Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e33352e35302e302f32332d3234203d3e203437353833.roa
File: 3139352e33352e35302e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: XKRzFKclM3Da85yKHKj5rauosd+IOplAdQW3SopTEtU=
Subject key identifier: 01:C9:7D:16:6D:81:B4:18:41:B4:A8:73:2A:8C:21:E6:4A:74:08:BE
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 495B9499F042FAAB3AA77F2FF2B5C03B5386E9C8
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e33352e35302e302f32332d3234203d3e203437353833.roa
Signing time: Fri 19 Jun 2026 09:25:28 +0000
ROA not before: Fri 19 Jun 2026 09:20:28 +0000
ROA not after: Fri 18 Jun 2027 09:25:28 +0000
asID: 47583
IP address blocks: 195.35.50.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:5b:94:99:f0:42:fa:ab:3a:a7:7f:2f:f2:b5:c0:3b:53:86:e9:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 19 09:20:28 2026 GMT
Not After : Jun 18 09:25:28 2027 GMT
Subject: CN=01C97D166D81B41841B4A8732A8C21E64A7408BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:37:f2:18:84:91:b3:a5:6e:1d:17:5e:b8:2a:
72:80:e6:a2:1d:9a:98:e4:6f:50:7e:04:b5:7e:07:
d3:5e:45:16:0a:30:60:65:9f:87:28:dd:bd:49:63:
8c:3e:c5:97:04:38:54:be:7b:f0:4e:1c:de:da:53:
05:a7:85:00:a1:f2:04:9f:d6:44:00:10:ae:9e:47:
fd:96:e6:f0:6d:43:e3:9b:2b:b3:d2:d3:45:19:2a:
3f:ee:0d:51:bd:e3:85:9b:4f:f4:9e:91:6a:f6:80:
76:6d:1b:54:98:8f:73:e3:17:0a:2b:f3:ea:be:73:
1e:2c:5e:99:ab:e8:20:14:85:69:ad:76:d9:08:6a:
c6:3e:03:2d:4f:1b:9b:4a:1c:60:2f:92:b7:16:b2:
0f:58:fe:bf:d2:33:cb:9f:36:48:9d:b6:49:34:32:
84:57:1a:f4:bf:7f:35:d5:31:53:47:da:ee:c7:f6:
8f:56:50:34:2e:f1:de:0f:74:2f:dd:aa:32:9f:78:
38:b2:14:32:e4:61:8d:d6:12:31:16:3a:a0:72:da:
99:99:85:21:b6:fe:3b:2b:5e:0c:9e:2a:a3:3d:49:
ce:f8:ec:7a:8b:62:3f:7a:2a:c6:39:66:03:31:39:
21:9f:ee:dd:2c:3a:ea:19:1a:ea:ea:0d:43:03:75:
30:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C9:7D:16:6D:81:B4:18:41:B4:A8:73:2A:8C:21:E6:4A:74:08:BE
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e33352e35302e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.35.50.0/23
Signature Algorithm: sha256WithRSAEncryption
46:e9:93:79:12:39:90:4e:6f:52:32:75:6f:0e:71:89:15:7b:
e2:10:65:38:36:ce:53:71:b1:16:e3:3f:23:3a:24:8a:5d:3b:
96:06:05:57:2d:4a:37:82:10:e6:42:50:cb:7e:ba:e0:f7:e2:
13:33:0b:7d:43:bf:41:5b:26:7d:8e:d2:38:89:ae:19:57:04:
a6:ba:7b:53:36:14:06:74:a4:54:24:ed:34:b0:84:04:dc:ea:
53:11:55:9f:db:e2:b6:e5:39:5b:f2:1f:9c:28:67:3c:88:23:
07:13:ab:41:d4:a2:10:fc:1d:8f:a9:07:70:48:dc:ee:3e:08:
79:12:bf:6a:a4:55:5b:e7:47:03:44:f2:45:91:7b:f8:c6:68:
3e:89:a3:18:64:66:97:69:a9:27:ff:ec:d2:5e:57:d1:bc:c9:
e8:4b:d4:45:2c:ea:7e:27:ea:5c:c7:6f:aa:b4:e9:2d:c0:3c:
cc:dd:3c:6a:fc:91:b5:2d:4a:38:4c:29:8f:7b:57:df:7e:26:
3f:bd:ee:ec:0b:5b:89:60:c7:6f:e4:14:2a:de:cd:42:3b:52:
02:bb:80:5a:d6:25:ad:cf:f0:3a:40:3f:c2:1c:76:a8:a0:bd:
2c:12:e2:99:b8:06:2b:6d:a2:76:fe:43:9e:3b:87:7b:6f:aa:
c1:6f:21:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:54:05 2026 by rpki-client