Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e3137362e3132372e302f32342d3234203d3e20323132323338.roa
File: 3139332e3137362e3132372e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: XIDig4L6/nszUHIg2Z8xx2GO27rsv6JXIf7EQnEi0is=
Subject key identifier: C9:9F:C4:F7:E1:DE:B0:16:7A:30:A6:7A:83:69:B0:5B:16:70:B7:17
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1B04BCCB6262B625BBD8EF9DB414A8182BB8C615
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e3137362e3132372e302f32342d3234203d3e20323132323338.roa
Signing time: Tue 16 Jun 2026 20:25:19 +0000
ROA not before: Tue 16 Jun 2026 20:20:19 +0000
ROA not after: Tue 15 Jun 2027 20:25:19 +0000
asID: 212238
IP address blocks: 193.176.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 13:22:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:04:bc:cb:62:62:b6:25:bb:d8:ef:9d:b4:14:a8:18:2b:b8:c6:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 16 20:20:19 2026 GMT
Not After : Jun 15 20:25:19 2027 GMT
Subject: CN=C99FC4F7E1DEB0167A30A67A8369B05B1670B717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e8:10:f4:9f:ad:4c:4d:ea:57:61:fa:34:60:
5d:41:b8:ce:1d:10:e0:ab:e5:f8:13:36:a5:2e:1f:
2d:eb:c1:25:cf:45:30:3c:81:02:78:38:0c:b9:4a:
fa:83:bf:58:d4:63:cb:ba:26:2a:2a:bc:32:a5:fa:
49:e6:fa:83:cd:fe:34:20:e6:1f:95:11:79:61:9e:
66:a6:2b:a7:d9:30:43:f3:81:4f:8a:24:1e:9a:c9:
27:0c:31:10:4c:13:46:ca:1c:8f:ff:6a:85:d4:62:
35:15:df:c0:c9:ad:6c:e4:ad:89:09:9d:63:db:8b:
88:c8:da:5c:03:35:b5:53:b6:ee:3d:5c:30:0d:e2:
c3:a3:31:9f:b7:7e:1f:54:7b:c8:44:41:c3:2e:12:
ba:b1:56:9b:ab:18:46:ae:6b:91:a0:e9:64:7b:8d:
b2:3c:38:4f:48:08:79:59:92:1f:5b:51:72:fc:76:
fc:8e:ee:9c:92:66:1d:fd:fa:ce:e8:5f:88:5e:13:
e1:bc:d2:d3:02:71:69:ad:33:36:5c:5e:b7:79:a2:
0a:e0:13:7c:8e:91:de:ff:e8:7c:11:02:ec:4f:4c:
91:ef:1d:53:c1:bb:6c:ba:02:04:98:47:3c:fd:96:
0d:78:b1:ed:f0:d4:8f:b9:ac:b0:23:9f:e8:32:7a:
be:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:9F:C4:F7:E1:DE:B0:16:7A:30:A6:7A:83:69:B0:5B:16:70:B7:17
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e3137362e3132372e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.127.0/24
Signature Algorithm: sha256WithRSAEncryption
31:39:d0:b9:c8:3a:62:c1:65:a6:20:66:9d:ba:13:9b:cd:f8:
9f:c0:35:56:70:e2:f4:a6:d7:00:df:31:8f:e7:d3:86:31:95:
32:5c:1f:e8:93:fb:85:dc:d0:4a:fa:df:72:39:ff:ac:d0:7e:
0f:eb:7f:9f:53:a0:36:b9:4c:38:00:26:76:c2:2e:23:0e:26:
43:cc:d5:76:2b:07:fd:c4:3d:78:74:51:30:6a:db:0f:95:a3:
28:7b:01:cb:1f:be:ae:3b:60:8d:ef:6d:a0:01:cd:13:5b:7d:
08:43:43:b2:2e:0f:a1:d1:a7:38:9b:90:bd:bc:23:2a:99:d8:
ed:83:3a:04:c0:48:d1:bf:bd:5f:9f:38:bd:b7:68:fd:e8:0d:
38:e6:e1:1a:5e:8a:c3:fd:04:7c:8f:a4:10:90:7c:0c:db:46:
37:9f:b1:da:7c:ef:45:f4:1c:77:a0:5f:b7:da:ab:dc:b3:61:
83:15:a4:55:a2:8e:12:3e:73:91:21:b8:0d:e8:8a:1a:67:b3:
da:d0:cf:8f:1f:6d:41:06:4d:d4:d9:2c:ee:b5:bd:9f:2d:46:
13:51:05:f6:6e:05:79:e8:51:9b:38:9c:75:ed:95:eb:b7:38:
1f:52:46:14:81:7b:8f:07:8b:c9:3c:2d:5a:31:0c:5b:05:6b:
4f:29:1d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 01:03:35 2026 by rpki-client