Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3136312e3230332e302f32342d3234203d3e20323037313337.roa
File: 3138352e3136312e3230332e302f32342d3234203d3e20323037313337.roa (raw, json)
Hash identifier: rj55rHGVd9YlcpwIEWvSWt4OkAnbYH+FDcjSGRQoAZw=
Subject key identifier: E1:C7:3B:1C:7D:5B:FC:90:3C:32:49:F5:1D:C4:C6:E0:D6:85:8F:95
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6E0138815B7A4C14A8C0CB0D80DD9DA338F14938
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3136312e3230332e302f32342d3234203d3e20323037313337.roa
Signing time: Fri 27 Feb 2026 14:23:21 +0000
ROA not before: Fri 27 Feb 2026 14:18:21 +0000
ROA not after: Fri 26 Feb 2027 14:23:21 +0000
asID: 207137
IP address blocks: 185.161.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:01:38:81:5b:7a:4c:14:a8:c0:cb:0d:80:dd:9d:a3:38:f1:49:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 27 14:18:21 2026 GMT
Not After : Feb 26 14:23:21 2027 GMT
Subject: CN=E1C73B1C7D5BFC903C3249F51DC4C6E0D6858F95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b6:06:5f:eb:b3:f0:31:e8:16:90:2e:80:08:
b4:35:df:fc:89:74:de:b0:0c:c4:f2:68:26:0f:c1:
11:29:fb:12:84:8a:1e:8a:80:75:07:f6:9f:57:13:
9c:58:89:78:bd:6a:bc:c4:9a:46:a7:8c:95:f9:58:
12:7d:c2:78:be:46:2e:36:7c:18:a7:d7:6f:f6:4e:
ee:eb:b1:fa:50:92:23:9a:09:06:4b:35:28:2a:b3:
94:90:4b:a6:06:70:79:d6:7b:13:66:95:ff:00:74:
08:82:4e:aa:85:6b:d4:8c:db:35:c1:55:82:11:7a:
6b:cf:2c:92:a2:37:70:16:68:c3:63:79:73:5e:cf:
71:44:c2:28:fa:b8:0b:5c:d6:09:27:ac:97:32:b4:
f2:cd:60:63:ff:37:1f:08:80:1c:c2:c5:58:4a:4a:
8a:61:d8:78:bc:7a:0e:63:62:07:a5:a1:04:7c:c9:
31:7e:b4:c7:c5:2d:79:01:fe:66:fe:32:41:70:5e:
33:14:6a:5b:42:9f:54:34:47:4a:68:34:32:ba:03:
6e:e3:db:6a:c8:2b:15:e8:78:e6:ca:cc:08:11:8f:
fe:3e:67:67:da:04:cf:a5:b0:2b:02:77:7a:21:eb:
17:40:70:fb:db:66:06:45:e2:20:b5:04:62:1f:1d:
84:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:C7:3B:1C:7D:5B:FC:90:3C:32:49:F5:1D:C4:C6:E0:D6:85:8F:95
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3136312e3230332e302f32342d3234203d3e20323037313337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.203.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:74:67:a2:68:8d:7f:94:32:73:1a:47:b7:c1:05:cb:8a:9f:
6c:2f:8d:02:ce:ce:b8:41:82:54:a8:28:43:45:85:fa:19:42:
ed:af:32:42:b8:61:9a:b8:d5:87:ac:df:a1:88:e1:e0:dc:5d:
89:29:f8:05:78:9a:32:7a:34:fb:6f:1e:1e:15:1c:8a:80:90:
67:c9:51:4a:d7:aa:6a:53:11:80:3d:25:06:d4:0e:22:8b:8a:
34:ba:90:37:99:a0:be:1b:b2:38:f9:c2:a2:a1:29:e4:15:73:
0e:49:44:ab:42:2a:f7:e2:46:29:88:61:e2:e8:e4:ad:ab:9a:
f0:5b:c1:da:81:33:05:bf:eb:d0:cf:89:7e:c9:e9:af:b4:b9:
45:35:c3:c7:64:9c:e9:37:4f:4a:71:01:a3:3d:f3:5b:c8:2c:
f1:ac:a1:f9:be:74:b2:b3:01:48:ed:a4:cc:5f:31:39:21:9b:
d2:3d:0d:be:29:b1:8b:cc:2f:e2:9d:22:cb:7b:b4:a0:3c:08:
90:7e:ab:61:7f:f1:f8:b4:2f:05:d4:98:b8:a8:a0:cc:08:bb:
4a:17:2d:ab:08:b5:3b:56:9a:53:ee:a5:7e:e8:29:29:e8:e7:
ea:a9:58:35:bc:d9:d4:78:4b:b2:45:91:30:3b:c4:c1:fd:c9:
dc:e8:23:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:25:23 2026 by rpki-client