Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3231362e3231392e302f32342d3332203d3e20313336373837.roa
File: 3139352e3231362e3231392e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier: mKH8zK1AWE8FWGCCxyNKf4GlvykWRHIX9XXEHb6wdIE=
Subject key identifier: 1B:32:3C:CC:8F:7B:CC:EF:B0:E3:76:D3:28:81:58:76:23:9D:AD:30
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 137FDDD87A918ADF7C185A30CDAAD440033AE076
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3231362e3231392e302f32342d3332203d3e20313336373837.roa
Signing time: Wed 04 Mar 2026 13:23:22 +0000
ROA not before: Wed 04 Mar 2026 13:18:22 +0000
ROA not after: Wed 03 Mar 2027 13:23:22 +0000
asID: 136787
IP address blocks: 195.216.219.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 09:19:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:7f:dd:d8:7a:91:8a:df:7c:18:5a:30:cd:aa:d4:40:03:3a:e0:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 4 13:18:22 2026 GMT
Not After : Mar 3 13:23:22 2027 GMT
Subject: CN=1B323CCC8F7BCCEFB0E376D328815876239DAD30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:76:51:1d:1f:46:d2:b1:64:b4:85:47:08:72:
ff:06:38:3e:0d:1f:5f:6a:b5:05:3c:b5:1c:85:e4:
7e:b1:2a:7f:21:67:d6:c5:23:8a:7d:d3:b8:dd:a4:
92:bc:9c:61:49:14:bd:7e:95:92:3c:b4:fe:c0:a6:
ab:6a:bc:05:a0:27:c5:24:8c:f4:dd:99:c8:11:db:
3f:b4:40:ad:0c:b2:5a:84:48:ed:e9:33:c2:c6:c4:
49:d6:94:b2:e0:e1:b0:a4:77:e4:98:d3:9e:4b:42:
38:6a:33:81:08:e4:f8:69:10:4e:a1:cc:94:3b:b8:
da:ac:5e:82:67:fa:be:86:c5:82:8b:f3:79:72:37:
d0:3d:2a:d7:16:14:81:12:3e:e5:6a:4c:f3:10:a0:
fd:ac:76:7e:67:7e:7a:0b:8d:64:38:d5:0e:6c:57:
79:df:f6:07:3c:0f:ea:61:9d:dd:dd:d5:e6:86:98:
3e:03:b2:eb:38:f7:51:74:ca:8e:72:5f:10:ae:31:
ac:3b:60:85:f4:52:da:cf:2d:e7:40:26:a0:2c:99:
6c:df:ab:f4:f1:44:1c:72:6b:a1:67:f7:93:4b:89:
49:03:37:73:3c:cd:23:02:73:83:90:38:34:d0:28:
7d:c5:e4:d8:96:89:6f:a3:cd:13:56:2d:6e:75:e3:
af:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:32:3C:CC:8F:7B:CC:EF:B0:E3:76:D3:28:81:58:76:23:9D:AD:30
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3231362e3231392e302f32342d3332203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.219.0/24
Signature Algorithm: sha256WithRSAEncryption
14:8f:94:ba:f2:fc:b0:05:b4:74:e9:73:22:cd:a9:b3:2d:0c:
31:80:c7:27:2b:60:11:3d:47:fb:da:38:6b:7a:04:b4:1b:6e:
95:83:f4:bd:93:0a:a5:82:78:16:e5:fe:e4:55:1e:1a:5d:72:
33:d5:ae:84:18:c5:6c:ef:15:84:10:1c:3c:c9:74:d6:6d:1b:
dc:a1:d2:56:8d:b7:06:cc:b3:c3:3f:f4:ad:e5:6b:93:16:c5:
5c:71:b0:5f:28:92:76:b6:5b:12:08:4c:73:17:60:d7:aa:84:
9f:5c:e2:7d:51:ca:7e:fb:2b:84:be:0d:d2:fe:b0:6d:98:f7:
76:b7:cc:bc:90:d2:0a:e7:f6:20:7f:94:e3:e7:b3:b8:56:01:
bb:80:17:7c:30:a1:4e:a4:2a:2d:46:df:5c:5f:3a:4c:53:f8:
23:8f:d1:b2:62:d8:b6:df:3f:f1:ce:a1:81:06:25:a2:66:12:
09:8a:34:f1:71:b9:3b:e5:d4:36:a7:ba:90:23:d2:05:39:67:
21:d3:11:30:ae:1c:d9:a9:5e:6f:84:e0:86:2e:9f:54:2b:1e:
ae:18:a8:52:81:55:be:88:81:c9:6a:9b:39:34:eb:4d:fd:a5:
aa:d4:c9:02:6c:ae:07:21:0f:89:9b:a5:b6:80:b1:9f:4f:c1:
20:86:a3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 17:41:28 2026 by rpki-client