Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137382e3133322e3130362e302f32342d3234203d3e20323132323338.roa
File: 3137382e3133322e3130362e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: yBAtK/VSddIkmESjn2i3L54oHubyM7wNmwwJRsoeeQE=
Subject key identifier: B1:96:F0:FF:6A:72:14:BE:AA:27:4C:F0:91:D5:AB:02:21:B0:85:8C
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 526621A95804DE2B734C6D855A358A63921ABC74
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137382e3133322e3130362e302f32342d3234203d3e20323132323338.roa
Signing time: Thu 09 Oct 2025 09:07:19 +0000
ROA not before: Thu 09 Oct 2025 09:02:19 +0000
ROA not after: Thu 08 Oct 2026 09:07:19 +0000
asID: 212238
IP address blocks: 178.132.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 00:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:66:21:a9:58:04:de:2b:73:4c:6d:85:5a:35:8a:63:92:1a:bc:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 9 09:02:19 2025 GMT
Not After : Oct 8 09:07:19 2026 GMT
Subject: CN=B196F0FF6A7214BEAA274CF091D5AB0221B0858C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ad:2d:67:bc:ba:d4:d7:66:25:4b:a2:c9:93:
ca:e1:11:3f:65:0f:cb:a0:5a:f3:8e:c0:b2:11:75:
4f:c6:ec:cc:26:fb:c5:76:fd:95:fc:f1:fe:c9:dc:
f3:fa:f0:91:da:43:48:1c:a2:4f:fb:9a:ae:e7:87:
05:73:bf:cf:d0:8b:2f:90:a8:c3:9d:e0:0d:6a:81:
a4:3a:16:aa:3d:12:ca:51:07:64:b4:5e:22:86:9a:
49:4d:60:d2:f4:67:c8:5f:0f:73:76:37:ab:64:ff:
bb:fc:32:c2:af:f2:37:bb:00:14:6e:e5:98:aa:eb:
92:75:6b:62:74:ab:00:f5:e9:71:b4:4f:0c:1c:fd:
75:73:7e:e7:f4:1a:8b:d5:3a:3a:30:30:fe:f8:ac:
16:ae:93:99:1f:0f:55:b3:d5:cb:e5:7e:7e:dc:eb:
b6:fc:8a:8e:0e:28:43:1e:e1:11:96:d9:a7:47:29:
5f:6b:04:a0:b4:d3:7b:15:59:ab:ad:3f:86:77:cc:
2d:7b:57:d3:d6:79:89:ee:4c:2d:0e:4e:0b:d2:ee:
f9:98:8b:b7:04:69:85:8a:a3:f1:76:61:18:89:bd:
13:17:0e:32:c7:a8:a0:30:95:39:bd:21:50:9b:86:
19:21:23:32:dc:1d:42:f4:05:b6:d9:8e:28:36:84:
9b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:96:F0:FF:6A:72:14:BE:AA:27:4C:F0:91:D5:AB:02:21:B0:85:8C
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137382e3133322e3130362e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.132.106.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:9b:7f:0a:45:bf:69:67:75:c0:46:b1:5b:a1:11:82:c0:70:
af:11:78:a9:22:25:e3:67:93:e4:e5:6a:03:56:87:23:44:a5:
fd:05:78:3f:b2:fe:7c:17:18:dd:11:39:a0:63:d6:44:55:43:
51:07:f0:f4:d7:df:c5:e4:25:63:4b:47:67:1c:5d:d7:44:0d:
a7:66:a8:3d:c6:45:11:46:51:3a:5d:86:ca:c9:f6:0d:57:ee:
d7:c0:4a:d9:5c:96:64:c2:23:69:5e:65:08:17:06:4c:25:cd:
cf:9c:b1:1d:6b:f5:7b:1e:d7:f2:b3:5c:36:e0:39:f6:98:e1:
9d:33:90:5f:14:04:83:86:0d:42:ed:0c:81:34:c7:33:3a:aa:
95:53:d3:97:db:44:d9:70:b9:72:f4:00:c0:b4:56:d3:5a:d3:
66:bd:3b:74:e3:c0:ce:be:09:e9:25:51:4c:04:5f:aa:e7:cd:
4b:33:68:da:7b:75:9e:fc:2a:e7:e2:1b:9a:e0:da:50:af:59:
71:77:5e:00:13:95:ca:88:99:4c:6d:06:13:93:e9:e8:5c:7f:
81:67:b2:1b:3f:a5:e6:d0:d9:a8:82:26:6a:ed:e4:ad:86:20:
7f:31:38:05:c4:79:e6:0e:41:b4:09:ca:6b:83:76:1d:82:28:
fb:f8:19:3b
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUUmYhqVgE3itzTG2FWjWKY5IavHQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTEwMDkwOTAyMTlaFw0yNjEwMDgwOTA3MTlaMDMxMTAvBgNV
BAMTKEIxOTZGMEZGNkE3MjE0QkVBQTI3NENGMDkxRDVBQjAyMjFCMDg1OEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYrS1nvLrU12YlS6LJk8rhET9l
D8ugWvOOwLIRdU/G7Mwm+8V2/ZX88f7J3PP68JHaQ0gcok/7mq7nhwVzv8/Qiy+Q
qMOd4A1qgaQ6Fqo9EspRB2S0XiKGmklNYNL0Z8hfD3N2N6tk/7v8MsKv8je7ABRu
5Ziq65J1a2J0qwD16XG0Twwc/XVzfuf0GovVOjowMP74rBauk5kfD1Wz1cvlfn7c
67b8io4OKEMe4RGW2adHKV9rBKC003sVWautP4Z3zC17V9PWeYnuTC0OTgvS7vmY
i7cEaYWKo/F2YRiJvRMXDjLHqKAwlTm9IVCbhhkhIzLcHUL0BbbZjig2hJt9AgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUsZbw/2pyFL6qJ0zwkdWrAiGwhYwwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNzM4MmUzMTMzMzIyZTMx
MzAzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzMjMyMzMzOC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEALKEajANBgkqhkiG9w0BAQsFAAOCAQEAbpt/CkW/aWd1wEaxW6ERgsBwrxF4
qSIl42eT5OVqA1aHI0Sl/QV4P7L+fBcY3RE5oGPWRFVDUQfw9NffxeQlY0tHZxxd
10QNp2aoPcZFEUZROl2Gysn2DVfu18BK2VyWZMIjaV5lCBcGTCXNz5yxHWv1ex7X
8rNcNuA59pjhnTOQXxQEg4YNQu0MgTTHMzqqlVPTl9tE2XC5cvQAwLRW01rTZr07
dOPAzr4J6SVRTARfqufNSzNo2nt1nvwq5+IbmuDaUK9ZcXdeABOVyoiZTG0GE5Pp
6Fx/gWeyGz+l5tDZqIImau3krYYgfzE4BcR55g5BtAnKa4N2HYIo+/gZOw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:19:44 2025 by rpki-client