Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3234322e3234322e302f32342d3234203d3e20323132323338.roa
File: 3139352e3234322e3234322e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: 76BMuSPB/pibnDFG4ig9CGazIvLrb8LBtDDsRATT68A=
Subject key identifier: 22:0D:F3:B8:FF:8A:1B:EB:3B:BF:AA:AD:AB:91:DD:E0:82:7F:FD:85
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 16DA725172AA217663CA54EF86F42FA190344D52
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3234322e3234322e302f32342d3234203d3e20323132323338.roa
Signing time: Thu 30 Jul 2026 21:27:29 +0000
ROA not before: Thu 30 Jul 2026 21:22:29 +0000
ROA not after: Thu 29 Jul 2027 21:27:29 +0000
asID: 212238
IP address blocks: 195.242.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:da:72:51:72:aa:21:76:63:ca:54:ef:86:f4:2f:a1:90:34:4d:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 30 21:22:29 2026 GMT
Not After : Jul 29 21:27:29 2027 GMT
Subject: CN=220DF3B8FF8A1BEB3BBFAAADAB91DDE0827FFD85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ce:ea:f0:56:09:df:1b:2a:2b:aa:3e:1c:cd:
30:0a:fe:70:3f:24:5f:93:cc:8b:db:ce:b3:fb:fe:
eb:c3:bb:10:99:2b:6f:fd:f0:fa:63:73:5a:4c:be:
f5:73:ff:a3:53:ae:00:a9:df:83:d1:3e:9d:2a:9c:
41:84:e8:84:9a:0a:6a:ac:1c:50:c4:1d:a1:23:36:
05:bd:9a:1a:f5:f4:e6:05:b3:85:1d:56:13:6f:53:
f8:80:f8:80:04:04:d8:c4:04:f8:ec:e4:1c:b4:1a:
30:07:af:86:d1:3a:76:db:76:fd:85:39:1a:43:cf:
e3:7d:d3:dd:cc:c4:1d:63:52:a4:02:a4:39:f8:b5:
89:bb:96:42:bd:eb:96:b3:fa:a0:6c:9a:b1:91:e8:
c2:ad:45:5e:63:ac:6b:cb:23:51:63:fd:02:87:7d:
e0:58:d4:bd:6b:24:c2:de:12:9c:b3:d0:1a:77:8f:
08:07:a1:2b:b8:4f:a9:e5:9f:56:26:31:a8:70:5e:
8c:79:cf:34:30:2c:c2:c3:4e:7e:0f:8c:78:59:44:
cc:e0:04:0d:c5:45:c8:2b:2f:0d:a1:e7:46:14:d4:
cb:74:f0:07:7e:28:42:de:5d:d3:19:4f:03:cf:e9:
78:7f:cf:de:d7:25:a4:1c:10:1b:f1:70:ec:7e:45:
cb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:0D:F3:B8:FF:8A:1B:EB:3B:BF:AA:AD:AB:91:DD:E0:82:7F:FD:85
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3234322e3234322e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.242.242.0/24
Signature Algorithm: sha256WithRSAEncryption
72:6f:6f:e8:f4:df:f8:0d:12:db:fb:13:49:b9:dc:5a:de:a2:
a6:dc:35:92:04:45:20:33:7a:0d:ed:74:2a:b4:3e:47:23:54:
04:37:98:9a:89:9b:12:29:a3:31:d2:52:cf:53:4c:85:d3:7c:
8c:e3:26:14:48:ae:f0:83:74:fa:6e:1e:96:a3:e5:2c:b2:f7:
90:65:16:8c:4d:e6:b5:94:ac:75:6c:0d:ce:e8:98:40:38:40:
99:91:ce:81:7c:29:0a:c4:4a:3d:c2:57:72:ba:9d:26:24:6d:
9b:a5:ef:ab:30:ce:c7:8a:18:77:21:8b:86:b5:d7:47:d5:1e:
15:4f:22:15:42:23:75:ac:e7:c9:2a:55:7c:94:96:a4:3a:35:
59:32:59:22:dd:b1:98:8c:02:af:80:f8:ea:81:4f:61:68:89:
81:f0:b9:c9:79:33:63:5c:76:67:23:6f:ff:79:7d:45:84:48:
85:07:3b:28:7b:17:a7:78:26:a1:dd:f2:e0:a6:db:b4:b1:46:
eb:77:ca:ae:7c:09:e8:9f:1d:a0:aa:24:cb:02:37:a2:b3:70:
70:07:16:e6:45:16:2b:59:39:73:ac:5a:05:cf:16:36:55:95:
02:6c:5a:8e:f9:32:70:86:21:de:8e:46:75:ac:bf:45:f6:8e:
9c:bc:f3:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 07:41:36 2026 by rpki-client