Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e33322e3233352e302f32342d3234203d3e20323132323338.roa
File: 3139342e33322e3233352e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: j8Mk+WwqQu+FJ31w5evXuLs983ReyL6357GPl1rSpkA=
Subject key identifier: 1D:19:F8:40:65:42:67:DD:97:B0:46:59:3F:A4:2B:AA:43:DC:33:43
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 014FDCF74916BA3BDDF34784B9850E9106C0E757
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e33322e3233352e302f32342d3234203d3e20323132323338.roa
Signing time: Fri 17 Apr 2026 10:23:46 +0000
ROA not before: Fri 17 Apr 2026 10:18:46 +0000
ROA not after: Fri 16 Apr 2027 10:23:46 +0000
asID: 212238
IP address blocks: 194.32.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 10:56:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:4f:dc:f7:49:16:ba:3b:dd:f3:47:84:b9:85:0e:91:06:c0:e7:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 17 10:18:46 2026 GMT
Not After : Apr 16 10:23:46 2027 GMT
Subject: CN=1D19F840654267DD97B046593FA42BAA43DC3343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:77:01:38:e7:1f:b6:1f:ba:32:cc:9c:90:5d:
64:60:82:95:d0:97:26:95:00:ce:72:ca:ad:37:1a:
65:b2:30:49:5d:fb:39:a8:99:98:a8:34:93:e4:00:
b3:27:30:c3:fa:89:11:82:72:f1:f2:2f:20:ff:08:
fa:3e:cf:3a:52:e3:e9:1f:ca:48:55:03:e0:c1:47:
13:97:68:8d:9c:7a:ac:2b:fa:50:b6:63:6f:6b:83:
b0:3d:97:4a:0b:42:0c:9c:2b:04:fe:d5:fa:da:2d:
65:71:23:3e:85:bc:75:10:61:4e:a4:fc:78:2b:f7:
5a:89:e3:45:82:64:2b:09:90:10:9d:6f:ef:1d:ae:
77:e4:d3:d3:c1:da:bc:f5:09:9a:ff:d6:43:70:48:
1a:68:32:16:12:90:a0:a0:61:9a:a8:db:44:ec:f4:
c9:f0:a5:cb:b7:7c:e4:6f:7c:3c:79:b6:f5:56:7c:
7c:88:e9:3d:c3:1b:eb:b9:fe:23:28:37:f0:f0:a8:
90:47:6a:14:fb:84:73:45:25:de:34:04:46:32:12:
ec:c8:b1:ba:18:3c:70:f8:be:d4:a6:52:ff:2f:81:
04:00:cc:7d:38:db:c6:9f:04:fe:25:0f:27:cb:41:
cf:27:4a:dc:0b:c0:a0:10:5e:62:27:5c:9a:e0:44:
b2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:19:F8:40:65:42:67:DD:97:B0:46:59:3F:A4:2B:AA:43:DC:33:43
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e33322e3233352e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.32.235.0/24
Signature Algorithm: sha256WithRSAEncryption
99:15:06:21:d8:85:78:94:f5:2d:cf:2a:6e:2e:e0:66:7c:e4:
3b:7c:bd:e7:82:a2:0b:64:33:dc:f7:be:aa:c8:4a:a4:e7:7d:
1f:89:e8:ac:f7:f6:02:c0:25:d4:ed:dd:8a:db:41:12:e4:8b:
be:2b:9a:15:7a:7f:cc:1d:73:b5:84:a3:fd:a6:19:02:63:cd:
42:68:1d:d2:1b:98:2c:8f:7b:7d:d6:b5:b7:27:bf:b8:1d:5f:
86:54:45:cc:a4:aa:85:4f:05:9a:89:92:c5:36:6b:b9:15:5f:
fb:bf:6b:48:97:5d:fc:d3:11:0a:51:de:dc:04:d2:78:cf:f8:
1f:43:88:b2:38:83:d4:a3:d0:fd:ed:ff:23:3e:82:5d:e4:10:
80:62:4c:92:e0:b4:b8:4a:21:7e:99:e8:cc:40:83:a2:a4:c7:
8e:46:d7:3a:11:28:7a:b1:ca:ba:9e:0d:d6:33:3d:d6:79:4e:
c1:08:06:51:bd:1f:46:96:02:7c:d9:7f:aa:c1:25:c5:0b:0b:
6c:63:7c:9b:bb:b2:a1:ff:21:da:74:a8:9e:49:0b:0d:c3:02:
86:df:4c:49:62:c7:4f:47:cc:80:d4:e4:5f:b9:cb:4a:29:a1:
be:50:f7:8a:b2:65:a1:b8:a4:8c:bd:65:cf:d9:98:cb:41:15:
6c:fb:dc:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 23:07:19 2026 by rpki-client