Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137362e35332e3137382e302f32342d3234203d3e20323132323338.roa
File: 3137362e35332e3137382e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: s2x6JHOE3xPSkqFjw32KZtPy5wbt8Zm/EFRdzIQ9bDo=
Subject key identifier: 79:47:8D:02:B3:CF:05:BB:E5:E1:8C:37:5C:F8:9F:88:4B:AB:2B:51
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 25570A2296979B65F93775E44CB54D142A5067C5
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137362e35332e3137382e302f32342d3234203d3e20323132323338.roa
Signing time: Thu 10 Sep 2026 09:28:44 +0000
ROA not before: Thu 10 Sep 2026 09:23:44 +0000
ROA not after: Thu 09 Sep 2027 09:28:44 +0000
asID: 212238
IP address blocks: 176.53.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:57:0a:22:96:97:9b:65:f9:37:75:e4:4c:b5:4d:14:2a:50:67:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 10 09:23:44 2026 GMT
Not After : Sep 9 09:28:44 2027 GMT
Subject: CN=79478D02B3CF05BBE5E18C375CF89F884BAB2B51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:24:15:10:b0:2b:05:21:cf:7d:1b:d6:a2:cd:
4c:1b:c0:e6:b0:8f:ff:44:86:97:56:52:d7:3c:d6:
6d:44:4e:5f:3e:a4:9e:6f:d1:88:6d:1f:52:8e:7b:
59:d3:ae:63:e5:31:d7:65:53:5f:48:30:c3:d1:df:
af:ca:88:75:36:8f:e2:1e:29:3a:07:dd:28:54:1c:
4f:16:3b:82:76:44:f3:21:c0:ff:04:56:a9:c4:15:
84:a5:0b:4c:09:6a:a0:b8:fb:de:46:2f:1c:65:e6:
68:17:4a:6d:e3:04:83:13:8d:97:5e:af:fb:8d:c3:
79:be:ba:d5:56:3e:67:bb:3e:a7:a1:45:79:69:eb:
02:3e:df:97:59:dc:a1:67:71:24:f9:45:30:8e:1a:
36:92:de:e8:7a:66:34:d1:ee:bd:e2:90:d7:c6:c5:
a5:8e:d4:0c:91:09:15:44:98:ad:e9:b2:c2:37:8a:
4d:16:db:e0:2c:8e:7c:c2:bd:f2:29:86:bd:ca:ed:
eb:7a:e3:ee:f3:30:94:3b:28:b1:9a:86:15:e6:47:
ab:c7:fd:54:22:0c:62:8e:30:29:0e:48:ec:c6:ae:
15:43:19:ec:d3:d4:dd:af:0c:94:5f:6a:6e:6b:33:
0d:fa:bd:d4:64:64:48:d0:ec:50:ae:c3:2d:62:6b:
33:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:47:8D:02:B3:CF:05:BB:E5:E1:8C:37:5C:F8:9F:88:4B:AB:2B:51
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137362e35332e3137382e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.53.178.0/24
Signature Algorithm: sha256WithRSAEncryption
28:ee:94:47:54:70:67:df:6f:31:c8:f8:83:50:f7:6e:d9:a5:
d0:9c:ff:ee:ee:d2:6d:6c:fe:1b:a1:0c:5c:40:81:91:78:35:
41:49:0f:70:78:55:ea:02:1c:0c:c3:b8:ab:ef:8e:55:fc:fa:
b2:74:af:eb:cc:61:de:98:ac:e4:52:04:02:a6:b8:c2:45:b1:
ae:07:06:5d:01:38:3d:6b:ea:6e:30:df:c1:0f:ad:f9:69:6d:
d9:e0:45:21:15:8b:91:a9:4b:f6:00:1d:2d:ce:be:b3:82:2b:
1c:a1:b3:01:62:68:37:87:30:a9:d2:67:ea:fa:18:af:82:96:
bd:19:c3:0f:9f:dc:7c:98:93:01:58:47:55:63:bf:f1:f0:89:
5b:eb:d2:b1:55:dd:11:66:fb:f8:13:f1:75:10:20:3a:7b:bd:
a6:bc:0d:97:d1:24:17:b4:e3:86:25:49:3e:6b:cf:58:4c:48:
01:14:76:cc:33:79:7b:4f:36:7a:92:9c:1a:cb:af:9e:1a:47:
c8:bc:c3:9e:c6:f1:f0:cc:ab:0e:1a:d0:3b:95:cf:32:1e:a7:
52:de:67:c7:21:07:bc:9f:04:6e:a9:50:52:84:04:b4:01:a9:
d8:e6:eb:79:be:ab:8c:4f:57:b2:5a:fc:96:da:b0:aa:0b:21:
21:c8:c9:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 19:06:58 2026 by rpki-client