Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3234322e3234332e302f32342d3234203d3e20323132323338.roa
File: 3139352e3234322e3234332e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: JnBF5Xz5ZORe1sTLJ7tfUbyNOAS8+SgcQTwC7kSaDzw=
Subject key identifier: 93:07:91:2E:1F:F7:FF:BB:09:67:66:E9:67:0C:9B:E4:E7:7A:49:84
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1D03103E6A61675F7659B4B3C38CCE62FB1EDA9D
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3234322e3234332e302f32342d3234203d3e20323132323338.roa
Signing time: Thu 10 Sep 2026 09:28:40 +0000
ROA not before: Thu 10 Sep 2026 09:23:40 +0000
ROA not after: Thu 09 Sep 2027 09:28:40 +0000
asID: 212238
IP address blocks: 195.242.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:03:10:3e:6a:61:67:5f:76:59:b4:b3:c3:8c:ce:62:fb:1e:da:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 10 09:23:40 2026 GMT
Not After : Sep 9 09:28:40 2027 GMT
Subject: CN=9307912E1FF7FFBB096766E9670C9BE4E77A4984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:71:48:63:12:56:1b:96:fc:54:f2:06:c5:a3:
48:4f:5d:e6:5a:cb:5a:e0:ea:71:10:fc:d7:73:18:
22:66:c7:a0:a7:ae:d3:ce:1c:39:e9:71:b7:7a:7b:
3c:a4:0d:67:bd:3b:88:b4:98:da:ad:5a:10:2f:48:
93:a4:a0:6d:bb:3e:ee:0c:08:ae:c0:e6:11:e5:58:
fd:05:61:84:2b:26:06:ad:ba:44:ce:b5:1f:9b:42:
53:db:56:a1:93:1c:12:6f:ff:87:70:fb:88:5e:67:
c8:ae:ed:16:39:bc:63:4f:7a:c5:28:32:13:66:7e:
4b:1f:aa:c2:14:44:dc:b8:b8:17:92:8b:d4:63:5a:
25:fb:b5:87:fe:06:d1:7b:f3:ac:7b:f3:32:e8:40:
4f:9e:3f:3a:0f:1e:f8:d1:22:36:7e:c5:f3:6f:d4:
9c:a3:9e:71:c7:57:77:b2:d5:bd:d9:78:74:6a:e4:
ea:82:8e:ca:f7:8f:a7:23:d8:cf:7d:65:65:51:f3:
dc:6d:d8:7d:a6:a7:64:4c:32:88:9f:5b:5e:25:b9:
d8:c1:4f:42:b5:7f:ad:58:e4:51:36:9e:99:d0:be:
e0:02:18:1b:6f:f0:d6:0a:72:29:7d:8f:be:d9:13:
09:9e:68:45:37:5b:59:37:2d:f9:1a:eb:93:04:76:
88:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:07:91:2E:1F:F7:FF:BB:09:67:66:E9:67:0C:9B:E4:E7:7A:49:84
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3234322e3234332e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.242.243.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:84:b7:0d:51:b6:7f:b7:34:e1:4e:9a:51:0e:48:e5:3e:16:
5f:9e:36:f9:73:3a:26:7b:23:b1:94:52:0b:79:dc:12:62:8e:
b8:95:90:b9:9b:39:77:66:48:71:cd:4c:1b:38:e2:da:45:a5:
f9:bd:2c:5b:43:c6:90:8d:d1:5e:84:43:38:56:38:af:a5:70:
0e:01:c5:a4:f2:21:bf:69:61:57:28:c2:ed:2d:2c:c7:30:70:
7b:5b:31:af:63:ee:92:ca:e9:98:fd:9d:7c:da:ef:d9:af:c6:
97:dd:79:41:b2:bf:f6:c3:c0:bd:a9:6e:37:f2:ea:89:37:48:
de:1e:cd:51:01:ff:2c:b0:a1:cd:79:b9:c5:10:3f:f1:f6:e0:
c2:bf:43:c2:8e:e3:95:71:05:46:57:13:f7:63:fb:33:7c:ad:
7a:c9:28:87:8b:e6:22:62:c8:75:a4:4a:08:5e:53:f0:b5:ed:
fc:7b:f6:f8:1d:ef:6f:f4:5a:4e:bd:6f:9d:c0:3a:47:a8:29:
81:33:03:4a:2c:e1:91:31:d8:f0:96:77:fb:1b:cb:d8:74:dd:
52:c6:32:bd:a8:38:b1:07:f2:03:44:dd:53:8b:dc:e8:8d:ca:
fc:4c:f8:d6:c2:26:39:62:35:04:09:62:d0:56:b4:b8:50:b3:
fb:5d:bc:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 19:08:57 2026 by rpki-client