Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e33352e35322e302f32332d3234203d3e203437353833.roa
File: 3139352e33352e35322e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: t+NOeVQdF+0ItDRpskrE6UZV5R+z5YEjbxvRlntrZLM=
Subject key identifier: DA:F9:55:1A:3B:2F:27:A8:EF:90:A7:0A:5E:85:46:6C:39:49:F9:43
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3420A7325FC82FBFAA50BB0A27377FCCFDB90427
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e33352e35322e302f32332d3234203d3e203437353833.roa
Signing time: Fri 19 Jun 2026 09:25:26 +0000
ROA not before: Fri 19 Jun 2026 09:20:26 +0000
ROA not after: Fri 18 Jun 2027 09:25:26 +0000
asID: 47583
IP address blocks: 195.35.52.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:20:a7:32:5f:c8:2f:bf:aa:50:bb:0a:27:37:7f:cc:fd:b9:04:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 19 09:20:26 2026 GMT
Not After : Jun 18 09:25:26 2027 GMT
Subject: CN=DAF9551A3B2F27A8EF90A70A5E85466C3949F943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7d:4f:4a:44:94:2a:81:b1:15:d0:c7:6a:26:
be:e6:38:75:ed:7a:c4:b7:40:32:a3:07:07:35:17:
44:b9:f3:5e:3e:67:e0:2f:65:0d:17:aa:e3:ec:89:
e5:24:ab:c8:9e:1c:1d:59:ac:fe:d3:9b:78:38:70:
79:91:1a:7f:72:25:d7:69:0e:5d:e3:23:8f:79:c3:
48:a1:79:43:ec:eb:5f:13:f3:f2:e4:47:df:4e:3d:
06:45:95:ff:ca:b5:60:30:61:f6:b6:4c:ea:a4:b8:
36:29:ff:9a:c5:65:72:cd:21:4d:70:a5:97:64:fe:
8c:d6:7c:3b:1b:88:1e:f0:ff:f9:b1:16:31:42:e2:
9f:67:6b:4f:2e:ea:e6:32:85:39:e9:ac:fd:62:67:
51:ad:49:34:8c:f9:5f:c6:73:47:6e:4d:72:91:1a:
aa:c0:50:ff:14:b4:cb:89:31:e7:5d:7b:fd:25:10:
c1:42:a7:f8:ea:30:b2:ac:11:1f:fb:30:87:8c:27:
a1:96:fb:50:2e:60:cc:6e:35:52:1d:92:47:59:a1:
35:02:0e:c8:97:07:ad:c6:a3:f9:b4:3c:b7:ed:d2:
b7:6d:83:38:9d:ac:34:f7:87:78:a3:eb:7f:8d:99:
74:45:c4:84:f2:e3:7c:3a:1a:0f:d8:d7:d7:c6:d9:
60:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F9:55:1A:3B:2F:27:A8:EF:90:A7:0A:5E:85:46:6C:39:49:F9:43
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e33352e35322e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.35.52.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:ed:97:ec:55:5f:1b:85:8e:93:fe:32:7b:00:12:1d:e1:32:
0a:94:ca:56:31:26:16:4a:de:9c:2a:50:21:70:4c:83:d7:92:
7c:5a:5f:b9:59:1b:34:75:29:63:17:c4:99:49:30:83:cb:60:
43:9e:f9:43:7b:60:a4:83:a1:df:aa:00:f6:7c:a0:7b:37:6b:
d0:96:8b:ad:06:21:36:a6:54:06:44:26:9a:de:cb:b3:15:9f:
60:6f:9f:05:f4:9c:7e:62:c1:bf:06:17:b4:70:4d:c4:44:22:
b8:2d:fe:de:92:84:c0:0b:3e:de:e9:55:a0:0b:21:9e:d2:70:
c6:d4:ed:20:63:81:d3:10:cc:39:86:59:f0:b0:98:f4:90:e7:
af:f9:c7:50:61:61:e2:de:ed:38:1e:7a:ae:8c:c7:90:be:cd:
da:24:51:e5:5f:84:63:e9:cd:0e:39:36:99:ac:d2:88:59:b9:
66:67:52:c7:17:d1:d9:94:34:8a:3b:de:ea:12:d3:36:a5:26:
4c:b5:cd:df:53:c8:10:96:70:55:2a:9c:e0:0e:19:4a:84:ef:
29:a0:d7:d5:62:76:6c:24:54:6f:c4:8f:3b:32:ab:a0:03:2a:
17:63:fe:66:d0:41:8c:9f:c1:7d:2c:7c:f7:a1:f9:b8:49:76:
b0:63:10:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:55:09 2026 by rpki-client