Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e3136302e3131382e302f32342d3234203d3e20313336373837.roa
File: 3139332e3136302e3131382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: OXfcMM8kZzoMiOK78mjW7Zj9Fk8en+rJ+h0IhL32mwY=
Subject key identifier: D3:43:10:3E:45:72:D3:5B:3E:55:03:C9:A5:DF:83:2B:17:9A:63:CD
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1C56A16BB5D3DFCF20CA2833E2940553357695DB
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e3136302e3131382e302f32342d3234203d3e20313336373837.roa
Signing time: Wed 04 Mar 2026 13:23:22 +0000
ROA not before: Wed 04 Mar 2026 13:18:22 +0000
ROA not after: Wed 03 Mar 2027 13:23:22 +0000
asID: 136787
IP address blocks: 193.160.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:56:a1:6b:b5:d3:df:cf:20:ca:28:33:e2:94:05:53:35:76:95:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 4 13:18:22 2026 GMT
Not After : Mar 3 13:23:22 2027 GMT
Subject: CN=D343103E4572D35B3E5503C9A5DF832B179A63CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1a:a8:34:2a:2c:7b:90:58:8e:45:cc:e2:c3:
4c:f3:a4:ce:16:85:e8:45:75:68:64:ae:a0:3d:49:
21:0a:2e:b2:d0:4d:3d:22:d2:4e:f7:e0:b3:43:45:
aa:19:12:27:e7:14:0b:1b:b8:83:84:21:d3:43:2b:
ed:14:f0:fd:30:ce:5a:ec:f2:6a:67:22:bf:10:b9:
63:ce:e4:20:8e:2d:04:0f:92:f0:ba:77:45:6b:48:
d3:d9:e9:14:31:84:73:a4:66:95:c2:11:0d:3b:27:
41:31:c9:78:6e:15:83:f2:f7:ce:7b:a9:e0:da:a8:
5c:25:e8:c7:2c:70:80:f6:3e:25:1d:69:b8:6e:d8:
6a:e3:6c:d5:b3:94:3d:c5:ff:14:63:e4:69:66:66:
36:90:34:d6:17:49:30:e2:67:eb:8d:c0:24:11:18:
72:ab:45:2b:fb:a4:b0:76:ec:87:3e:d5:07:6c:c2:
75:d4:d9:33:09:6a:10:6e:16:9d:05:4a:4a:7d:d1:
55:41:0e:62:e7:56:72:aa:92:8f:4d:e7:83:25:7b:
9d:e2:55:e7:05:f6:0c:76:05:0e:53:9b:b1:c2:27:
16:d1:a7:af:ed:39:14:9e:e4:03:a2:f5:83:01:96:
3c:70:a4:1a:0f:43:36:0e:c4:ef:3c:78:f5:f3:0d:
c9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:43:10:3E:45:72:D3:5B:3E:55:03:C9:A5:DF:83:2B:17:9A:63:CD
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e3136302e3131382e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.118.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:b3:43:74:cc:4b:01:a8:ab:5f:85:3a:4e:3d:d5:99:81:1f:
bd:8a:ca:58:af:63:33:f4:90:e5:00:f1:85:c8:0f:36:db:eb:
64:3b:df:1d:c0:1a:74:1e:ed:b1:4e:86:08:d2:b5:16:c2:97:
c9:88:06:42:0b:52:ea:73:df:58:e7:81:c6:0e:fe:78:90:f6:
c8:1f:f2:12:f0:73:92:04:04:1d:e8:a5:80:b8:33:23:64:94:
92:e4:80:31:ad:a2:82:54:86:4c:20:cb:ff:e2:aa:ab:d0:96:
fa:bb:e1:a7:98:05:83:f6:da:14:58:63:14:cc:6f:bd:8a:be:
ed:c9:a4:1c:5b:48:bb:a2:f1:67:2a:ba:59:21:49:58:32:9b:
e8:53:d0:b4:bc:cf:49:c9:bd:b8:e4:8c:a9:56:68:a4:b0:1e:
6a:b3:45:74:92:08:01:2f:3b:c9:48:6e:c2:51:4c:3f:08:39:
91:75:3b:fb:f9:ce:e9:12:57:97:7b:f2:11:4c:98:10:6a:5c:
ef:4c:8c:c8:a6:20:22:7b:3c:5b:2f:6a:52:7b:4b:9f:f2:a5:
2f:78:4b:44:b4:79:1a:0d:c2:83:06:79:04:e8:97:47:cf:ff:
ec:a2:b3:99:82:1d:98:51:ee:cf:2f:45:86:72:88:17:a8:e9:
38:90:a9:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:42:52 2026 by rpki-client