Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3233332e302f32342d3234203d3e20323632323837.roa
File: 3138352e3138372e3233332e302f32342d3234203d3e20323632323837.roa (raw, json)
Hash identifier: 1BHIkN/GzDhX9EkrbJ9GT7jeqRshbLw25Qwrg97Pgiw=
Subject key identifier: 95:A3:11:60:05:F1:17:E4:0E:8E:42:A4:4E:83:1F:A8:06:81:D5:30
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3C09608D494716D4DF38B22922D72423C8EFD7F6
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3233332e302f32342d3234203d3e20323632323837.roa
Signing time: Fri 17 Apr 2026 11:23:46 +0000
ROA not before: Fri 17 Apr 2026 11:18:46 +0000
ROA not after: Fri 16 Apr 2027 11:23:46 +0000
asID: 262287
IP address blocks: 185.187.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 11:27:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:09:60:8d:49:47:16:d4:df:38:b2:29:22:d7:24:23:c8:ef:d7:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 17 11:18:46 2026 GMT
Not After : Apr 16 11:23:46 2027 GMT
Subject: CN=95A3116005F117E40E8E42A44E831FA80681D530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c5:e7:cb:8e:66:b3:7e:d8:fc:34:6b:b0:8b:
b0:54:4c:37:9f:5f:8e:b6:1f:58:4b:f8:23:72:53:
0d:18:ba:94:1d:9a:ad:9d:93:f4:7d:a4:cd:6e:25:
ea:f7:3e:85:a8:0b:0d:dc:0f:53:26:cf:c5:82:2f:
d9:c7:75:81:4a:31:c4:1b:dd:db:04:4b:fc:dd:ea:
47:7d:2e:bb:6d:af:7c:9d:9e:c6:cf:f7:72:f9:05:
d0:23:ba:fe:c4:45:28:fd:9b:0b:7a:b1:04:c1:ef:
29:f4:ad:d3:19:80:84:81:61:2d:c0:a0:84:5e:0d:
b7:fa:41:4a:e3:86:8f:ad:73:50:48:80:bd:1a:3d:
29:4b:91:0d:39:91:84:68:0f:c5:02:38:45:3d:af:
13:1b:53:62:2d:a7:bb:a1:84:9d:e6:a8:6f:16:0b:
ca:bc:6c:c3:77:bd:c6:17:2a:ce:5b:73:31:20:5b:
00:ad:1e:50:a9:d6:eb:37:da:d8:0e:96:62:89:b4:
37:a3:a6:18:92:bd:78:f6:75:b0:fc:a7:08:0e:f7:
14:d4:d7:6f:49:a5:6b:8f:0b:e4:59:02:3a:61:0a:
f5:58:7f:65:26:55:d5:36:07:25:6e:37:61:93:d5:
b0:4f:28:93:e5:3a:62:57:76:38:3b:24:4e:ec:e2:
15:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A3:11:60:05:F1:17:E4:0E:8E:42:A4:4E:83:1F:A8:06:81:D5:30
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3233332e302f32342d3234203d3e20323632323837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.233.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:f4:1b:9d:d6:08:cb:67:6c:b2:fb:3d:d9:03:e4:1b:b5:c2:
25:00:34:5c:87:29:f9:8d:af:c0:9e:4d:42:0b:8b:cc:4c:60:
24:4a:5c:33:cd:b3:34:4d:69:b8:cf:e9:05:fc:0f:ed:e3:db:
9f:5b:49:1b:36:8f:41:fa:e6:4f:1b:d7:78:72:ec:4a:53:86:
cd:b9:1c:cd:75:19:6c:4e:a9:af:9a:6f:a1:95:b1:a7:ca:0c:
60:92:8e:1a:80:c0:fb:6e:c5:d9:75:90:58:44:57:61:23:56:
bc:2d:46:88:2b:cb:30:1f:76:3c:9b:ec:34:ba:7a:be:ad:83:
e8:ff:bb:c4:74:9a:82:59:56:fd:90:85:c1:37:8b:9c:de:ab:
42:68:60:53:68:34:49:c6:ee:f6:34:46:ea:d3:21:e7:16:bc:
e9:26:27:2b:28:d1:b4:a1:56:b9:9f:1b:61:33:99:23:b3:c6:
d8:8c:54:7e:14:20:5e:57:3d:de:9a:ac:3e:f0:98:38:8e:57:
49:66:91:fb:49:09:5f:2a:59:7c:a6:92:9f:15:99:b7:c1:1b:
68:48:3f:e3:6c:4c:65:e1:0e:63:69:be:5a:9b:e1:5a:ab:af:
d4:44:1b:7b:ef:e4:17:95:5a:b7:e1:31:31:7a:ff:03:e1:e7:
c1:62:df:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:05:13 2026 by rpki-client