Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138322e3138362e302f32332d3332203d3e203531313637.roa
File: 3138352e3138322e3138362e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier: SA+94X6LsYA8ETalepF15i4OV4+eHKt0LN9zt3OcJjo=
Subject key identifier: B5:60:11:D1:8C:B9:2D:F0:9C:B7:20:40:51:86:29:F7:88:A6:CB:70
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 26D522FD88498B599A38B8E42FDF4C6186DC8CCE
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138322e3138362e302f32332d3332203d3e203531313637.roa
Signing time: Fri 24 Jul 2026 15:26:49 +0000
ROA not before: Fri 24 Jul 2026 15:21:49 +0000
ROA not after: Fri 23 Jul 2027 15:26:49 +0000
asID: 51167
IP address blocks: 185.182.186.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:d5:22:fd:88:49:8b:59:9a:38:b8:e4:2f:df:4c:61:86:dc:8c:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 24 15:21:49 2026 GMT
Not After : Jul 23 15:26:49 2027 GMT
Subject: CN=B56011D18CB92DF09CB72040518629F788A6CB70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:15:0a:bb:7b:6a:be:a2:8e:f5:ec:c3:fc:00:
eb:dd:4b:81:f8:75:01:82:aa:b5:49:94:19:d2:3d:
f6:3b:9e:fd:9d:cb:3c:5a:1a:ff:3e:3f:ff:f0:38:
3f:35:35:1c:c1:72:ca:b9:9f:b6:6a:c2:14:98:bb:
8e:51:0d:da:d0:b5:fb:f3:5b:9c:55:00:47:11:49:
1c:e6:8e:1b:09:d4:31:bb:83:2c:e9:b6:0e:15:5a:
33:ce:c8:7a:74:89:89:51:54:fc:fa:81:27:ea:fb:
3f:25:15:e6:c0:70:d6:09:9f:94:87:79:59:13:3c:
b2:e6:45:dd:4e:6a:e1:54:7b:a7:66:16:5f:c5:d2:
b9:37:37:28:11:e2:e5:1a:19:42:6a:09:bb:65:50:
e7:1e:0a:b9:ab:64:56:51:44:20:94:6e:2c:a3:df:
d2:ac:1d:f0:c6:23:d3:12:4d:ef:5e:cc:31:e2:88:
ba:4c:7b:44:41:b9:11:e2:6d:e6:d3:7e:3f:78:fe:
ab:89:14:d9:ef:f9:78:8d:56:ce:fb:88:41:2c:c7:
e7:22:86:22:fe:b6:07:89:83:e9:b5:82:51:49:b8:
3a:3e:c0:33:9a:c6:f7:4c:e8:dc:8a:09:72:0a:f6:
d9:9f:90:a4:31:45:1f:e8:51:e7:66:f9:12:5e:75:
44:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:60:11:D1:8C:B9:2D:F0:9C:B7:20:40:51:86:29:F7:88:A6:CB:70
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138322e3138362e302f32332d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.182.186.0/23
Signature Algorithm: sha256WithRSAEncryption
17:13:d6:83:65:4f:6f:1c:f4:e5:ff:cd:1e:84:3c:96:43:37:
a9:11:a9:aa:4c:dc:5d:74:6a:8a:25:22:1c:3b:76:b0:bd:24:
76:bb:eb:97:9f:62:d3:98:fd:b4:27:98:dc:3e:cc:bb:a2:3e:
bd:f7:53:56:c1:27:5f:b6:e3:19:82:29:cc:07:30:69:85:d5:
5d:0f:2f:25:16:b4:ce:2e:31:44:d0:2a:25:4b:75:19:99:64:
ab:f5:64:23:22:b1:05:59:06:64:cf:08:3b:0a:e4:a9:31:16:
cc:ea:0d:d3:11:4f:1b:29:b3:17:eb:b5:05:39:5d:67:92:1e:
aa:73:98:36:6b:8e:8b:f8:a6:72:5c:e7:c7:14:48:5c:f3:e7:
1b:da:28:04:73:5a:fe:b5:04:f1:ed:b6:bf:06:88:d8:0a:47:
24:c4:3f:66:d1:4a:4f:87:eb:ff:eb:e6:9b:1c:6e:80:11:bc:
d6:8a:ac:83:eb:a6:2a:dd:94:b5:94:7d:50:94:a3:4e:84:33:
1a:ce:78:d6:88:f9:3a:58:96:fb:d6:e1:8e:26:61:c6:11:37:
dc:78:50:1d:35:30:48:2c:a9:29:41:3e:ab:02:21:88:83:8b:
4c:74:17:7e:1d:e9:5b:5a:fe:b0:95:3d:68:fe:10:26:2f:1b:
65:83:d5:63
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUJtUi/YhJi1maOLjkL99MYYbcjM4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA3MjQxNTIxNDlaFw0yNzA3MjMxNTI2NDlaMDMxMTAvBgNV
BAMTKEI1NjAxMUQxOENCOTJERjA5Q0I3MjA0MDUxODYyOUY3ODhBNkNCNzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqFQq7e2q+oo717MP8AOvdS4H4
dQGCqrVJlBnSPfY7nv2dyzxaGv8+P//wOD81NRzBcsq5n7ZqwhSYu45RDdrQtfvz
W5xVAEcRSRzmjhsJ1DG7gyzptg4VWjPOyHp0iYlRVPz6gSfq+z8lFebAcNYJn5SH
eVkTPLLmRd1OauFUe6dmFl/F0rk3NygR4uUaGUJqCbtlUOceCrmrZFZRRCCUbiyj
39KsHfDGI9MSTe9ezDHiiLpMe0RBuRHibebTfj94/quJFNnv+XiNVs77iEEsx+ci
hiL+tgeJg+m1glFJuDo+wDOaxvdM6NyKCXIK9tmfkKQxRR/oUedm+RJedUTDAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUtWAR0Yy5LfCctyBAUYYp94imy3AwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMTM4MzIyZTMx
MzgzNjJlMzAyZjMyMzMyZDMzMzIyMDNkM2UyMDM1MzEzMTM2Mzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAG5trowDQYJKoZIhvcNAQELBQADggEBABcT1oNlT28c9OX/zR6EPJZDN6kRqapM
3F10aoolIhw7drC9JHa765efYtOY/bQnmNw+zLuiPr33U1bBJ1+24xmCKcwHMGmF
1V0PLyUWtM4uMUTQKiVLdRmZZKv1ZCMisQVZBmTPCDsK5KkxFszqDdMRTxspsxfr
tQU5XWeSHqpzmDZrjov4pnJc58cUSFzz5xvaKARzWv61BPHttr8GiNgKRyTEP2bR
Sk+H6//r5pscboARvNaKrIPrpirdlLWUfVCUo06EMxrOeNaI+TpYlvvW4Y4mYcYR
N9x4UB01MEgsqSlBPqsCIYiDi0x0F34d6Vta/rCVPWj+ECYvG2WD1WM=
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:11:29 2026 by rpki-client