Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138322e3138342e302f32332d3332203d3e203531313637.roa
File: 3138352e3138322e3138342e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier: pMrGZ9qqzvJoaqIiJeA2ppQuibA/VMCxAmKdT3DfK9I=
Subject key identifier: 79:04:AC:C1:56:AD:85:99:DE:DE:28:D6:A2:CF:55:59:C5:FD:1E:BF
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6D8741B8BBD00901838F34A149DC4B6AD9C99381
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138322e3138342e302f32332d3332203d3e203531313637.roa
Signing time: Fri 24 Jul 2026 15:26:36 +0000
ROA not before: Fri 24 Jul 2026 15:21:36 +0000
ROA not after: Fri 23 Jul 2027 15:26:36 +0000
asID: 51167
IP address blocks: 185.182.184.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:87:41:b8:bb:d0:09:01:83:8f:34:a1:49:dc:4b:6a:d9:c9:93:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 24 15:21:36 2026 GMT
Not After : Jul 23 15:26:36 2027 GMT
Subject: CN=7904ACC156AD8599DEDE28D6A2CF5559C5FD1EBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:34:b7:24:d8:f8:1b:02:e1:22:e9:0f:6f:69:
8a:36:89:40:1b:17:1f:99:2a:59:dc:3a:7c:00:65:
fd:56:7d:6c:9e:c3:07:4c:d7:f4:cf:af:72:e7:a2:
da:ac:a2:0f:3f:a0:75:b3:e4:84:54:80:8f:de:2d:
88:b7:2d:af:1c:1d:c0:11:8c:64:10:03:02:7a:83:
9b:b0:b8:80:08:cd:f7:7b:85:ec:25:11:bd:e0:1a:
16:d4:60:0f:c3:34:9d:29:2b:64:7d:ea:60:ba:77:
1c:32:9e:1b:d5:3d:dd:89:92:a6:1b:6a:ea:01:f1:
26:80:31:de:82:0d:46:55:0b:35:09:96:91:81:de:
c6:c1:09:b0:ed:ec:80:c0:b2:9f:83:84:5c:42:c5:
1d:e6:5a:c6:c8:d0:b6:5a:9d:bc:14:22:6a:27:92:
c1:35:4d:65:0d:ad:53:01:00:a7:37:b2:c9:b5:df:
69:92:87:57:c5:17:f5:8d:64:3a:e1:e1:99:83:d9:
c9:ef:13:a1:95:20:fc:f0:0c:f6:6c:ec:29:a2:0e:
5d:cb:20:30:7f:81:d6:ae:b7:b7:b6:8c:3e:78:a4:
4d:27:7f:87:fd:e4:6b:85:7a:57:26:cf:b9:65:5e:
60:99:f1:b5:a3:68:62:2c:26:96:b7:0d:2b:3b:e1:
10:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:04:AC:C1:56:AD:85:99:DE:DE:28:D6:A2:CF:55:59:C5:FD:1E:BF
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138322e3138342e302f32332d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.182.184.0/23
Signature Algorithm: sha256WithRSAEncryption
75:18:e7:31:fb:80:04:25:e6:60:56:a9:dc:db:60:66:6d:b1:
db:f5:c0:f8:84:25:3e:88:56:af:b8:4e:d5:a5:64:a7:01:c0:
e0:40:70:d4:d4:61:90:78:89:01:8f:40:0c:48:af:eb:da:52:
1d:09:80:ab:2b:d9:90:02:a6:79:7e:61:9b:bf:66:35:7e:e3:
33:a6:01:a4:3c:e4:d4:e2:24:41:10:01:98:58:3b:5f:bb:85:
ce:83:55:18:a0:a2:bb:a7:36:57:a6:1c:85:2c:74:21:69:3a:
0f:9e:71:e4:36:19:ff:95:b5:4e:24:0e:33:52:2d:e7:d3:ab:
8b:2e:aa:a8:6a:6b:70:20:5f:c8:10:f2:f5:d6:28:4f:ee:81:
a4:b2:84:47:cc:a3:e5:f3:dd:4c:c4:ec:45:1e:a3:86:fa:7f:
40:97:af:1d:4e:58:e0:40:d3:e8:5a:9b:99:ca:71:6a:ed:d6:
4d:1d:37:d4:7e:3c:a8:23:37:2d:66:76:aa:de:d3:ef:35:c5:
5e:5b:7e:e7:84:81:dd:9d:9a:30:af:c2:3b:78:be:8b:10:a1:
9d:bc:3d:00:8d:8c:f2:73:4a:42:31:90:26:11:61:d1:02:74:
64:9a:7a:b5:52:27:4e:4e:60:a4:20:54:eb:4a:a2:cb:30:59:
61:64:c9:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:02:12 2026 by rpki-client