Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e34362e3232312e302f32342d3234203d3e20323035363539.roa
File: 3139332e34362e3232312e302f32342d3234203d3e20323035363539.roa (raw, json)
Hash identifier: B7boae2DVn5iZTtQLQBvMedRvUPOp2rLvnbouMvnomk=
Subject key identifier: 19:98:22:32:13:78:C1:BB:64:78:FF:DD:21:78:4A:88:FC:2A:D3:A6
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 73BEC13A70B8D87702D79B4C68DAF3058D920147
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e34362e3232312e302f32342d3234203d3e20323035363539.roa
Signing time: Fri 24 Jul 2026 15:26:34 +0000
ROA not before: Fri 24 Jul 2026 15:21:34 +0000
ROA not after: Fri 23 Jul 2027 15:26:34 +0000
asID: 205659
IP address blocks: 193.46.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:be:c1:3a:70:b8:d8:77:02:d7:9b:4c:68:da:f3:05:8d:92:01:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 24 15:21:34 2026 GMT
Not After : Jul 23 15:26:34 2027 GMT
Subject: CN=199822321378C1BB6478FFDD21784A88FC2AD3A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b0:ba:63:9c:ce:7b:fe:f4:1d:75:7e:6d:d1:
6e:23:8a:96:6d:4f:f0:85:8e:28:82:de:76:61:88:
31:77:bb:4c:1d:b1:e3:8b:e4:9d:ab:0a:c1:a2:16:
d7:b6:90:30:b4:60:b6:a9:86:80:e2:81:1a:f2:3c:
43:21:c6:e5:2d:61:2b:74:ef:51:09:7c:2a:b2:42:
13:47:1a:3c:64:ae:58:91:bf:f5:f9:62:df:88:5e:
9f:9f:13:1d:87:65:9c:0f:ad:fd:f0:8b:04:14:a5:
2a:65:e3:2b:66:b7:e7:71:03:8e:e0:ac:ea:e8:12:
ac:fd:1f:e3:a5:41:a8:7f:f5:e5:c7:1c:dc:9c:58:
d2:5c:f7:38:84:4f:7a:01:35:71:c8:5a:f4:cd:01:
fd:2a:3c:5a:9d:b0:e9:79:f6:34:c5:b1:29:95:15:
ed:cd:c1:ec:86:95:41:7d:98:fa:38:e3:b2:38:6c:
51:de:c3:89:11:9b:00:bf:9b:50:a6:1a:44:d2:3d:
9d:17:1a:c2:b7:81:e6:f7:04:ab:43:47:c3:cc:dd:
81:ae:33:37:38:f2:b9:f5:96:77:58:d2:68:b2:8a:
5f:d8:f7:4c:c7:53:7b:c0:f7:f6:1a:fe:fc:7a:c9:
27:37:07:34:bc:36:fc:3a:10:b7:91:55:0f:db:83:
1d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:98:22:32:13:78:C1:BB:64:78:FF:DD:21:78:4A:88:FC:2A:D3:A6
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e34362e3232312e302f32342d3234203d3e20323035363539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.221.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:1a:55:74:37:55:6b:05:3b:b2:ef:52:ef:56:a9:f0:c7:3e:
f4:92:41:26:5e:64:3e:5e:21:30:63:09:2c:1b:3c:ff:7e:9a:
cb:dd:1a:97:fe:87:f5:10:5f:db:e3:5a:ed:c1:85:77:ea:c0:
08:9e:1e:90:7b:c1:cb:7e:79:06:2d:b9:f9:2c:9d:25:ae:56:
9c:8a:12:4e:ca:12:2d:04:fa:db:13:4c:13:2c:51:4b:34:be:
83:d0:2e:ca:46:09:d8:75:22:ed:b2:5c:00:1f:44:88:74:f3:
ab:05:91:19:fb:c5:00:96:b5:1c:df:24:bb:1a:55:08:c8:9c:
70:5b:3c:56:4a:f5:bf:f2:f4:3f:e6:e1:01:39:a1:11:45:45:
af:76:b4:78:04:4d:8e:c0:34:a6:f2:6b:ee:c9:53:8f:a4:cf:
24:51:22:f2:09:92:c4:cd:92:8e:1c:aa:50:6c:40:70:ea:f3:
79:02:50:c3:14:11:a2:10:74:a3:6d:01:00:7e:5a:16:b5:e1:
9b:6c:ff:0a:c6:9e:80:f7:e7:75:b7:90:8e:ad:42:4c:2c:da:
be:1b:96:8e:c2:e3:c0:95:4d:b1:29:0f:e7:61:a9:08:24:be:
7f:ba:1f:08:b3:69:2a:ee:84:f1:ae:89:06:aa:1c:49:40:ce:
7c:79:87:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 23:55:19 2026 by rpki-client