Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e3230332e3138302e302f32322d3234203d3e203437353833.roa
File: 3139332e3230332e3138302e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: HedKE68M7pyfX4ApPmkqKvDn/sSy7u3rgLZt3VlpQXc=
Subject key identifier: 7B:82:0C:EE:EE:1E:65:1E:E8:A3:6C:47:36:62:7D:1D:1E:FD:3E:C6
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 63E666D769DEAACB499556FEE26F221902E02212
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e3230332e3138302e302f32322d3234203d3e203437353833.roa
Signing time: Mon 15 Jun 2026 18:25:17 +0000
ROA not before: Mon 15 Jun 2026 18:20:17 +0000
ROA not after: Mon 14 Jun 2027 18:25:17 +0000
asID: 47583
IP address blocks: 193.203.180.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:e6:66:d7:69:de:aa:cb:49:95:56:fe:e2:6f:22:19:02:e0:22:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 15 18:20:17 2026 GMT
Not After : Jun 14 18:25:17 2027 GMT
Subject: CN=7B820CEEEE1E651EE8A36C4736627D1D1EFD3EC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:83:0e:ae:54:a4:b3:20:16:14:14:e7:d2:af:
48:16:9c:13:90:9f:b5:94:ba:a0:b1:cd:a5:20:21:
e4:89:fa:50:95:44:36:d9:7b:67:ce:81:ed:49:d2:
33:2e:1b:b5:3e:45:3f:6f:f7:04:e4:a4:ae:ee:01:
c3:26:11:76:fe:9a:11:04:6b:08:a9:3b:33:0e:f6:
6e:fe:aa:54:f3:c1:3f:25:ba:a2:51:d5:17:dc:a6:
a0:17:7a:17:04:75:d3:d1:2d:fd:57:6f:63:30:d4:
e0:85:8c:f7:f9:8e:0b:aa:57:d8:25:fe:a1:ff:0d:
a7:40:66:1b:e3:cd:16:79:e2:b5:fc:23:88:b4:8a:
d7:d0:89:4d:69:b8:70:53:2c:ed:c7:4d:3e:ab:a8:
d9:ba:22:7d:05:4c:3c:a9:4d:5d:ee:c4:46:2e:e4:
5a:37:a8:c5:db:02:f3:57:95:ee:87:a1:96:bf:e2:
41:d1:b4:4e:00:1e:3f:07:68:9b:5b:7d:78:dd:7f:
93:ae:82:d2:9c:3e:3f:ba:23:47:93:f8:b6:3b:83:
e8:d0:3a:a7:4a:fd:ca:e9:0c:6c:f7:7d:b0:73:75:
06:43:41:a8:e9:8f:44:6a:4e:22:65:fc:10:9d:f2:
9d:4d:58:c3:61:31:fb:7f:7f:d5:5d:2e:a7:62:92:
42:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:82:0C:EE:EE:1E:65:1E:E8:A3:6C:47:36:62:7D:1D:1E:FD:3E:C6
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e3230332e3138302e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.180.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:b2:ae:ca:5e:2f:71:17:5c:87:f6:ec:3e:da:cf:96:c8:e9:
f6:93:6e:b7:cd:5f:89:51:f3:d6:37:08:c9:43:3b:04:4b:35:
e6:6b:a7:60:8a:52:68:3e:6b:dc:1c:51:5c:9d:03:34:ff:02:
18:de:54:e2:f7:b8:01:aa:af:04:be:80:0c:77:d4:31:94:c0:
a6:ef:75:df:ea:69:0f:8a:54:b3:d5:a0:ee:46:87:d9:01:a0:
42:b0:b6:d8:35:4a:e0:f5:c4:b0:a9:76:69:2f:a2:9b:9b:d6:
a6:ed:23:ac:0e:8b:c6:2a:40:95:31:60:21:3f:23:88:01:75:
d3:72:09:cf:34:2c:e8:75:f1:be:1a:89:05:7d:24:37:ed:14:
20:af:51:6a:35:32:d4:25:5b:6e:09:c7:06:ab:77:e4:98:4f:
81:5f:b5:bb:f3:9b:43:6f:68:a0:c1:d9:3d:4d:e4:ec:58:14:
8f:17:57:7d:c5:cb:e1:58:09:d1:3f:67:fc:22:d4:07:7d:e5:
a8:8d:39:06:dc:03:da:53:4c:cf:62:d1:de:f3:4e:49:04:d4:
50:cb:c2:f1:79:0f:61:0a:d1:4a:76:a8:ff:78:f5:55:15:6b:
98:4c:31:12:7f:24:a5:0d:b5:c6:0d:3a:b7:d7:b6:72:df:a4:
38:c6:4c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:55:56 2026 by rpki-client