Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39312e3233302e3131302e302f32342d3332203d3e203531313637.roa
File: 39312e3233302e3131302e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: /n5xB7xpPY/6mRznVd4HtdNST655gnQPcsUyM0f7p9Q=
Subject key identifier: F3:73:F7:11:7F:DC:17:7E:67:6E:D0:16:4E:35:18:EE:FA:47:72:87
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7985053603600C904E5CDEA124044F00C9291C45
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39312e3233302e3131302e302f32342d3332203d3e203531313637.roa
Signing time: Wed 01 Jul 2026 15:26:01 +0000
ROA not before: Wed 01 Jul 2026 15:21:01 +0000
ROA not after: Wed 30 Jun 2027 15:26:01 +0000
asID: 51167
IP address blocks: 91.230.110.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:85:05:36:03:60:0c:90:4e:5c:de:a1:24:04:4f:00:c9:29:1c:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 1 15:21:01 2026 GMT
Not After : Jun 30 15:26:01 2027 GMT
Subject: CN=F373F7117FDC177E676ED0164E3518EEFA477287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a7:ad:88:7f:c2:56:5e:de:71:c6:0e:77:41:
2c:bb:a8:e9:38:48:81:be:23:cf:8d:49:16:8a:f2:
c2:ca:09:34:ed:e2:6e:9f:c9:ef:cd:66:dc:f2:5b:
23:02:de:a5:7f:d4:27:70:dd:97:a5:73:20:97:9b:
0b:29:9a:ce:8f:b8:d3:34:6d:cd:22:ee:50:7b:93:
2e:3e:31:6d:52:59:1c:e8:5c:1d:8f:23:78:3c:5e:
ab:6b:d2:94:25:86:90:ef:18:dd:66:b0:dc:a9:1a:
77:6b:8b:bf:53:ab:e0:0b:63:19:1a:f7:70:77:b4:
f6:6a:a9:f9:70:aa:de:91:89:1c:aa:67:4d:04:b8:
97:0a:03:ef:62:61:a3:ee:62:3b:c5:6b:cc:b8:11:
a1:7e:6c:b8:71:2b:04:a4:a9:b9:a4:05:8a:b3:c4:
9b:e9:d2:77:c5:b4:76:ae:96:66:d6:10:3d:df:37:
78:98:0a:93:48:99:85:f1:f6:47:b2:bd:20:10:55:
07:e0:fa:09:31:d6:28:d5:f2:38:7a:46:82:83:1b:
01:bc:4f:61:05:24:db:1a:5c:a8:31:c8:71:8a:8b:
97:dd:c0:76:30:ee:f6:cf:99:15:b0:bc:28:9d:23:
0e:53:dc:21:63:30:95:4a:4d:a3:ce:85:76:76:44:
50:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:73:F7:11:7F:DC:17:7E:67:6E:D0:16:4E:35:18:EE:FA:47:72:87
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39312e3233302e3131302e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.110.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:77:9e:c6:2e:46:03:08:f4:4f:b3:aa:6e:7b:48:fa:cb:5c:
ed:48:9d:ca:f8:e6:6c:90:15:8d:12:3c:e0:98:91:2c:b6:e2:
2e:18:c1:2b:b9:41:45:a0:c5:5d:af:3b:0a:e9:24:eb:f5:b8:
a1:e7:c2:1d:25:06:c7:e1:3f:3f:18:35:a7:d6:23:db:b7:4d:
bb:df:1e:f3:7a:87:c9:2e:e2:68:9c:6b:17:8b:4b:91:01:12:
7a:41:cd:7f:0f:59:0b:e2:10:6a:89:81:c4:65:b7:46:e7:26:
2f:f5:42:34:5c:38:8b:35:d4:21:3c:83:38:b2:8b:f4:45:17:
52:48:6c:09:da:49:58:31:36:df:26:e0:b6:42:1e:cd:d4:6f:
ae:e1:aa:b6:30:fe:e8:71:33:56:4b:5f:1a:72:15:fe:57:5a:
2a:0a:bb:e2:77:6e:2f:2c:a4:27:09:19:5f:7d:49:23:41:2e:
24:3d:c4:7d:54:a5:45:29:ea:54:82:05:a7:a2:8b:f7:c8:b6:
37:43:32:97:b5:fd:cc:a9:80:1f:f0:d3:b8:1b:28:5d:1b:8c:
21:93:56:b3:5d:4b:f7:3d:89:35:9a:c1:ef:84:39:61:5b:13:
aa:41:a0:67:7b:29:c2:5c:06:4a:02:fd:bc:7b:95:ab:17:83:
06:d5:3a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:55:35 2026 by rpki-client