Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137362e3132362e38332e302f32342d3234203d3e20313336323538.roa
File: 3137362e3132362e38332e302f32342d3234203d3e20313336323538.roa (raw, json)
Hash identifier: kACeSNjJ2f/Z44WK+2kTLevDQfvXbhlByAT/K5Mmlho=
Subject key identifier: E9:AA:02:D9:F5:00:2D:2E:BB:E5:6D:8F:A3:02:9E:A3:20:AD:7D:CE
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3F9182D9A4F56E67DE764D1875ABC0B49218F19C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137362e3132362e38332e302f32342d3234203d3e20313336323538.roa
Signing time: Tue 14 Jul 2026 20:26:14 +0000
ROA not before: Tue 14 Jul 2026 20:21:14 +0000
ROA not after: Tue 13 Jul 2027 20:26:14 +0000
asID: 136258
IP address blocks: 176.126.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:91:82:d9:a4:f5:6e:67:de:76:4d:18:75:ab:c0:b4:92:18:f1:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 14 20:21:14 2026 GMT
Not After : Jul 13 20:26:14 2027 GMT
Subject: CN=E9AA02D9F5002D2EBBE56D8FA3029EA320AD7DCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:70:b9:13:48:eb:34:b7:84:82:84:b7:79:b3:
52:8a:40:f4:cb:67:82:8d:99:40:71:08:14:fd:75:
77:2e:9b:0c:be:47:92:b1:90:ff:37:bf:95:34:9b:
04:17:85:ed:de:f5:e2:fe:a2:33:49:c8:b2:c2:ab:
83:38:fb:16:59:fd:a4:36:44:fe:2a:dd:f7:73:11:
1f:d9:69:8d:36:8d:fd:b9:54:6c:ff:85:f3:2d:62:
d7:79:47:dc:1f:88:fa:42:26:c9:9e:23:6c:13:8a:
31:a1:42:06:11:cf:33:2c:ae:d3:9b:72:d5:c0:3f:
d5:fb:4f:7c:98:5a:f4:3d:9c:0a:f2:c5:4b:95:b3:
1e:65:33:e9:83:71:17:46:34:bb:af:3c:09:c8:c4:
66:dd:50:c9:9c:97:c3:36:92:b0:9d:1d:30:9f:e3:
11:91:18:9f:86:69:47:32:be:11:39:a9:9b:ff:b3:
a5:5d:5a:c1:bf:e1:3e:44:e4:cc:45:3e:cf:e7:65:
0c:88:cf:34:4c:7a:b3:8b:9f:e1:85:7d:8d:d9:f2:
4b:66:18:85:9c:21:bd:95:c8:25:4b:38:30:a3:82:
68:fe:97:69:bc:0a:77:3a:c6:b8:06:4b:82:e7:f8:
22:17:47:68:e8:32:5d:36:32:93:a8:ad:16:e6:8d:
b7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:AA:02:D9:F5:00:2D:2E:BB:E5:6D:8F:A3:02:9E:A3:20:AD:7D:CE
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137362e3132362e38332e302f32342d3234203d3e20313336323538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.83.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:43:6e:41:4d:7d:29:d9:66:b6:d5:ef:b9:e0:fb:91:5b:75:
f6:f6:5f:6f:33:e0:64:08:09:d7:94:98:be:ab:29:b0:e2:21:
5d:97:f2:0c:76:52:f6:55:84:3e:7d:c6:21:bb:00:ee:da:da:
8e:bc:ea:bf:79:a7:56:76:77:19:fe:a0:24:4a:13:52:0a:50:
a5:50:f9:cc:0f:91:5e:26:18:6d:73:b2:96:d6:2a:c2:3d:64:
5d:b0:06:fe:05:89:9c:93:b1:d7:ee:12:99:3e:f1:2b:09:7d:
ba:f2:bd:f3:82:c7:94:91:d9:54:55:94:e1:bd:6b:18:26:13:
a8:10:1c:5c:74:ab:33:a2:f4:d7:95:dd:9f:dd:14:90:45:93:
0f:4f:11:ef:9a:8f:36:f1:fd:e6:48:25:d6:f0:43:b1:77:c6:
ae:d1:26:e6:af:6a:69:06:81:ce:00:8d:a6:5b:a6:30:54:9f:
df:5c:a0:bb:eb:fb:25:4b:40:1c:61:68:c2:81:0e:cc:79:77:
57:0c:7d:a0:94:5e:e9:df:4c:3d:21:14:a2:dd:dc:16:01:80:
0a:9f:1f:01:e3:63:17:e5:fb:ee:ce:c8:08:a8:da:d8:8a:68:
24:41:60:b7:2c:11:91:79:bb:19:b3:4e:2c:ed:d1:a1:d9:81:
88:03:0a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:56:45 2026 by rpki-client