Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137382e3133322e3130362e302f32342d3234203d3e20323132323338.roa
File: 3137382e3133322e3130362e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: nuTrqdZtVrlwqdVmz/XCb82YUD0FsuSMJcvugFAilUA=
Subject key identifier: C3:90:16:85:9E:D7:C6:4D:FA:CE:B2:F7:4B:A0:B4:14:28:65:F1:9E
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6136D1B00E0ED201B2E9BB5D106D5E2FABC10605
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137382e3133322e3130362e302f32342d3234203d3e20323132323338.roa
Signing time: Thu 10 Sep 2026 09:28:43 +0000
ROA not before: Thu 10 Sep 2026 09:23:43 +0000
ROA not after: Thu 09 Sep 2027 09:28:43 +0000
asID: 212238
IP address blocks: 178.132.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:36:d1:b0:0e:0e:d2:01:b2:e9:bb:5d:10:6d:5e:2f:ab:c1:06:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 10 09:23:43 2026 GMT
Not After : Sep 9 09:28:43 2027 GMT
Subject: CN=C39016859ED7C64DFACEB2F74BA0B4142865F19E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:14:96:86:c7:28:1d:5d:11:45:1f:c3:f3:25:
2b:ca:5c:03:2a:d6:83:b9:3f:9b:a2:e8:aa:02:aa:
57:58:29:cf:c9:24:5c:27:79:90:53:ce:5f:4c:68:
8c:3e:4f:20:0e:43:57:c0:82:ff:06:d4:27:5c:0f:
cd:04:58:75:a0:ed:ec:3b:6c:41:a0:27:ca:63:2a:
cc:49:ad:83:d7:eb:5d:9d:5b:1a:77:5d:b1:71:11:
8f:02:03:11:10:bb:af:d5:fc:b1:dd:15:d2:2a:3b:
97:f7:71:93:ab:5b:5c:f8:32:16:0e:ee:ff:90:b8:
f7:09:c8:25:1d:0f:2b:61:10:38:9c:29:3e:ab:04:
65:c9:62:3f:b9:24:14:25:6e:05:d7:fd:23:00:3c:
b0:4e:93:98:aa:7b:5b:50:23:d2:c0:cc:2e:e2:dd:
23:7e:f4:b7:77:97:ef:38:59:53:f0:e2:09:74:a5:
45:16:48:86:e6:b2:d8:1a:c5:27:0d:83:94:ad:ad:
e5:c3:cc:dc:12:42:8b:11:ca:27:08:a0:58:fd:1e:
c2:aa:a5:51:f1:a4:84:20:f1:6c:25:01:26:a7:b9:
32:13:40:b5:f3:48:8f:70:d2:f0:9f:9d:28:2e:69:
41:0d:11:b4:3b:fe:b7:3a:eb:9c:e0:7b:7e:5f:c5:
36:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:90:16:85:9E:D7:C6:4D:FA:CE:B2:F7:4B:A0:B4:14:28:65:F1:9E
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137382e3133322e3130362e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.132.106.0/24
Signature Algorithm: sha256WithRSAEncryption
92:1b:69:b3:5d:2b:cb:40:7b:f7:a8:c5:92:d4:9f:2a:d6:43:
6c:5e:17:55:6e:ea:72:f7:1c:7b:00:31:37:29:63:6b:0f:47:
2c:85:98:68:27:8b:3e:e3:07:8b:9d:fc:e9:81:e3:e4:37:67:
80:3f:9d:30:3f:29:76:6e:c3:b5:ba:6c:87:f5:64:86:87:c6:
ee:36:e1:df:14:ef:de:d6:1a:88:15:f0:a8:9e:d1:7a:a2:b0:
03:7f:a1:71:1d:10:1f:9c:11:34:fc:69:b0:34:51:51:54:d2:
b9:d6:59:e1:ea:cd:1c:eb:01:fd:ea:09:31:c1:b8:c8:ac:38:
95:ac:4d:fb:2b:98:32:f0:83:37:62:a9:f4:14:eb:3b:da:c2:
ad:c1:20:50:09:18:ad:21:90:31:2d:b7:09:35:16:f4:c4:e3:
ac:ec:a4:50:3e:82:f1:13:bd:30:d4:a0:fc:41:88:18:39:ea:
42:a6:bb:57:cd:74:11:f6:30:56:b3:7b:81:8e:ed:6a:99:7b:
26:b5:aa:fb:e9:6f:fa:23:4b:e0:71:74:d7:0e:03:62:83:d9:
f0:de:41:96:27:03:c3:f8:bf:8c:91:fc:09:45:85:63:e2:44:
b2:c1:e6:4f:dd:b8:bf:bd:73:80:8d:2e:ae:0b:c7:c6:97:40:
10:d3:f5:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 19:06:45 2026 by rpki-client