Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3139352e39342e302f32342d3234203d3e20383334.roa
File: 3139342e3139352e39342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: r160gNK27VycezZvsEy1dmHwgZ77R2kTBzGpTlbFaY0=
Subject key identifier: 8E:57:71:44:F7:A6:A4:10:24:30:B3:E8:39:F4:DC:76:55:E7:84:1B
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 16CDA3259FF2DFD3211BB56FC8D961727611DDC2
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3139352e39342e302f32342d3234203d3e20383334.roa
Signing time: Tue 06 Oct 2026 17:29:38 +0000
ROA not before: Tue 06 Oct 2026 17:24:38 +0000
ROA not after: Tue 05 Oct 2027 17:29:38 +0000
asID: 834
IP address blocks: 194.195.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:cd:a3:25:9f:f2:df:d3:21:1b:b5:6f:c8:d9:61:72:76:11:dd:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 6 17:24:38 2026 GMT
Not After : Oct 5 17:29:38 2027 GMT
Subject: CN=8E577144F7A6A4102430B3E839F4DC7655E7841B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bc:25:7a:91:2b:69:79:69:fc:20:6c:0b:90:
52:3e:7d:66:c2:47:e6:32:85:60:38:38:a1:7a:86:
a6:f8:31:e8:35:5d:c1:e3:73:a0:c6:93:61:c3:48:
0f:f4:39:5d:79:0a:ee:44:9e:91:15:a7:9b:3a:b6:
69:5a:ce:c9:f4:df:df:34:df:ac:e0:ed:1e:69:54:
0b:56:f4:f9:af:2e:1a:2f:6a:23:40:19:92:cc:e4:
b6:87:3d:04:c0:ff:98:c5:12:6e:b5:fa:ca:cc:41:
e2:4f:a4:89:3f:ee:6e:17:fe:0d:a3:ff:b1:2e:72:
ff:8f:3f:93:df:f9:d0:c8:b1:20:71:5e:07:1a:9a:
0f:06:0d:e9:1c:00:d8:3f:6b:9d:7b:35:6b:bf:5b:
e7:82:1c:62:3a:72:61:3b:de:ec:c2:75:64:b7:32:
d4:a3:70:a2:ea:50:f5:90:3e:73:f1:7d:c6:37:65:
15:3e:e7:19:03:95:40:b8:58:e0:d4:94:5b:2a:3c:
6f:5a:10:d3:96:10:fe:90:ce:bf:5f:ff:c7:82:f0:
f9:3f:2c:91:2d:91:f8:2b:81:e0:70:11:eb:ec:9c:
ea:ec:cc:30:06:4c:0d:03:7a:de:a7:a4:95:cf:c1:
a5:32:0e:04:f3:c4:e3:b1:dc:f1:70:0d:af:e2:d2:
09:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:57:71:44:F7:A6:A4:10:24:30:B3:E8:39:F4:DC:76:55:E7:84:1B
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3139352e39342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.195.94.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:0c:e2:a2:16:58:60:22:ff:e1:6b:78:0e:55:06:26:1a:7f:
6f:29:75:8e:ad:c5:cd:1b:0a:d5:94:4b:09:36:94:e9:d1:ba:
92:1c:5a:4b:f5:43:14:4f:07:8b:22:45:16:e6:4a:c8:f6:49:
97:fa:80:6a:cd:05:c8:20:3e:ca:9c:bd:3e:cc:38:71:c5:ef:
54:8e:58:93:46:3a:63:78:7b:c1:47:25:cc:17:c7:6e:86:7e:
8a:4c:05:b0:d6:03:d3:b3:c1:8d:7c:a4:8f:9e:56:3e:35:58:
55:5c:aa:61:46:00:14:9e:1a:27:3d:39:0f:5b:ee:72:c4:ea:
f4:24:bb:b7:d4:15:3c:e3:3e:4e:b0:fd:01:a7:0e:8e:46:11:
40:72:01:9b:49:b0:52:39:24:38:b3:ca:ad:27:c5:13:bb:24:
bd:c0:9c:3f:90:f1:3e:5d:de:bb:73:f0:b9:bf:09:58:86:c1:
61:dc:a8:c2:2b:3e:3a:01:88:8d:63:ec:d0:54:6e:aa:55:c6:
bc:78:b3:1e:d2:c1:2e:55:f5:e5:b9:64:e9:06:7c:6b:37:ef:
91:27:90:6b:05:e7:a8:77:e2:0a:34:ee:33:27:a8:95:f3:b2:
52:ff:88:89:c6:9d:34:c2:e4:b4:5f:38:00:00:4d:ad:de:35:
42:72:a5:0a
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUFs2jJZ/y39MhG7VvyNlhcnYR3cIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjEwMDYxNzI0MzhaFw0yNzEwMDUxNzI5MzhaMDMxMTAvBgNV
BAMTKDhFNTc3MTQ0RjdBNkE0MTAyNDMwQjNFODM5RjREQzc2NTVFNzg0MUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPvCV6kStpeWn8IGwLkFI+fWbC
R+YyhWA4OKF6hqb4Meg1XcHjc6DGk2HDSA/0OV15Cu5EnpEVp5s6tmlazsn03980
36zg7R5pVAtW9PmvLhovaiNAGZLM5LaHPQTA/5jFEm61+srMQeJPpIk/7m4X/g2j
/7Eucv+PP5Pf+dDIsSBxXgcamg8GDekcANg/a517NWu/W+eCHGI6cmE73uzCdWS3
MtSjcKLqUPWQPnPxfcY3ZRU+5xkDlUC4WODUlFsqPG9aENOWEP6Qzr9f/8eC8Pk/
LJEtkfgrgeBwEevsnOrszDAGTA0Det6npJXPwaUyDgTzxOOx3PFwDa/i0glLAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUjldxRPempBAkMLPoOfTcdlXnhBswHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzOTM0MmUzMTM5MzUyZTM5
MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADCw14w
DQYJKoZIhvcNAQELBQADggEBABoM4qIWWGAi/+FreA5VBiYaf28pdY6txc0bCtWU
Swk2lOnRupIcWkv1QxRPB4siRRbmSsj2SZf6gGrNBcggPsqcvT7MOHHF71SOWJNG
OmN4e8FHJcwXx26GfopMBbDWA9OzwY18pI+eVj41WFVcqmFGABSeGic9OQ9b7nLE
6vQku7fUFTzjPk6w/QGnDo5GEUByAZtJsFI5JDizyq0nxRO7JL3AnD+Q8T5d3rtz
8Lm/CViGwWHcqMIrPjoBiI1j7NBUbqpVxrx4sx7SwS5V9eW5ZOkGfGs375EnkGsF
56h34go07jMnqJXzslL/iInGnTTC5LRfOAAATa3eNUJypQo=
-----END CERTIFICATE-----
Generated at Sun Nov 15 06:22:10 2026 by rpki-client