Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137362e35332e3137372e302f32342d3234203d3e20323132323338.roa
File: 3137362e35332e3137372e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: p++DNp8rz1ajYPg/6l/KcdjqwIZ36nYocziij0JyJdw=
Subject key identifier: A9:7C:E6:E1:A7:4E:01:4B:3B:2F:4B:16:82:52:1B:ED:24:2D:F3:C8
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 41848809CE8088E295BDE5AA982DCAEA45B9C641
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137362e35332e3137372e302f32342d3234203d3e20323132323338.roa
Signing time: Thu 30 Jul 2026 21:27:27 +0000
ROA not before: Thu 30 Jul 2026 21:22:27 +0000
ROA not after: Thu 29 Jul 2027 21:27:27 +0000
asID: 212238
IP address blocks: 176.53.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:84:88:09:ce:80:88:e2:95:bd:e5:aa:98:2d:ca:ea:45:b9:c6:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 30 21:22:27 2026 GMT
Not After : Jul 29 21:27:27 2027 GMT
Subject: CN=A97CE6E1A74E014B3B2F4B1682521BED242DF3C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d3:d8:a4:54:43:0b:2c:22:4e:e1:bd:a8:bf:
7a:f1:60:f2:01:31:7d:d9:fd:f1:6c:e9:33:4c:5b:
00:1a:a0:70:7d:9d:02:cf:1e:0a:1e:d1:d4:03:26:
68:dc:40:11:f1:39:14:bb:5c:53:00:e8:d7:0e:69:
73:c7:f9:aa:af:da:68:6a:a6:d8:bd:a6:86:f2:c7:
70:23:a3:59:ea:40:e2:cd:33:44:24:0d:2f:bb:d4:
eb:e6:c2:4f:21:27:eb:d7:43:5c:25:49:bd:b6:e0:
bf:84:c9:95:d0:73:38:da:76:32:8a:d1:7a:4d:66:
6d:6e:48:3c:b8:33:94:df:68:94:c5:fd:c7:7f:d9:
d1:85:b2:dd:10:28:07:27:eb:80:5c:ec:67:00:0d:
6a:b1:d4:5c:26:c5:f3:c0:98:1e:e4:a1:05:2f:c7:
2f:d2:73:6c:9b:63:a0:8f:8f:83:9a:8e:19:b4:b5:
06:cf:b0:bb:cd:90:34:f8:6c:fb:7f:87:84:85:12:
b5:5c:09:b3:29:65:6d:6e:fb:ac:ee:33:05:90:c2:
57:e1:51:6f:11:ec:10:7f:3d:32:64:bb:b6:21:04:
2a:08:ce:f3:2c:aa:6b:2a:04:15:12:df:6f:f8:b0:
c4:fb:eb:8c:8b:df:1d:ba:1d:00:fa:17:4a:af:ab:
64:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:7C:E6:E1:A7:4E:01:4B:3B:2F:4B:16:82:52:1B:ED:24:2D:F3:C8
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137362e35332e3137372e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.53.177.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:77:e8:51:95:73:ac:17:b6:81:24:51:63:cd:86:9e:fb:42:
a9:d4:03:b7:54:e7:d4:57:2c:75:3d:b1:73:0b:97:9d:ad:ee:
50:0e:5d:63:40:f9:c9:ad:d7:c0:06:0e:2a:d5:75:e0:bd:8b:
7a:a6:a8:5c:91:7d:1c:68:95:31:a2:d9:f3:9f:d0:23:68:5f:
07:14:ce:9b:3b:4b:f5:d9:38:52:99:48:1f:8b:25:9c:6a:f1:
7c:36:97:18:7e:ac:db:c3:2c:f1:04:5a:19:47:17:88:2b:c9:
67:ce:1d:7a:6f:be:fe:4e:8f:6a:c1:88:78:dd:04:cb:e7:0b:
1c:cf:f9:a1:8c:9f:0f:47:2a:24:22:a9:8b:08:4d:ac:a7:d8:
ca:b3:e1:1b:9e:ec:98:e4:d7:3d:0b:ab:50:3b:9b:ee:90:e9:
e8:e2:43:5d:3f:72:d2:6f:d6:80:05:43:e0:56:3b:ad:35:77:
54:1c:19:c4:7f:ba:b1:74:c3:67:1a:e9:37:20:30:da:49:f4:
61:52:fd:ff:18:a5:83:18:96:0d:51:37:60:6a:3b:53:05:e3:
53:7c:06:19:67:38:ac:77:9f:d1:6a:d0:75:9e:a6:9b:39:a6:
dc:94:4e:d7:19:b3:bd:b4:8d:2a:f4:6f:9a:ad:03:f2:03:86:
c6:68:56:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 19:08:24 2026 by rpki-client