Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138342e3138382e302f32342d3234203d3e203531313637.roa
File: 3138352e3138342e3138382e302f32342d3234203d3e203531313637.roa (raw, json)
Hash identifier: /IpsmmN9LA1PSc7TytrBEDg2oYt+xUsnL8yl0irfHXQ=
Subject key identifier: 77:92:BC:A4:D2:59:2A:C8:A3:8E:38:65:5A:8C:09:71:79:E1:AF:57
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0F78FE77A3F64F4C34975823DD845173E9030346
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138342e3138382e302f32342d3234203d3e203531313637.roa
Signing time: Fri 14 Aug 2026 21:28:01 +0000
ROA not before: Fri 14 Aug 2026 21:23:01 +0000
ROA not after: Fri 13 Aug 2027 21:28:01 +0000
asID: 51167
IP address blocks: 185.184.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:78:fe:77:a3:f6:4f:4c:34:97:58:23:dd:84:51:73:e9:03:03:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 14 21:23:01 2026 GMT
Not After : Aug 13 21:28:01 2027 GMT
Subject: CN=7792BCA4D2592AC8A38E38655A8C097179E1AF57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3e:7c:26:4e:d6:95:18:a8:55:eb:4a:6d:1b:
44:20:30:30:94:cc:68:26:98:dc:ec:50:a3:71:a1:
66:88:91:b2:88:3a:52:dd:71:39:a2:74:d6:ee:41:
07:88:6c:d7:b4:13:8a:34:e5:5f:a7:7a:c0:1a:c1:
35:5f:71:be:a6:35:ad:57:7f:58:4b:d2:54:87:e3:
61:44:d3:ae:46:45:d5:e3:21:53:3e:20:7a:10:46:
ea:32:2d:58:44:8d:75:70:d4:a8:2b:32:81:a4:9d:
3d:30:50:07:54:61:1e:80:fe:69:8a:26:37:e8:08:
c2:05:59:2c:ef:b3:1e:a2:1e:41:43:cd:cf:fa:d1:
a7:88:1b:f3:a4:2e:84:10:8b:ad:5f:f9:c3:ff:6b:
95:d0:2c:69:29:0b:f7:40:98:a6:31:91:8e:e0:39:
14:7a:59:3c:90:4a:94:7c:a6:33:ae:e5:6b:6c:9d:
de:c1:2b:05:3e:e9:87:d4:62:37:10:d4:4e:91:40:
b3:e9:1c:5b:66:b2:35:62:73:3f:77:e7:77:5a:75:
10:2b:89:b1:d6:79:27:e4:45:0b:a2:68:68:fb:2d:
57:b9:12:40:8f:5d:1f:0e:10:73:3b:5d:d3:1d:d4:
a0:e7:5f:0b:90:0d:28:1a:4b:7a:f8:3d:60:87:09:
c8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:92:BC:A4:D2:59:2A:C8:A3:8E:38:65:5A:8C:09:71:79:E1:AF:57
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138342e3138382e302f32342d3234203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.188.0/24
Signature Algorithm: sha256WithRSAEncryption
98:f1:54:c2:c5:e8:bb:55:7e:59:b4:30:f6:df:52:fc:7c:4a:
04:2c:ce:ea:5e:10:f1:31:9c:e0:bd:34:bb:40:7f:6a:24:38:
34:98:7f:e1:45:95:29:df:58:a7:7a:cc:78:93:ea:5a:3f:e2:
73:f5:97:0a:d9:bf:11:50:75:be:6f:7a:69:2f:2e:50:de:4e:
c2:1e:0a:95:45:2c:40:f7:fb:0f:51:d4:41:7f:66:3b:54:6d:
9d:9b:b4:97:ed:82:62:a0:85:19:fc:57:17:48:2c:82:76:13:
41:98:ba:11:ee:f2:44:10:5d:da:e5:67:9b:b6:4c:ca:2e:d3:
45:b2:6a:a1:0e:cc:58:dd:3c:31:a3:49:90:06:df:2a:6a:fa:
fd:97:b8:34:3c:64:28:83:8d:e9:c5:7a:1b:85:d7:05:a9:7d:
a3:22:79:3f:98:f4:78:c5:a5:91:36:c2:5e:35:fa:d5:f1:f8:
15:2d:35:77:4e:d6:11:bc:c2:3a:16:b0:e2:06:c8:0a:52:9f:
da:1a:a1:fd:83:51:69:03:8e:33:01:70:b1:0e:b0:39:65:de:
03:e6:9f:c1:d5:0e:3b:7b:a0:69:47:8d:24:ff:a5:3b:ff:13:
92:32:d5:bb:3e:e0:40:e3:e1:ad:16:fe:18:ff:9b:86:2f:07:
8e:23:40:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:18:03 2026 by rpki-client