000
ROA not before: Fri 10 Jul 2026 08:54:15 +0000
ROA not after: Fri 09 Jul 2027 08:59:15 +0000
asID: 51167
IP address blocks: 169.58.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:4a:12:05:71:07:6e:1c:f0:c7:0d:c3:da:e1:17:c5:87:2a:5a:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 10 08:54:15 2026 GMT
Not After : Jul 9 08:59:15 2027 GMT
Subject: CN=B1C84AC9E2F736A529D37D9BDC14821CACB3B595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f7:c1:54:61:f2:e6:70:ed:ee:d6:a2:b0:94:
e2:3f:7f:f2:40:d3:ce:03:cc:6c:b8:38:2a:c7:0e:
d1:c4:70:ed:62:dc:60:04:87:24:97:d0:18:a0:f2:
b9:16:79:e3:5d:56:bf:3e:12:a2:c7:e3:8e:6d:a8:
d5:ea:97:1d:4d:d5:3a:83:1f:95:75:bb:32:66:a7:
c0:8f:5a:bb:74:ed:d5:ee:14:be:e4:47:d6:c8:2a:
8f:a0:be:71:28:99:44:43:ad:62:84:dd:ad:6a:e7:
f2:a3:71:3f:57:b7:3a:90:78:81:a4:29:7b:16:8a:
f9:64:01:ff:11:1c:6d:c9:d0:c7:3a:86:4b:8f:dd:
12:3b:ff:af:a0:57:eb:57:fc:71:b8:7b:dd:5b:ea:
4c:a0:a4:2c:3c:81:7c:a6:95:f5:1a:67:22:62:5b:
39:08:91:3f:44:ec:e3:e6:83:84:03:a0:4e:56:40:
85:5b:1a:78:2a:4b:35:fd:3d:22:4c:a1:47:14:9b:
20:ec:90:2e:74:18:d1:da:13:b2:0c:65:7e:c5:2a:
09:4a:fb:a4:98:4a:6a:92:4e:00:9e:c4:5a:54:d3:
59:48:f3:b6:8a:10:cf:8d:08:8f:c9:a3:c7:f1:b6:
c0:f4:19:dd:75:2c:ad:59:77:e2:7b:f2:e2:02:e4:
6e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C8:4A:C9:E2:F7:36:A5:29:D3:7D:9B:DC:14:82:1C:AC:B3:B5:95
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3136392e35382e3132382e302f31372d3137203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
169.58.128.0/17
Signature Algorithm: sha256WithRSAEncryption
53:bc:08:e1:ae:d4:ec:d7:45:96:6a:be:51:19:b2:36:dd:47:
06:9a:13:18:b6:4e:95:98:4f:1c:68:47:06:64:a2:f6:c9:0c:
e4:79:49:87:c4:96:b1:49:bc:fd:c2:b8:9a:25:52:61:99:ec:
3a:93:23:e2:c6:bd:64:fd:6c:0b:88:2b:b0:19:4d:e2:5e:80:
3d:57:48:cc:88:91:17:dc:e4:da:85:af:f5:dd:8b:1e:56:8b:
f0:c2:77:48:b4:84:68:05:98:0d:fd:39:ad:2c:ed:93:a6:11:
87:e2:81:c1:f2:b9:02:48:b8:f1:4c:ff:66:af:9a:d5:88:b3:
2e:9e:1d:41:1c:20:b7:42:8a:68:3d:4f:90:f0:5a:f0:69:fe:
46:8e:57:f2:b9:a2:6e:9b:4e:03:f2:d7:c5:cd:83:a4:09:e0:
84:3b:24:e0:7d:92:2d:fb:31:28:26:9a:2d:ea:19:b4:d7:22:
1e:e5:1b:36:43:ad:24:55:f6:8e:fe:f1:ac:25:b4:1e:f8:8f:
86:40:ec:2e:33:61:1a:62:83:20:ba:59:23:dc:9d:a2:34:78:
4d:a5:2e:78:6d:36:6b:65:88:9f:4f:04:ef:86:e1:1c:47:87:
f4:d7:b2:b9:bf:94:64:92:1f:b6:3e:fd:bd:41:66:66:60:34:
b0:95:77:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:53:51 2026 by rpki-client