Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139322e3134352e38302e302f32342d3234203d3e20313336373837.roa
File: 3139322e3134352e38302e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: Bf7YVQrAJhhPRIUaEq37N3agomYOzXV5kxBHDHw0/QA=
Subject key identifier: D9:98:DD:73:F1:F8:BF:F5:70:3B:30:D8:13:98:D6:A9:3E:DE:AF:53
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3D7FB7F2EF21E42BA13BC9DB9F69B581642203A6
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139322e3134352e38302e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 24 Jul 2026 15:26:53 +0000
ROA not before: Fri 24 Jul 2026 15:21:53 +0000
ROA not after: Fri 23 Jul 2027 15:26:53 +0000
asID: 136787
IP address blocks: 192.145.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 20:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:7f:b7:f2:ef:21:e4:2b:a1:3b:c9:db:9f:69:b5:81:64:22:03:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 24 15:21:53 2026 GMT
Not After : Jul 23 15:26:53 2027 GMT
Subject: CN=D998DD73F1F8BFF5703B30D81398D6A93EDEAF53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:22:bd:7b:e3:32:59:98:ad:ae:a8:fa:76:8d:
d9:cf:be:cb:55:13:ca:95:a7:a4:1e:d2:14:44:f1:
fc:36:e6:73:e2:e9:3f:4c:ed:18:ca:97:b8:6d:f7:
0c:5b:58:92:c8:f0:91:dc:09:89:dc:87:95:e0:4b:
e5:84:19:ac:4e:3d:0f:ff:2a:a9:3d:16:f2:84:87:
78:ec:24:3c:40:97:07:14:8d:76:e5:3e:a3:4f:cd:
65:d9:9a:16:0d:bb:6d:a1:09:6b:18:86:61:56:bd:
94:17:e2:e2:c0:4c:32:bd:61:54:d2:fa:29:4d:c3:
40:6a:63:47:5a:b8:b4:5c:a5:c3:82:18:9d:dd:c0:
f1:1d:a2:2e:69:19:c2:76:f6:a3:4e:23:33:04:de:
66:f1:e8:f8:40:0c:c4:be:28:c5:a9:6c:7a:6e:8e:
49:9c:03:57:c6:b6:7e:01:d9:77:1c:fe:2d:86:92:
ce:33:71:5f:9a:86:1c:7a:bd:77:ec:75:f8:c7:c0:
28:d9:55:d6:5f:9e:f8:31:24:68:df:8e:16:64:62:
9d:bf:61:c2:3e:1d:72:d4:7a:83:29:6b:a8:54:6e:
ed:b1:40:2f:dc:14:6f:9a:e2:c7:63:03:9d:2d:d1:
92:4c:16:de:26:cc:e0:4e:3a:29:a9:c2:42:cb:52:
4f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:98:DD:73:F1:F8:BF:F5:70:3B:30:D8:13:98:D6:A9:3E:DE:AF:53
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139322e3134352e38302e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.145.80.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:5d:28:9e:5e:c5:19:12:3e:f9:bb:9c:21:10:fd:e0:7d:c8:
9f:dc:5f:4e:55:ca:0e:7c:cb:e8:de:d7:80:f1:c5:7a:22:44:
65:be:15:d7:7e:bb:df:ae:69:2e:c7:22:eb:bb:c2:e7:c9:28:
66:25:7f:15:34:d5:42:df:b1:ec:18:bc:52:63:de:1d:93:04:
96:48:b5:1f:01:25:5b:1a:d5:8c:40:d5:a3:55:2d:13:93:ae:
e0:c3:04:af:c7:5d:d0:b9:b0:c9:72:24:c9:ab:71:24:86:20:
27:59:4d:57:03:cb:c4:84:74:6e:2b:36:82:94:09:00:8a:24:
5d:9d:46:7d:c1:10:90:ca:72:9a:70:06:1a:df:67:80:c1:c9:
46:0c:13:0d:44:ea:da:96:92:8d:61:f3:58:e0:72:bf:a5:c2:
2a:9f:92:54:25:cb:1c:27:14:92:5c:68:1a:fd:19:36:ce:ed:
26:e4:77:f9:88:2a:9a:9a:9c:aa:76:03:06:4f:34:8c:67:95:
17:0f:dc:0d:d4:73:50:47:7a:27:6c:f3:cb:aa:56:1f:67:a5:
ff:3e:86:69:90:92:df:4d:f2:09:48:9d:76:e6:f9:01:b8:8f:
bb:60:b7:70:71:97:68:30:de:ce:d8:32:d8:9e:19:74:01:c3:
00:a1:d8:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:05:22 2026 by rpki-client