Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e33322e3233342e302f32342d3234203d3e20313336373837.roa
File: 3139342e33322e3233342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 2qr9tO+HSNrt8iMcg6kkau1ZBkeCtG4JrCi2+rMNm4M=
Subject key identifier: E2:AA:F7:10:B5:64:64:51:34:21:4D:8C:E6:57:B9:80:7B:EC:7C:6A
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3AF16976A4D09CAE799E4A209DC08EE2B2CC2EE6
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e33322e3233342e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 18 Oct 2026 19:29:55 +0000
ROA not before: Sun 18 Oct 2026 19:24:55 +0000
ROA not after: Sun 17 Oct 2027 19:29:55 +0000
asID: 136787
IP address blocks: 194.32.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 12:21:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:f1:69:76:a4:d0:9c:ae:79:9e:4a:20:9d:c0:8e:e2:b2:cc:2e:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 18 19:24:55 2026 GMT
Not After : Oct 17 19:29:55 2027 GMT
Subject: CN=E2AAF710B564645134214D8CE657B9807BEC7C6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d4:5a:07:ff:6a:7c:b5:ee:b8:10:58:00:8e:
49:90:d7:50:33:99:55:0b:11:11:71:64:1d:11:b3:
30:2b:66:bf:62:6f:a9:94:38:31:7d:88:c1:a6:ee:
34:9b:ff:95:df:88:76:b4:63:40:34:13:6e:d4:cb:
23:9d:00:bd:00:63:5d:d4:17:ea:8f:54:94:c1:da:
00:f8:f8:a3:4b:8a:73:20:69:25:53:89:01:2a:b4:
12:e3:c8:17:de:0e:30:44:19:e8:a5:86:93:da:28:
9c:50:51:e0:bb:87:36:dd:4f:04:b7:9e:59:f3:02:
6b:97:35:46:58:fc:17:67:0c:0d:71:74:8c:3c:48:
c9:30:d2:f0:eb:4d:58:4e:be:f8:c5:3c:9b:74:92:
fa:89:14:f5:ac:0b:ce:bb:2e:e9:54:24:1b:c8:37:
e9:5c:2f:1e:5a:68:b2:55:69:23:88:01:d5:61:db:
b5:d5:11:60:58:4f:8d:93:84:25:a8:e5:b5:07:b1:
b2:a9:d6:d2:ac:e0:85:d5:61:39:f1:fe:ea:41:74:
f2:be:95:ad:b1:7f:00:90:27:ae:41:05:d1:7f:31:
4d:28:f5:56:4e:4c:fe:6f:62:8c:42:44:b6:0e:c4:
c2:29:4b:b5:40:cb:72:52:c0:e4:41:a4:68:84:96:
7e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:AA:F7:10:B5:64:64:51:34:21:4D:8C:E6:57:B9:80:7B:EC:7C:6A
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e33322e3233342e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.32.234.0/24
Signature Algorithm: sha256WithRSAEncryption
65:25:c4:52:ed:c3:7b:8b:ac:71:5f:45:a2:4b:64:b0:ba:58:
0c:df:c6:94:84:80:d5:d2:75:8c:93:0c:7b:16:2e:c7:77:bb:
ad:0c:6a:85:c1:e3:3a:7e:e0:56:f2:5d:08:6e:39:d8:d5:4d:
2a:1b:4d:b8:dd:66:c5:73:50:3f:d8:09:dc:29:33:3b:af:7c:
8f:b7:5d:2b:e9:cd:4d:1b:9c:ae:ad:82:79:dd:85:87:46:9c:
57:02:56:60:43:f0:d9:37:06:a4:a1:72:94:e5:3c:21:89:83:
87:1c:91:9d:a7:66:5b:90:f0:69:12:0b:5d:dc:10:87:6c:fe:
8d:80:ce:b5:ba:0d:d2:71:e2:da:86:61:98:7c:3d:65:7a:09:
e0:d0:03:f0:c8:d2:da:a8:d1:67:17:b5:e7:3b:1c:f5:0f:16:
a9:94:00:35:8e:51:a2:1f:f6:2d:df:9d:28:b0:4e:e2:d8:3d:
13:1c:bb:0e:5d:12:0d:1b:40:e5:43:5b:c9:d1:d4:83:e2:b0:
37:f0:1f:82:47:52:f4:32:5e:87:39:27:ac:ff:f0:50:99:57:
65:bb:0b:c7:54:7d:f1:e8:ad:a6:6d:ca:58:bf:ec:b1:7e:03:
c5:d9:e6:52:6b:dc:37:71:c0:4c:84:62:38:e2:7e:2b:0a:3e:
9a:26:12:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 05:51:50 2026 by rpki-client