Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138322e382e302f32332d3332203d3e203531313637.roa
File: 3138352e3138322e382e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier: tsIcrT/E1D3Y3tMhxF0U+zwubeoGJ35/epI/uwVE5nA=
Subject key identifier: C7:96:77:8C:2F:8B:3A:9E:70:DE:91:65:0B:21:EA:E2:26:93:A7:39
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3FB9313763C0E9EDFD059A9A1C1D6AD8FF93768F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138322e382e302f32332d3332203d3e203531313637.roa
Signing time: Fri 24 Jul 2026 15:26:47 +0000
ROA not before: Fri 24 Jul 2026 15:21:47 +0000
ROA not after: Fri 23 Jul 2027 15:26:47 +0000
asID: 51167
IP address blocks: 185.182.8.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:12:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:b9:31:37:63:c0:e9:ed:fd:05:9a:9a:1c:1d:6a:d8:ff:93:76:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 24 15:21:47 2026 GMT
Not After : Jul 23 15:26:47 2027 GMT
Subject: CN=C796778C2F8B3A9E70DE91650B21EAE22693A739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:12:2d:13:a4:52:ea:c0:d1:ad:39:4b:17:a6:
dc:6e:70:f1:62:d4:00:2d:40:d3:b8:e8:1c:84:bd:
22:d7:03:5c:d6:df:2a:26:cf:95:8f:20:59:2f:ad:
09:a8:b1:69:12:01:d6:d0:4e:fc:e3:d5:c0:2f:d0:
d6:0c:64:e7:fd:79:13:6e:9c:c0:45:d4:35:9a:34:
98:12:68:17:21:60:0d:c0:e4:43:a8:4a:79:6a:ad:
3b:e8:7e:e1:6a:81:c8:9a:eb:44:5e:cb:b1:ff:34:
5e:a7:e4:63:3b:92:92:1e:74:8a:8e:d4:d4:a2:82:
b8:ef:ac:0b:1f:98:48:52:38:5b:f5:14:e4:7a:f7:
d7:66:12:0f:e3:45:c7:69:16:5c:b0:ce:39:f9:79:
c3:1c:5d:54:cb:21:2e:dd:b0:d7:14:c9:f3:15:53:
a4:4b:c6:a9:50:57:ba:3d:7b:5b:f0:5b:d2:f0:12:
8b:53:72:ce:2e:9a:96:4a:d4:a0:a6:7a:c4:f1:f4:
f4:86:2b:cd:88:85:b8:28:ee:a4:bc:ec:0e:4b:1c:
bb:dd:12:3d:7a:5c:21:e1:f4:80:01:8e:26:e0:37:
68:6b:2a:f0:c2:28:ce:8b:f3:54:b0:dd:62:f6:f8:
c6:75:c1:37:c6:f1:0e:fa:c2:00:56:48:23:6f:5e:
a4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:96:77:8C:2F:8B:3A:9E:70:DE:91:65:0B:21:EA:E2:26:93:A7:39
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138322e382e302f32332d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.182.8.0/23
Signature Algorithm: sha256WithRSAEncryption
88:6d:ee:5c:f5:ca:c0:94:39:6a:74:72:09:70:85:64:48:25:
82:a3:db:66:28:35:25:b4:69:6c:62:3a:98:fe:62:35:74:28:
86:08:27:04:da:a1:cb:17:0f:52:de:a6:44:2b:8e:23:fd:6e:
8c:9f:ee:e5:c9:69:f9:13:6a:36:53:6b:d0:18:ff:b8:df:8f:
ef:85:e4:65:ae:ba:f4:74:6c:3c:f3:6b:9f:56:4c:4c:20:a9:
ff:d6:3e:fd:f1:e4:07:38:64:8e:03:ac:73:47:2c:d0:8b:89:
77:bb:0e:39:5f:f7:3b:b4:11:30:b2:b8:ff:c1:1b:a1:0c:a4:
15:90:e3:b6:dc:da:43:93:2b:82:f9:eb:cd:c8:57:d7:90:3e:
fd:a5:4b:08:da:98:67:b1:c8:c4:7a:e7:bb:33:5f:4b:cc:fa:
05:ff:c2:3a:c6:62:05:e8:ca:44:14:d1:90:58:b2:ab:78:18:
83:22:a6:5a:25:f0:41:b0:10:24:20:08:45:98:9f:b1:03:11:
5d:b3:6c:7c:2c:67:d5:35:70:ba:1c:21:74:83:17:bf:c0:fa:
bc:b2:09:9c:0a:60:6b:45:c0:07:ea:e3:e6:96:9a:ba:7a:70:
20:94:8e:73:7d:18:74:3c:eb:7e:10:06:2f:32:c8:42:6b:ce:
3b:d9:ee:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:35:24 2026 by rpki-client