Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3233322e302f32332d3234203d3e203631333137.roa
File: 3138352e3138372e3233322e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier: XlqwfFkqlKgrnQ5vaeyplJ6ztLWMtAP2x//btSq49Xg=
Subject key identifier: C5:90:7C:54:11:0D:F6:C8:A0:0A:F8:3B:B7:D2:7A:3E:57:92:8E:4D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 47A46BB72D440857F88423982FF03212E34AFC9B
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3233322e302f32332d3234203d3e203631333137.roa
Signing time: Fri 24 Jul 2026 15:26:50 +0000
ROA not before: Fri 24 Jul 2026 15:21:50 +0000
ROA not after: Fri 23 Jul 2027 15:26:50 +0000
asID: 61317
IP address blocks: 185.187.232.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:12:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:a4:6b:b7:2d:44:08:57:f8:84:23:98:2f:f0:32:12:e3:4a:fc:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 24 15:21:50 2026 GMT
Not After : Jul 23 15:26:50 2027 GMT
Subject: CN=C5907C54110DF6C8A00AF83BB7D27A3E57928E4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cf:9d:08:c7:e7:68:73:d3:2c:e5:c9:d3:b3:
8c:e4:7e:d9:da:ed:b5:bc:09:1b:c3:47:4f:0b:62:
2e:b3:b7:b3:4d:ec:e1:3c:2f:98:ee:63:58:42:23:
01:ee:78:40:e1:81:56:d5:87:58:2d:6e:9e:90:b3:
a0:c5:e1:3c:ec:be:f9:6f:24:0b:01:73:60:e3:f9:
a4:51:60:1c:ea:d5:c2:4a:22:ce:f7:a6:9b:22:ea:
b2:45:4c:72:31:37:3b:8a:d2:80:d6:e8:a5:71:fb:
2e:19:de:f1:90:2d:89:8d:ab:18:a9:4c:47:e2:a6:
fa:d3:79:a1:e4:5c:17:87:96:68:35:fd:27:c6:91:
93:d3:c0:f9:24:b5:a4:6a:4e:af:f3:91:1c:f2:8d:
ff:ec:c2:f5:bd:db:d3:66:dc:a1:07:3a:5c:24:18:
6e:fe:52:0c:c7:33:25:99:45:ca:59:d2:d1:2e:1b:
d3:2d:f7:22:7e:20:64:58:2b:5b:df:1c:77:cf:54:
1f:77:fd:4c:e6:e1:10:06:0e:cd:6f:c4:12:d7:f2:
b3:52:b3:39:a5:7a:c3:7f:b9:dc:9f:39:6e:65:7a:
40:cc:45:b6:78:7f:36:1b:99:37:cc:0c:38:2d:61:
92:e0:ae:4b:83:9c:ad:3b:2b:2b:db:db:8b:89:a6:
6a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:90:7C:54:11:0D:F6:C8:A0:0A:F8:3B:B7:D2:7A:3E:57:92:8E:4D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3233322e302f32332d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.232.0/23
Signature Algorithm: sha256WithRSAEncryption
92:1a:7f:02:d2:e7:9b:81:1f:c7:ea:15:1e:8b:9d:74:a0:fa:
fc:38:d3:f9:43:bf:5c:67:79:d6:f9:f3:d6:c3:a5:0f:89:fb:
19:00:92:39:d3:4d:7a:cd:ac:cc:ad:9d:37:cc:52:af:35:cb:
d1:6a:ab:df:95:2b:6f:10:12:d4:eb:a7:21:25:01:95:1f:a6:
ec:fb:12:9e:12:f4:0e:40:81:67:1d:91:0c:70:a3:a0:85:e6:
0c:20:0b:27:c4:b6:ac:14:5f:a4:5b:13:74:ac:4a:b0:f4:80:
3d:94:a3:b1:15:2e:11:c1:19:8e:b2:10:56:49:fe:f0:af:c2:
a4:a6:5d:dc:6e:7e:2e:15:e6:ed:03:45:60:c1:53:18:8d:42:
0f:c5:b0:fc:84:76:5b:f8:21:8b:04:e4:4e:5a:63:54:1d:51:
bb:9a:3f:21:07:14:ef:07:7b:d8:44:c3:56:4f:81:d5:42:32:
c1:2e:ce:c9:97:4c:31:9a:11:28:d0:fa:8f:4f:bc:45:ef:a6:
8d:74:97:2b:13:0f:fc:d2:90:3c:8c:8e:f2:47:a8:a9:50:b2:
89:05:96:b7:2e:4a:9b:2e:68:9c:93:df:7b:f5:21:34:d3:49:
ac:44:75:06:97:0c:54:a3:0f:c3:23:4f:16:ca:7f:30:21:3b:
ef:64:13:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:21:46 2026 by rpki-client