Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e33352e36322e302f32332d3234203d3e203437353833.roa
File: 3139352e33352e36322e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: +Sulm22mHN/kXIKggIkRZbKvsTvpod8P9NASC+6szz4=
Subject key identifier: A1:17:FD:6D:40:96:FF:F5:B7:51:FD:6B:B2:49:7C:6C:D1:FD:8F:5D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 41B999A0B362316BFE8A974D1F0F2A436661D56E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e33352e36322e302f32332d3234203d3e203437353833.roa
Signing time: Fri 19 Jun 2026 09:25:26 +0000
ROA not before: Fri 19 Jun 2026 09:20:26 +0000
ROA not after: Fri 18 Jun 2027 09:25:26 +0000
asID: 47583
IP address blocks: 195.35.62.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:b9:99:a0:b3:62:31:6b:fe:8a:97:4d:1f:0f:2a:43:66:61:d5:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 19 09:20:26 2026 GMT
Not After : Jun 18 09:25:26 2027 GMT
Subject: CN=A117FD6D4096FFF5B751FD6BB2497C6CD1FD8F5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3f:07:ce:66:c5:27:87:f0:3b:c2:4d:4b:f6:
b6:4c:56:64:d3:2f:78:f9:50:38:fa:08:d8:d9:81:
0a:74:6c:77:37:51:82:ce:11:ce:71:00:1b:17:bc:
b7:3b:cd:bd:c3:ce:8a:b1:78:05:7c:c1:96:51:91:
04:a2:30:bf:74:2b:06:00:63:b2:57:74:e1:b1:ef:
63:0b:59:06:b3:6f:42:31:24:62:bc:8d:bb:84:6c:
f3:aa:5c:63:f4:3a:2e:2d:33:6d:28:8a:e8:74:a5:
93:b9:4b:a2:e6:89:a5:7b:d6:fe:6d:3b:a6:2c:71:
05:ad:57:cc:f5:8b:28:95:03:62:f4:1f:dd:11:20:
9f:0f:c2:a0:cf:e8:e5:f1:31:fc:70:e3:03:16:87:
3d:18:61:0e:ac:c8:e5:91:f8:18:08:95:41:ba:68:
c0:8c:d0:a0:d0:81:1b:e3:7a:92:e0:7d:6c:b2:cc:
67:f2:f1:68:1c:f1:a5:bb:cb:3a:8c:09:42:79:f8:
77:62:2a:ba:10:7d:3b:4d:7b:1b:14:c1:ee:18:d0:
ee:8a:fd:f0:91:c6:3b:61:a8:35:68:5e:e3:cb:73:
7d:6b:9b:f0:ed:04:49:51:fe:e2:5b:75:3d:df:33:
f8:f6:26:bb:a5:fe:ca:e0:32:11:ea:02:46:94:0b:
44:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:17:FD:6D:40:96:FF:F5:B7:51:FD:6B:B2:49:7C:6C:D1:FD:8F:5D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e33352e36322e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.35.62.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:46:f9:e1:ff:03:f9:b3:c4:07:b7:17:1f:64:fb:ce:e6:d5:
86:0c:85:45:32:9d:9a:10:09:91:d3:d8:bf:d1:02:30:54:1c:
12:65:d1:4f:ff:59:8a:d0:d7:f2:91:59:a7:74:40:ae:89:8b:
5e:52:6f:e2:1a:ef:4c:13:4c:d0:d3:87:a5:2a:36:c8:38:54:
56:b1:d1:59:5e:d9:54:ad:b3:05:81:c0:fb:d4:75:9e:df:ca:
81:61:2b:cb:b6:55:a6:de:1d:31:e6:2a:73:bf:50:27:44:20:
d0:2c:32:cd:c7:03:af:7c:d1:be:29:15:fd:e5:d7:77:6b:6c:
ee:0d:87:e3:21:b6:a6:44:fc:f6:9c:6d:97:94:69:81:64:af:
09:0b:f7:0f:56:97:5f:2a:03:8b:16:ed:68:02:3b:e7:d8:81:
6c:8b:30:fa:e9:18:fa:79:a0:2b:3b:bc:7c:ee:9b:39:99:d9:
8c:3f:50:93:37:0f:14:8a:08:9c:34:2b:80:e6:bd:87:f1:db:
15:b2:eb:2a:f4:dd:66:27:6b:2a:0c:52:a2:d3:56:47:26:ca:
d8:2c:20:b2:0d:77:f5:57:7f:72:6c:bd:86:15:99:71:49:7b:
ca:7b:71:d6:ad:8e:7f:98:d2:16:75:59:d7:2a:01:99:20:b3:
a0:2c:25:22
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUQbmZoLNiMWv+ipdNHw8qQ2Zh1W4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA2MTkwOTIwMjZaFw0yNzA2MTgwOTI1MjZaMDMxMTAvBgNV
BAMTKEExMTdGRDZENDA5NkZGRjVCNzUxRkQ2QkIyNDk3QzZDRDFGRDhGNUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5PwfOZsUnh/A7wk1L9rZMVmTT
L3j5UDj6CNjZgQp0bHc3UYLOEc5xABsXvLc7zb3DzoqxeAV8wZZRkQSiML90KwYA
Y7JXdOGx72MLWQazb0IxJGK8jbuEbPOqXGP0Oi4tM20oiuh0pZO5S6LmiaV71v5t
O6YscQWtV8z1iyiVA2L0H90RIJ8PwqDP6OXxMfxw4wMWhz0YYQ6syOWR+BgIlUG6
aMCM0KDQgRvjepLgfWyyzGfy8Wgc8aW7yzqMCUJ5+HdiKroQfTtNexsUwe4Y0O6K
/fCRxjthqDVoXuPLc31rm/DtBElR/uJbdT3fM/j2Jrul/srgMhHqAkaUC0RJAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUoRf9bUCW//W3Uf1rskl8bNH9j10wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzOTM1MmUzMzM1MmUzNjMy
MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzQzNzM1MzgzMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcMj
PjANBgkqhkiG9w0BAQsFAAOCAQEASkb54f8D+bPEB7cXH2T7zubVhgyFRTKdmhAJ
kdPYv9ECMFQcEmXRT/9ZitDX8pFZp3RAromLXlJv4hrvTBNM0NOHpSo2yDhUVrHR
WV7ZVK2zBYHA+9R1nt/KgWEry7ZVpt4dMeYqc79QJ0Qg0CwyzccDr3zRvikV/eXX
d2ts7g2H4yG2pkT89pxtl5RpgWSvCQv3D1aXXyoDixbtaAI759iBbIsw+ukY+nmg
Kzu8fO6bOZnZjD9QkzcPFIoInDQrgOa9h/HbFbLrKvTdZidrKgxSotNWRybK2Cwg
sg139Vd/cmy9hhWZcUl7yntx1q2Of5jSFnVZ1yoBmSCzoCwlIg==
-----END CERTIFICATE-----
Generated at Mon Jul 20 23:55:11 2026 by rpki-client