Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138322e31302e302f32342d3234203d3e20323034313730.roa
File: 3138352e3138322e31302e302f32342d3234203d3e20323034313730.roa (raw, json)
Hash identifier: N8bAhUsPKSzwpVPk+10VZCkCggxRaPLIHSWghJchE0U=
Subject key identifier: F5:4F:CF:17:01:BD:FF:8F:37:1B:DF:A4:E2:4E:E6:76:16:56:77:49
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 29BB6A2FE47B2FEC80EE843FDC4C10193D82946E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138322e31302e302f32342d3234203d3e20323034313730.roa
Signing time: Fri 24 Jul 2026 15:26:53 +0000
ROA not before: Fri 24 Jul 2026 15:21:53 +0000
ROA not after: Fri 23 Jul 2027 15:26:53 +0000
asID: 204170
IP address blocks: 185.182.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:bb:6a:2f:e4:7b:2f:ec:80:ee:84:3f:dc:4c:10:19:3d:82:94:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 24 15:21:53 2026 GMT
Not After : Jul 23 15:26:53 2027 GMT
Subject: CN=F54FCF1701BDFF8F371BDFA4E24EE67616567749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:21:64:70:d4:c3:87:8e:13:f5:7f:72:1e:2f:
76:96:17:6a:7f:3d:0f:84:21:70:dc:e1:fe:5a:b9:
b5:03:0a:52:a7:b3:42:41:94:09:dd:4e:a9:ff:43:
ed:35:56:41:81:76:fd:60:cc:5e:0d:13:33:ca:2f:
3f:6c:35:ac:1a:36:b7:bf:88:bc:e9:f3:d5:cc:ee:
5f:c4:13:46:74:8b:2f:d8:3b:85:4c:5b:d3:6a:5a:
a6:24:5d:cb:ec:ee:97:68:82:dc:bf:74:81:fe:fa:
b7:4c:e8:62:d2:bc:70:2d:e9:f0:c6:2a:ad:99:3a:
61:2d:4f:8f:45:3b:d8:8b:48:6b:75:a5:4d:bc:dd:
60:41:c8:67:68:bf:7d:cd:fe:cb:9d:4b:88:d2:96:
e0:df:4c:ab:fd:b0:b4:cc:d1:df:b1:f4:74:af:a7:
34:06:93:19:9e:2e:71:2d:52:fe:46:7b:62:e0:2a:
b1:cf:a8:60:8e:9c:b3:65:4b:8e:1d:cf:fe:8a:7d:
f5:df:91:58:75:99:9e:de:61:23:29:21:38:bb:9e:
eb:7c:85:54:55:76:c4:61:e0:68:4d:3a:02:dd:62:
6c:4a:5f:2b:11:dc:5b:06:80:52:05:30:9a:3e:0d:
e3:e0:cc:f1:16:73:53:3c:9d:90:42:92:4a:60:b7:
4a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:4F:CF:17:01:BD:FF:8F:37:1B:DF:A4:E2:4E:E6:76:16:56:77:49
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138322e31302e302f32342d3234203d3e20323034313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.182.10.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:fc:b7:a2:7a:92:fb:1d:5c:b3:10:9d:4f:35:94:ae:fc:ff:
70:58:fa:e9:bb:0e:bc:ce:cd:25:b4:25:9e:f4:a9:6f:e4:a9:
e6:82:8d:dc:0e:07:d6:2a:fc:fd:71:df:af:d0:08:d4:b3:f3:
f0:65:b5:d2:a9:02:13:53:ff:8e:0c:40:8c:72:89:77:63:38:
db:69:0b:4c:dc:0b:8d:98:72:e5:86:3c:0e:fa:f8:36:c9:72:
7e:8e:33:ad:1b:de:1b:d7:50:de:85:37:18:91:18:fe:3e:fa:
dc:e3:3d:bf:7f:34:f1:ad:de:61:f4:6b:6a:13:66:32:05:cf:
76:be:b4:22:f2:81:5d:46:57:cb:4f:9a:37:35:e4:04:c2:52:
1b:e2:0f:13:e9:3e:83:0c:70:53:57:f4:e0:26:a3:d2:a7:b9:
a1:37:1a:09:e8:a2:cc:4c:c6:5a:dd:3c:72:66:87:8c:c3:5e:
98:41:33:8e:57:d3:32:f1:58:92:be:25:05:cb:2f:b9:2f:bb:
d8:47:05:21:83:bd:04:2a:c1:36:61:aa:52:d2:4f:64:aa:52:
33:72:65:d4:b8:48:31:00:15:77:de:13:2b:b8:97:9e:58:ff:
ee:0c:50:15:f2:5c:5d:6b:17:a5:af:a9:8c:1e:69:03:98:90:
dd:17:fb:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:57:19 2026 by rpki-client