Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3233332e3130332e302f32342d3234203d3e20323033333830.roa
File: 3139342e3233332e3130332e302f32342d3234203d3e20323033333830.roa (raw, json)
Hash identifier: H3miVcKVNTEvOgDS8aPpL8US9TOLlPxgCMvXOekNh6s=
Subject key identifier: 18:F4:DE:4E:FE:DC:4C:C3:A6:13:1B:90:78:E9:6F:05:F7:0F:95:71
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1A698F1992EC625B217722B6F03970EA32FD0CF7
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3233332e3130332e302f32342d3234203d3e20323033333830.roa
Signing time: Tue 26 May 2026 08:35:42 +0000
ROA not before: Tue 26 May 2026 08:30:42 +0000
ROA not after: Tue 25 May 2027 08:35:42 +0000
asID: 203380
IP address blocks: 194.233.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 May 2026 17:41:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:69:8f:19:92:ec:62:5b:21:77:22:b6:f0:39:70:ea:32:fd:0c:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 26 08:30:42 2026 GMT
Not After : May 25 08:35:42 2027 GMT
Subject: CN=18F4DE4EFEDC4CC3A6131B9078E96F05F70F9571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:97:28:b6:fd:e1:dc:ad:98:e4:ea:1a:af:ca:
6f:d6:c6:75:42:f7:20:46:69:61:eb:ef:c1:b7:4d:
90:0a:a4:d1:46:d6:04:16:a7:90:9e:90:aa:52:0d:
36:b7:ff:44:c5:4d:a2:33:b7:52:88:b0:03:bc:61:
1c:48:df:4d:c3:90:9b:11:f2:93:49:5b:68:7b:3d:
23:e9:45:b1:c2:f2:2c:4e:91:32:92:11:a8:a0:98:
ff:f1:6a:58:f9:95:22:d0:42:73:3a:32:de:52:8d:
e0:fc:84:1e:5f:06:73:9e:62:b0:7d:cf:56:b3:61:
02:c8:f3:76:8c:42:0d:8d:c5:c8:c1:b8:cb:01:62:
89:81:76:12:77:1f:7d:5b:86:ac:9e:0e:7a:fc:8b:
62:ae:b2:2e:da:f3:dc:85:30:91:64:55:bd:87:80:
3a:d8:ff:14:42:71:7e:4d:8a:09:11:c7:03:47:ec:
49:e0:df:2d:b8:b9:c6:69:ce:61:98:c6:f5:4a:b2:
11:86:7c:91:1e:c4:f0:51:33:e4:2b:cd:cd:c3:16:
4e:8a:86:6b:de:10:48:a9:4f:fc:9e:01:11:3d:09:
d3:60:64:8a:7e:6f:3b:05:5b:a8:bc:3f:4e:d6:4a:
43:d3:df:0c:b5:f6:3b:5d:df:9f:c8:ce:3a:19:a1:
db:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F4:DE:4E:FE:DC:4C:C3:A6:13:1B:90:78:E9:6F:05:F7:0F:95:71
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3233332e3130332e302f32342d3234203d3e20323033333830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.233.103.0/24
Signature Algorithm: sha256WithRSAEncryption
23:da:f8:01:60:ef:45:d5:b1:2b:22:e8:6b:65:9c:eb:7d:92:
b3:04:25:9a:32:24:4d:bd:a1:f1:12:e6:8c:2d:12:e8:70:25:
75:7a:92:18:d0:99:24:3d:e3:c8:b5:f1:59:f3:5a:46:43:d6:
a7:ad:bb:a5:f5:53:57:b3:5d:83:69:6f:84:83:77:e6:20:1d:
7d:ea:7e:1c:63:cc:39:27:ca:e1:67:c7:1c:b3:bd:ad:21:74:
ae:45:51:10:b4:1c:ab:45:f5:32:b6:87:d9:f8:bc:63:e9:64:
eb:12:bb:ae:37:b1:07:16:eb:ab:06:b5:d7:a6:aa:2d:b8:27:
7c:aa:b4:ba:83:5d:77:ef:00:92:f6:c3:52:f5:b6:24:49:e4:
f4:f6:d7:cb:ef:51:86:20:ce:30:f6:85:e6:18:e2:ea:bf:00:
1c:6f:6c:4d:f9:57:65:e7:02:e9:a2:ed:a6:18:bf:a8:80:36:
51:db:15:af:a0:ca:85:28:af:d9:2b:c6:19:25:da:53:e8:2f:
d8:fc:6c:b8:c3:ae:93:a6:b5:57:4f:d3:06:a7:3e:68:89:04:
a6:ca:2b:61:dc:3f:7d:6a:35:c1:3b:4a:5e:6a:f3:bf:f2:63:
c8:35:0d:9e:f7:10:ee:1c:5a:56:ec:37:8b:7a:99:ca:00:10:
1a:fd:5a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 27 02:32:22 2026 by rpki-client