Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e33322e3233332e302f32342d3234203d3e20313336373837.roa
File: 3139342e33322e3233332e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: ZzyUoQbuv1t6MklhiD4RVImEVU2M1b4kmSBByHOkqyY=
Subject key identifier: 0B:46:26:4A:1D:A1:76:0E:04:D9:C1:5C:95:B6:19:A7:03:00:FE:BE
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 03836A38228B73C7A92D88534027AE70DF3E8312
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e33322e3233332e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 18 Oct 2026 19:29:52 +0000
ROA not before: Sun 18 Oct 2026 19:24:52 +0000
ROA not after: Sun 17 Oct 2027 19:29:52 +0000
asID: 136787
IP address blocks: 194.32.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:83:6a:38:22:8b:73:c7:a9:2d:88:53:40:27:ae:70:df:3e:83:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 18 19:24:52 2026 GMT
Not After : Oct 17 19:29:52 2027 GMT
Subject: CN=0B46264A1DA1760E04D9C15C95B619A70300FEBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:43:f0:8c:6d:d0:48:9c:9e:ae:c2:08:31:66:
2c:cb:d6:f5:a8:31:33:72:39:94:f9:f9:0e:39:6b:
a0:3f:52:d7:b8:f3:5e:f1:eb:5e:40:da:38:ef:84:
4c:61:94:b9:46:46:ef:63:74:7b:05:3a:c0:6e:c2:
d5:0e:7e:df:d6:ab:19:b3:b6:44:71:e0:ea:b5:ee:
0b:4a:fe:f8:20:89:3f:6b:76:ec:bd:0a:56:70:0e:
eb:52:47:57:9a:69:e8:e7:f0:4c:01:4c:71:39:37:
4d:75:b2:c2:0b:4b:ed:0a:7c:d5:46:31:26:52:50:
58:fa:3d:38:7e:bc:1b:d4:73:a4:0e:b9:1c:0d:96:
6a:27:0d:5c:ca:21:72:4e:81:de:cf:62:78:08:f9:
37:1c:5b:99:36:fb:90:20:d9:0a:a1:1d:be:1e:04:
14:11:03:c5:90:95:4c:70:f5:18:24:8a:21:6f:3c:
4a:ef:e5:6d:a1:27:1d:86:92:d4:03:55:2c:24:b4:
47:f8:42:bd:40:cb:83:aa:59:d9:30:26:58:3e:da:
4c:5e:d1:04:d3:bb:77:e9:62:54:6e:ca:2e:b4:b0:
5e:5c:ed:d9:de:10:7d:df:d0:0a:4a:19:69:6c:5f:
7c:84:17:c2:37:04:cc:5a:04:e7:5b:30:a1:53:55:
18:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:46:26:4A:1D:A1:76:0E:04:D9:C1:5C:95:B6:19:A7:03:00:FE:BE
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e33322e3233332e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.32.233.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:33:1d:22:d9:8a:c2:c1:a5:4c:37:97:a9:7d:f6:72:6d:6b:
de:74:00:a6:df:f2:3e:d0:fc:25:dc:38:af:51:2f:15:e1:e1:
71:a1:53:e1:a6:3d:76:2a:fb:25:9b:07:82:11:06:4d:43:69:
b0:2f:74:8c:67:1b:96:19:c9:58:91:57:94:f8:06:9c:bc:1c:
21:31:17:6f:21:10:e2:2b:ae:dc:61:23:a4:d2:15:e7:e4:24:
2e:91:0f:22:99:7d:1b:36:d4:10:e5:a5:10:24:a4:48:b2:43:
1a:cb:11:88:a2:d9:1e:3e:7a:da:cf:00:c2:cc:f4:05:f6:26:
cf:82:92:22:22:0f:8d:c6:7f:35:3d:d4:b6:c0:23:fe:57:49:
d5:da:3d:6d:e1:96:09:0e:76:9b:09:c9:4a:73:30:eb:28:9c:
1c:06:b9:84:19:23:e0:ba:d4:c1:7f:46:4a:ea:97:e1:03:de:
09:63:b7:10:2f:b4:21:d4:49:1c:4b:20:03:37:c6:fe:5f:8c:
c7:f4:2f:0c:65:bb:8a:44:51:14:d9:cb:ef:14:6d:ff:27:df:
e1:41:14:b8:b4:e3:e4:0a:9e:36:0e:9a:5d:88:a2:0a:07:cb:
2a:0f:c3:dd:47:71:38:2c:0e:7d:fe:1d:68:93:4d:2b:19:21:
0d:91:f1:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 20:34:30 2026 by rpki-client