Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3136382e302f32342d3234203d3e20323132323338.roa
File: 3138352e3138372e3136382e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: 5ZvD1EADoirXhYms6sMrvFR+tfqX79Q3PKz2WmSil6I=
Subject key identifier: DE:C7:A5:24:05:0B:E1:55:00:99:C7:11:8E:1D:65:A0:AC:D6:56:55
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 305FD626F6FA9ACEAA592093C791CE7A7DD92DAF
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3136382e302f32342d3234203d3e20323132323338.roa
Signing time: Tue 22 Sep 2026 13:29:13 +0000
ROA not before: Tue 22 Sep 2026 13:24:13 +0000
ROA not after: Tue 21 Sep 2027 13:29:13 +0000
asID: 212238
IP address blocks: 185.187.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:49:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:5f:d6:26:f6:fa:9a:ce:aa:59:20:93:c7:91:ce:7a:7d:d9:2d:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 22 13:24:13 2026 GMT
Not After : Sep 21 13:29:13 2027 GMT
Subject: CN=DEC7A524050BE1550099C7118E1D65A0ACD65655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:62:e0:f2:8f:24:01:4f:c4:6a:7a:13:c4:41:
26:19:2c:e3:7b:4d:8c:27:8c:6b:ac:54:b3:8b:6c:
bf:90:7c:1c:28:1f:78:fa:e6:af:b1:89:38:bd:cd:
ce:af:70:80:ab:bd:c4:03:5e:8f:c7:3f:09:c4:40:
c5:33:54:85:09:d4:d1:be:92:d1:09:b3:3b:c3:a6:
44:11:57:d1:b5:4a:4a:cd:82:74:7b:0b:4d:64:64:
90:ed:25:8f:fb:32:66:ab:59:00:8c:f7:c9:84:5f:
bf:e7:0c:b3:92:e0:1f:9f:6b:51:ff:a4:a3:aa:72:
08:5d:ea:d9:70:61:bf:8a:20:be:7b:57:44:6e:1b:
8a:c4:24:49:76:40:31:f3:a4:b8:51:d4:17:80:8d:
16:d9:40:d2:57:dd:7c:17:7b:5f:72:b3:55:01:df:
e9:d4:2e:a3:9d:be:c3:a1:7d:06:1d:b5:cd:ef:0f:
24:eb:b7:b5:e9:eb:79:41:84:5c:f1:25:33:07:2a:
35:0c:d8:db:a0:29:1f:5e:93:4c:f9:d5:17:d2:36:
a9:98:f5:21:ef:be:8d:4f:25:01:7a:21:3f:06:8d:
fc:de:9e:f4:93:15:0f:03:8a:ee:57:1a:44:cf:27:
fd:b1:62:a2:87:98:0b:3c:47:56:26:b2:aa:3d:9c:
b4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C7:A5:24:05:0B:E1:55:00:99:C7:11:8E:1D:65:A0:AC:D6:56:55
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3136382e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.168.0/24
Signature Algorithm: sha256WithRSAEncryption
03:76:58:1e:30:6d:f2:2b:bd:be:37:cb:d9:a9:f5:db:8c:93:
cb:51:21:e3:11:71:7c:cb:16:9b:d7:33:7d:e9:3c:55:b6:81:
c2:24:f3:e9:1b:86:c2:7b:be:4b:2d:47:64:bc:56:52:0e:5a:
c2:97:35:ce:4a:09:60:06:b5:50:ab:c6:c7:42:af:e1:c1:25:
1e:1d:59:2b:01:89:96:3a:d9:f0:5e:20:ac:ba:f7:6c:8b:15:
26:0a:30:6d:30:76:70:ad:b3:f4:83:33:29:b3:7a:c4:19:1b:
07:6e:6a:c3:72:ef:5c:21:dc:70:63:ac:73:30:78:89:89:c5:
81:f2:26:60:d6:09:f8:48:c5:24:94:cd:60:69:c6:ae:8a:6f:
2a:3e:63:52:9f:81:2e:69:20:5f:85:6a:fe:95:0f:9a:ad:b4:
40:7b:c1:a7:aa:dd:c9:ad:21:f2:ce:d3:b1:c6:da:47:64:b5:
e7:56:89:f4:43:de:8b:5a:3d:66:84:47:8b:94:0c:1b:93:c1:
70:16:a4:21:d2:2d:77:5c:0d:cd:0b:f1:aa:29:32:33:ef:c9:
2a:49:51:ad:43:eb:4e:52:c5:1f:ff:60:23:02:11:3d:da:bf:
a0:30:eb:1b:f1:64:62:16:4e:a4:d0:f2:01:fc:2b:dd:a1:74:
a6:ea:1a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:10:53 2026 by rpki-client