Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39312e3232392e3234352e302f32342d3332203d3e203531313637.roa
File: 39312e3232392e3234352e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: UL/nEFV3A1OB4Xj7yHQxxbDpsLwAIGTSmy1OyA5m9rE=
Subject key identifier: 4D:2A:5C:53:89:8A:D8:61:F2:85:F3:91:D9:28:9E:73:DA:1B:C3:D9
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 32211731B5C489114B0DDCFC7A615B490CBC54E2
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39312e3232392e3234352e302f32342d3332203d3e203531313637.roa
Signing time: Wed 01 Jul 2026 15:25:59 +0000
ROA not before: Wed 01 Jul 2026 15:20:59 +0000
ROA not after: Wed 30 Jun 2027 15:25:59 +0000
asID: 51167
IP address blocks: 91.229.245.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:21:17:31:b5:c4:89:11:4b:0d:dc:fc:7a:61:5b:49:0c:bc:54:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 1 15:20:59 2026 GMT
Not After : Jun 30 15:25:59 2027 GMT
Subject: CN=4D2A5C53898AD861F285F391D9289E73DA1BC3D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a0:fc:78:ab:b3:00:23:49:20:44:5f:c6:ed:
d7:40:4b:14:cf:88:10:a3:4c:8e:5f:99:f4:53:5b:
f9:4a:18:e6:69:df:16:3a:e9:29:41:6a:cf:74:7c:
29:66:11:82:86:d1:74:f1:41:24:fb:42:4d:f7:91:
b7:30:b5:00:0f:2c:f9:9c:6e:e0:e0:67:35:59:ed:
9d:fd:3d:71:f9:af:f5:84:fa:47:2a:0f:63:4b:46:
87:59:e7:5c:99:c5:fb:e0:db:43:f7:db:7e:4c:4c:
2d:34:50:72:d7:e2:13:a8:42:87:d6:3d:5f:ae:08:
82:02:0e:74:04:3c:86:92:b3:2c:e6:1c:54:eb:83:
a1:a1:70:0a:4d:8e:8b:d1:a3:40:bd:23:25:0a:68:
ed:84:c8:ce:62:68:32:0f:bf:c5:69:59:3c:8f:4b:
f3:dd:06:27:f0:a8:38:1b:cb:b7:b9:59:c1:b2:29:
38:6c:bc:c4:dc:81:36:65:c1:66:d1:69:b1:cd:4e:
59:1c:8d:2a:ff:c6:6d:f6:c3:9a:b0:e0:8d:0d:8b:
ae:9f:64:48:40:a2:35:25:3b:31:12:7d:63:63:42:
06:c3:2a:0a:a6:af:28:cb:de:d6:15:37:af:8d:02:
18:da:94:cb:7d:1d:b3:aa:19:ff:51:c1:dc:6e:d3:
16:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:2A:5C:53:89:8A:D8:61:F2:85:F3:91:D9:28:9E:73:DA:1B:C3:D9
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39312e3232392e3234352e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.245.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:dd:ca:0a:78:33:5b:13:ad:b3:70:a5:18:34:16:26:ad:68:
18:ae:66:52:be:c3:81:16:4f:38:27:f8:de:e5:8f:43:a2:21:
c8:35:b2:5d:35:4f:5d:75:f4:57:43:5b:6f:08:30:49:8d:93:
f1:70:b3:06:2a:09:8c:e3:b3:9a:93:55:e5:c5:ad:5e:3d:95:
46:11:b2:96:68:b5:17:66:81:5e:e0:92:6c:9d:20:bb:53:0e:
f6:32:fe:f2:df:77:d4:ef:e1:50:55:9b:bc:7b:32:6c:d2:3e:
ac:6a:63:3e:ed:99:90:fd:13:72:3d:4c:09:b2:e4:4e:5e:ea:
09:98:8f:2c:db:d3:8c:de:33:a0:f3:8d:b8:21:15:de:79:86:
d0:d8:db:fb:e9:2a:78:84:d8:17:f2:fd:c4:dc:ce:30:55:3b:
82:e7:29:eb:61:5d:77:e9:8f:0e:b3:e2:2b:e2:99:ab:47:16:
24:70:5c:2d:11:06:5c:9e:ac:ea:18:c1:84:a3:d4:fd:7b:e5:
4c:3a:b0:43:86:66:20:e6:19:ad:86:84:04:a1:15:51:4d:db:
f9:4c:3b:51:e7:bc:79:1e:16:18:40:c0:93:1f:33:33:b7:81:
24:82:29:52:88:b1:cc:2c:45:ee:33:ad:26:6a:bf:22:b5:b3:
d2:93:02:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:56:51 2026 by rpki-client