Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3234322e3234312e302f32342d3234203d3e20323132323338.roa
File: 3139352e3234322e3234312e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: MXTWJfQoRd137VLW4JEcF4uKzWSy/0YvLTlO4NJ2J1U=
Subject key identifier: B8:F2:76:70:0A:43:2D:B2:8D:8C:97:30:51:F2:84:46:35:4D:45:2A
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 58396B717356D8B5A83C96318ACD216E1D47A1CA
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3234322e3234312e302f32342d3234203d3e20323132323338.roa
Signing time: Thu 10 Sep 2026 09:28:42 +0000
ROA not before: Thu 10 Sep 2026 09:23:42 +0000
ROA not after: Thu 09 Sep 2027 09:28:42 +0000
asID: 212238
IP address blocks: 195.242.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:39:6b:71:73:56:d8:b5:a8:3c:96:31:8a:cd:21:6e:1d:47:a1:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 10 09:23:42 2026 GMT
Not After : Sep 9 09:28:42 2027 GMT
Subject: CN=B8F276700A432DB28D8C973051F28446354D452A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:50:92:67:b2:60:0c:40:9f:f5:5e:73:25:b1:
2b:2c:c9:87:d0:63:68:c7:ed:fd:49:69:0f:d4:59:
96:44:f7:1a:2d:fb:9c:8e:97:e3:01:f3:62:c1:74:
e1:ff:8f:87:ff:ec:a4:dc:70:7f:d3:dd:29:84:72:
7d:57:30:90:25:b5:cf:3a:ad:65:95:67:7f:02:4a:
3e:1b:a8:d6:81:fb:8d:1d:f3:25:47:88:21:93:ed:
11:a5:4a:60:7a:62:a8:42:be:fd:4e:17:0a:39:f0:
df:66:61:63:bd:9a:94:2f:a2:a4:e5:1a:57:1a:d4:
29:8f:b6:fe:f7:87:03:59:44:ac:1a:d8:1a:5d:d7:
05:ca:21:8f:df:4f:c6:a3:32:b4:37:f2:05:14:23:
66:91:c0:04:da:ce:70:ac:e8:a1:39:44:2a:02:6a:
6f:23:c6:19:7f:2a:25:e4:d8:6f:1d:39:a6:03:35:
59:71:c0:a9:64:26:40:ea:df:72:c5:0c:58:5c:56:
0f:c2:31:28:ec:ea:8d:66:b8:12:33:a5:b2:2f:37:
56:d5:f6:8a:b4:46:cd:0e:01:e1:1d:ed:ef:cb:5f:
a8:e6:4b:ff:87:d5:53:9b:e2:83:ce:af:0d:91:bb:
ad:1d:e8:df:28:6d:6c:81:49:95:f6:f8:71:8b:6e:
77:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F2:76:70:0A:43:2D:B2:8D:8C:97:30:51:F2:84:46:35:4D:45:2A
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3234322e3234312e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.242.241.0/24
Signature Algorithm: sha256WithRSAEncryption
36:be:d9:70:69:98:18:3a:9e:58:31:b2:15:56:58:ee:7c:85:
7a:fa:45:e8:c2:8e:af:aa:6d:c3:48:31:e3:29:f1:a6:5e:9c:
25:fa:9b:71:78:f0:8c:db:c5:ad:08:51:13:1b:19:a3:5e:60:
2a:cc:dd:1c:c1:d3:94:f5:60:7f:b0:35:ad:b0:9d:f6:9e:11:
ed:08:23:4d:1d:ac:47:0c:7f:4f:f2:81:70:d3:98:9c:ac:0c:
af:9a:bb:60:b1:35:ba:93:0e:39:15:ea:df:df:f7:97:51:e1:
82:51:2a:0a:ac:91:b4:b9:f9:9b:9a:5d:88:1d:40:d3:80:70:
ab:62:96:06:6a:0c:b3:c9:15:d3:31:0d:ea:bf:ad:81:04:73:
47:71:3f:60:7b:5a:43:03:c3:f7:73:0f:0a:35:ea:7e:32:02:
c9:a3:0f:15:cd:1b:92:91:b9:e1:6c:81:5c:9b:91:1e:16:e0:
c3:05:35:e1:eb:b2:5f:ec:22:a1:70:78:b9:a5:bd:ac:c3:9b:
7d:fc:12:bf:a5:d0:6d:eb:c2:3e:9c:d9:05:34:31:59:88:e5:
1e:12:40:47:8b:94:a1:27:91:72:aa:60:6f:57:0d:3b:e6:d7:
9c:81:7b:61:6b:83:93:25:bb:0b:75:1b:ab:4f:0e:32:38:0d:
70:14:7a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 19:08:21 2026 by rpki-client