Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/322e35392e3135362e302f32342d3332203d3e203531313637.roa
File: 322e35392e3135362e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: ukhCK9q7zIdatxeQLiqewxg3CmVBdIMszmVJx9x2zcI=
Subject key identifier: 59:24:98:ED:C3:FD:1F:86:B6:9E:B5:09:2A:3A:E0:E5:14:7E:84:AB
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5A8EC7EFBA228A3386DF4118A166395EEDD3288D
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/322e35392e3135362e302f32342d3332203d3e203531313637.roa
Signing time: Wed 01 Jul 2026 15:26:01 +0000
ROA not before: Wed 01 Jul 2026 15:21:01 +0000
ROA not after: Wed 30 Jun 2027 15:26:01 +0000
asID: 51167
IP address blocks: 2.59.156.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:8e:c7:ef:ba:22:8a:33:86:df:41:18:a1:66:39:5e:ed:d3:28:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 1 15:21:01 2026 GMT
Not After : Jun 30 15:26:01 2027 GMT
Subject: CN=592498EDC3FD1F86B69EB5092A3AE0E5147E84AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:10:87:68:a4:34:f4:70:39:ff:e2:34:a7:20:
2a:ac:80:51:17:72:8f:66:d4:43:90:e4:d8:46:ff:
bf:fb:a8:e7:43:7a:e3:8e:b6:8f:65:ad:8b:23:27:
60:b9:30:90:1c:37:53:c5:73:5c:d2:43:78:e3:02:
8f:93:4b:c0:99:8b:05:1d:8c:44:2d:f5:f2:01:fc:
07:d4:d1:ba:4e:06:dc:52:de:51:ad:cd:08:1d:cd:
e8:b1:86:95:3e:68:95:58:90:2b:f5:b7:70:a0:03:
f8:7e:d1:7c:27:79:86:49:d8:75:58:4d:72:7a:cf:
c4:3f:c4:9b:b5:26:2b:f4:9e:c5:01:f5:18:a9:18:
32:76:bd:b2:67:53:ed:72:95:21:8c:8c:c3:a3:0e:
35:b7:9f:68:7e:58:b6:6f:c7:85:20:cf:56:b9:74:
07:9a:1c:e5:0f:60:b0:e3:24:2a:24:c0:d8:ed:f1:
b0:5d:18:5a:4c:cd:05:86:7b:6e:03:01:ae:b4:f2:
41:48:bd:76:6a:bd:a4:bf:6d:e0:fc:89:ab:a2:88:
f5:0d:50:d9:5a:17:5f:8d:89:7b:f9:6f:c8:99:ca:
97:fd:d9:27:00:69:8a:85:90:13:eb:aa:31:21:ba:
8e:9b:d2:44:1a:87:b6:65:0f:bf:93:4f:95:4f:29:
e6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:24:98:ED:C3:FD:1F:86:B6:9E:B5:09:2A:3A:E0:E5:14:7E:84:AB
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/322e35392e3135362e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.156.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:96:da:2e:c3:c4:d6:07:e0:96:74:d0:94:d8:52:b2:73:41:
fc:c2:1e:3b:8e:db:e7:09:c6:2b:6c:b8:92:0b:50:f0:19:eb:
53:95:f9:2b:b3:51:36:08:ae:f9:da:70:6a:94:ec:89:36:8e:
9b:92:c0:e3:30:34:92:e7:e5:4a:31:90:12:aa:04:e1:e1:44:
9f:a3:29:35:bc:07:21:26:a7:3c:c7:b6:19:fd:6f:ab:04:84:
f3:62:c8:57:bc:31:8d:6b:7b:46:d0:38:24:dd:56:16:9c:c8:
9f:93:fa:41:46:3b:e5:e9:13:38:1f:e0:92:e3:6b:ba:a4:18:
82:96:5c:6f:0d:79:30:16:6d:2e:73:fa:e1:c5:6a:5c:98:c0:
d4:44:1f:0c:5e:a9:76:41:12:a2:08:5a:3b:89:e6:19:a5:7e:
6b:15:9e:bd:27:ed:6f:77:26:5a:dc:12:e2:2c:cc:81:0d:fa:
f9:b0:72:4f:7e:8a:3a:f4:e4:d2:a9:22:68:2f:f5:19:83:48:
73:03:fd:a1:f2:a0:08:00:9b:ba:a4:55:c4:5b:00:67:76:6f:
a6:a8:be:e3:2b:e8:fb:3c:29:65:eb:df:b0:ed:8b:c6:b0:67:
aa:1a:8d:59:9c:4c:55:42:55:7e:a3:cb:39:a0:72:02:9b:c1:
4e:42:50:43
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUWo7H77oiijOG30EYoWY5Xu3TKI0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA3MDExNTIxMDFaFw0yNzA2MzAxNTI2MDFaMDMxMTAvBgNV
BAMTKDU5MjQ5OEVEQzNGRDFGODZCNjlFQjUwOTJBM0FFMEU1MTQ3RTg0QUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2EIdopDT0cDn/4jSnICqsgFEX
co9m1EOQ5NhG/7/7qOdDeuOOto9lrYsjJ2C5MJAcN1PFc1zSQ3jjAo+TS8CZiwUd
jEQt9fIB/AfU0bpOBtxS3lGtzQgdzeixhpU+aJVYkCv1t3CgA/h+0XwneYZJ2HVY
TXJ6z8Q/xJu1Jiv0nsUB9RipGDJ2vbJnU+1ylSGMjMOjDjW3n2h+WLZvx4Ugz1a5
dAeaHOUPYLDjJCokwNjt8bBdGFpMzQWGe24DAa608kFIvXZqvaS/beD8iauiiPUN
UNlaF1+NiXv5b8iZypf92ScAaYqFkBPrqjEhuo6b0kQah7ZlD7+TT5VPKeYtAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUWSSY7cP9H4a2nrUJKjrg5RR+hKswHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIyZTM1MzkyZTMxMzUzNjJl
MzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM1MzEzMTM2Mzcucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAACO5ww
DQYJKoZIhvcNAQELBQADggEBAB6W2i7DxNYH4JZ00JTYUrJzQfzCHjuO2+cJxits
uJILUPAZ61OV+SuzUTYIrvnacGqU7Ik2jpuSwOMwNJLn5UoxkBKqBOHhRJ+jKTW8
ByEmpzzHthn9b6sEhPNiyFe8MY1re0bQOCTdVhacyJ+T+kFGO+XpEzgf4JLja7qk
GIKWXG8NeTAWbS5z+uHFalyYwNREHwxeqXZBEqIIWjuJ5hmlfmsVnr0n7W93Jlrc
EuIszIEN+vmwck9+ijr05NKpImgv9RmDSHMD/aHyoAgAm7qkVcRbAGd2b6aovuMr
6Ps8KWXr37Dti8awZ6oajVmcTFVCVX6jyzmgcgKbwU5CUEM=
-----END CERTIFICATE-----
Generated at Tue Jul 21 02:15:45 2026 by rpki-client