Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137362e35332e3137392e302f32342d3234203d3e20323132323338.roa
File: 3137362e35332e3137392e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: hprbkz1cBldUFXAsMJU0mcWUJ4bpvJvP+Lq3P0IpqEA=
Subject key identifier: 62:FF:9D:98:05:00:21:B3:B1:6A:25:7C:EE:EF:19:4A:DE:54:A6:66
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 133725DB39F86C24FFBE72CD34111D0DB09755CF
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137362e35332e3137392e302f32342d3234203d3e20323132323338.roa
Signing time: Thu 10 Sep 2026 09:28:40 +0000
ROA not before: Thu 10 Sep 2026 09:23:40 +0000
ROA not after: Thu 09 Sep 2027 09:28:40 +0000
asID: 212238
IP address blocks: 176.53.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:37:25:db:39:f8:6c:24:ff:be:72:cd:34:11:1d:0d:b0:97:55:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 10 09:23:40 2026 GMT
Not After : Sep 9 09:28:40 2027 GMT
Subject: CN=62FF9D98050021B3B16A257CEEEF194ADE54A666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bd:83:29:bf:82:00:26:be:a2:49:24:3e:68:
ae:98:04:df:ba:09:ff:a6:a3:0e:fd:93:61:66:6a:
1d:c2:9b:d4:ba:00:2a:d3:53:d8:f7:7a:84:44:dc:
f4:8d:9c:13:3d:61:1f:28:e8:51:96:b6:c6:dd:4a:
73:61:54:b5:26:52:f8:ea:fa:f1:be:ab:ee:c2:5f:
92:67:f3:c2:74:19:11:94:9c:ba:e3:ca:e1:05:1a:
a0:19:74:2d:bc:43:f1:3f:18:c9:60:c9:af:09:28:
85:be:ff:d6:a3:24:f5:20:e0:b8:0c:2f:52:ee:29:
60:53:dd:48:af:72:a0:af:05:da:03:f5:b7:e7:cf:
d6:2c:0b:a7:94:ac:8a:7a:bd:26:e0:a6:a2:68:f0:
30:a5:aa:19:70:6f:d4:40:8a:a0:4a:1f:bf:9a:b5:
da:6e:29:a4:f8:64:6e:64:3f:60:45:71:13:ce:53:
d4:ef:85:48:26:b6:fb:e2:83:a0:94:06:6c:05:de:
c8:e8:38:97:42:f5:ba:2a:42:18:e5:61:75:27:3f:
7b:87:fa:a6:a4:df:65:fa:07:ab:93:ab:9f:74:6a:
e0:5f:38:32:ca:85:ba:2a:53:d0:40:e9:21:0b:fd:
b8:5a:a3:61:bd:3a:59:ff:51:75:d4:90:fa:12:bf:
0c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:FF:9D:98:05:00:21:B3:B1:6A:25:7C:EE:EF:19:4A:DE:54:A6:66
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137362e35332e3137392e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.53.179.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:e2:ee:e1:b3:38:33:8d:80:9b:6b:63:b0:bf:3e:26:c1:07:
d8:0c:d7:f2:4c:9e:57:7d:76:78:02:53:a4:7b:8c:c0:a3:9a:
7a:bd:27:06:68:de:4d:b6:1f:e7:f1:d3:0c:55:43:ed:4f:6e:
a9:08:1a:4b:ca:ab:3e:e6:57:04:43:c3:ab:03:e6:03:40:fa:
d9:17:c5:44:56:eb:be:de:d5:31:30:0e:2a:ee:d2:f0:b9:9d:
4c:a0:43:4e:04:1a:68:02:be:55:07:f5:85:36:bf:81:d8:d1:
ba:eb:d8:6f:ec:b6:9f:8f:63:6a:9e:9f:e0:e2:9f:27:fb:6d:
d2:e2:ab:ef:a1:08:f7:bc:ce:3b:b4:8d:5b:c6:12:0b:be:09:
1f:20:f3:ea:f2:96:83:06:94:23:27:3e:c7:c6:d0:32:32:38:
19:55:d5:d6:05:f8:c7:80:98:35:88:be:fb:e7:5e:37:39:5f:
77:86:e8:96:4b:fd:86:0a:d8:80:d2:87:1b:4b:a2:47:d3:3d:
91:9f:7c:f6:e4:91:b0:f6:4c:81:9d:76:c5:92:8f:66:1c:62:
ce:6f:a5:5e:10:ac:c1:03:a8:ca:55:85:7d:8c:59:0e:06:70:
49:50:bb:84:00:08:fa:26:d0:8e:07:05:b8:41:e3:ff:77:a8:
c1:fc:32:0f
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUEzcl2zn4bCT/vnLNNBEdDbCXVc8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA5MTAwOTIzNDBaFw0yNzA5MDkwOTI4NDBaMDMxMTAvBgNV
BAMTKDYyRkY5RDk4MDUwMDIxQjNCMTZBMjU3Q0VFRUYxOTRBREU1NEE2NjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdvYMpv4IAJr6iSSQ+aK6YBN+6
Cf+mow79k2Fmah3Cm9S6ACrTU9j3eoRE3PSNnBM9YR8o6FGWtsbdSnNhVLUmUvjq
+vG+q+7CX5Jn88J0GRGUnLrjyuEFGqAZdC28Q/E/GMlgya8JKIW+/9ajJPUg4LgM
L1LuKWBT3UivcqCvBdoD9bfnz9YsC6eUrIp6vSbgpqJo8DClqhlwb9RAiqBKH7+a
tdpuKaT4ZG5kP2BFcRPOU9TvhUgmtvvig6CUBmwF3sjoOJdC9boqQhjlYXUnP3uH
+qak32X6B6uTq590auBfODLKhboqU9BA6SEL/bhao2G9Oln/UXXUkPoSvwwxAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUYv+dmAUAIbOxaiV87u8ZSt5UpmYwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNzM2MmUzNTMzMmUzMTM3
MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzIzMjMzMzgucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACwNbMwDQYJKoZIhvcNAQELBQADggEBAI/i7uGzODONgJtrY7C/PibBB9gM1/JM
nld9dngCU6R7jMCjmnq9JwZo3k22H+fx0wxVQ+1PbqkIGkvKqz7mVwRDw6sD5gNA
+tkXxURW677e1TEwDiru0vC5nUygQ04EGmgCvlUH9YU2v4HY0brr2G/stp+PY2qe
n+Dinyf7bdLiq++hCPe8zju0jVvGEgu+CR8g8+ryloMGlCMnPsfG0DIyOBlV1dYF
+MeAmDWIvvvnXjc5X3eG6JZL/YYK2IDShxtLokfTPZGffPbkkbD2TIGddsWSj2Yc
Ys5vpV4QrMEDqMpVhX2MWQ4GcElQu4QACPom0I4HBbhB4/93qMH8Mg8=
-----END CERTIFICATE-----
Generated at Fri Sep 18 18:09:26 2026 by rpki-client