Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3233332e3130332e302f32342d3234203d3e203239383032.roa
File: 3139342e3233332e3130332e302f32342d3234203d3e203239383032.roa (raw, json)
Hash identifier: y8gkEjVjtcFtDKqG2ag+dm1BeB5L3BZPRz9gVegquTo=
Subject key identifier: 55:8A:D9:4E:63:C1:0C:B2:5D:E8:A7:89:FD:B9:45:16:2B:3A:53:11
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1CE5054A1843F85232437F64D387431CF64DE00E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3233332e3130332e302f32342d3234203d3e203239383032.roa
Signing time: Tue 26 May 2026 11:08:08 +0000
ROA not before: Tue 26 May 2026 11:03:08 +0000
ROA not after: Tue 25 May 2027 11:08:08 +0000
asID: 29802
IP address blocks: 194.233.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 15:52:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:e5:05:4a:18:43:f8:52:32:43:7f:64:d3:87:43:1c:f6:4d:e0:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 26 11:03:08 2026 GMT
Not After : May 25 11:08:08 2027 GMT
Subject: CN=558AD94E63C10CB25DE8A789FDB945162B3A5311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b5:33:0a:5a:fb:ad:a9:29:f5:5d:3b:d1:86:
7b:3c:10:84:47:86:38:fa:18:89:f8:2c:30:41:3b:
38:3e:db:99:c3:7f:61:ba:43:67:34:cd:e4:4f:08:
fd:bb:37:c6:97:ad:1b:3e:95:87:10:1a:eb:ba:ec:
2a:64:44:de:b3:60:34:d9:fb:41:a2:65:78:99:e3:
d0:86:bf:e8:93:f4:26:d6:47:79:34:7b:36:77:df:
0c:a9:0a:73:88:20:6b:29:a4:d1:33:5b:59:cf:94:
7d:62:a2:12:36:ea:dc:59:d2:1e:1b:63:d1:f1:ba:
60:a6:e5:17:62:f9:82:99:ba:a3:a4:a8:d8:83:d7:
d9:33:26:b0:b1:cf:76:94:99:2a:82:89:ee:91:c6:
51:49:43:2e:b7:20:fe:7c:d8:f2:8b:e0:48:0e:fc:
de:a5:cc:b2:5f:7e:96:50:ec:1d:d1:f3:50:5f:b6:
f5:95:ad:9b:df:ef:00:03:71:ee:ce:85:f6:ac:a9:
ca:7d:89:8e:80:98:c4:97:4e:d0:04:03:09:02:99:
0d:67:fa:d2:fc:9f:c7:02:80:94:1b:43:79:5c:88:
c9:96:af:58:be:9c:bf:d7:70:b4:e5:85:ef:a0:de:
5c:14:f3:ea:fc:d3:66:96:58:54:34:08:82:16:37:
39:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:8A:D9:4E:63:C1:0C:B2:5D:E8:A7:89:FD:B9:45:16:2B:3A:53:11
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3233332e3130332e302f32342d3234203d3e203239383032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.233.103.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:05:45:06:41:06:e3:08:f1:9d:ea:34:11:68:ea:df:f0:d6:
d7:62:73:78:89:ef:1e:20:cf:4b:f6:e8:ee:5b:e7:a0:90:a9:
e5:90:19:46:df:3c:8a:ba:3b:4e:b5:6c:20:57:70:94:c7:98:
f9:65:07:80:f3:eb:4d:0d:3d:e7:f8:f2:c6:d5:40:a6:22:4e:
88:4f:ed:e7:4d:1d:c0:ec:5d:de:0d:87:c9:e0:a7:8b:72:33:
2f:e2:af:05:52:40:d9:47:17:d6:7b:31:83:5f:b7:f7:bc:52:
98:1a:44:99:32:9f:5b:7e:da:66:2a:a8:e9:ac:ac:2a:0c:03:
cf:51:60:f5:12:26:0a:15:58:1f:0c:8e:91:7c:2d:02:90:73:
da:c5:58:09:7d:48:3f:50:ec:9f:ec:1d:72:d2:f7:ba:a8:e6:
dc:69:de:d6:7a:e3:03:20:9e:58:4c:d1:d7:16:3f:c7:20:11:
73:e3:40:eb:61:39:5c:dd:b9:d7:4d:21:09:d2:1a:ea:0a:b0:
43:ae:1e:ea:5f:93:b8:54:5a:0f:4c:a2:5c:a4:be:80:a8:63:
0b:40:22:c5:b7:47:6f:e0:5c:a8:34:d4:91:0e:39:a4:ae:ec:
be:f8:ab:26:2c:1c:fd:ee:4c:66:e5:6a:16:0e:b7:9a:bd:78:
c1:3c:50:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 05:16:57 2026 by rpki-client