Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3233342e302f32342d3234203d3e2033333536.roa
File: 3138352e3138372e3233342e302f32342d3234203d3e2033333536.roa (raw, json)
Hash identifier: B/DFx8evyJ8DTKVwiBh8eXR/83b4Be91681hWhQKhuo=
Subject key identifier: 21:63:53:55:AB:84:6E:3B:41:18:F1:C9:61:8F:06:59:8B:1B:1A:11
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3EB920D95F4225D2D0EEE6097A7C06B382CCD18C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3233342e302f32342d3234203d3e2033333536.roa
Signing time: Fri 24 Jul 2026 15:27:04 +0000
ROA not before: Fri 24 Jul 2026 15:22:04 +0000
ROA not after: Fri 23 Jul 2027 15:27:04 +0000
asID: 3356
IP address blocks: 185.187.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:b9:20:d9:5f:42:25:d2:d0:ee:e6:09:7a:7c:06:b3:82:cc:d1:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 24 15:22:04 2026 GMT
Not After : Jul 23 15:27:04 2027 GMT
Subject: CN=21635355AB846E3B4118F1C9618F06598B1B1A11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:39:53:12:3d:75:17:13:51:64:d2:64:0c:f1:
3d:b1:ff:16:2f:5b:10:6d:d9:63:0a:c7:bf:6b:1f:
28:e4:e7:95:65:ff:5b:03:ba:74:d8:95:4c:f3:52:
51:c2:e4:6c:b0:41:95:39:2f:02:e3:24:41:50:bd:
79:c5:6e:17:6c:2e:cf:3c:8e:c5:c3:91:b5:bb:5a:
06:88:23:9c:8f:93:1a:1e:6e:d9:2d:84:cb:41:29:
23:50:cf:5c:90:1e:e9:17:94:4c:66:b0:77:67:56:
52:66:ff:e0:d4:dc:f7:58:b4:e9:e7:de:2b:f9:46:
61:44:bc:b4:e0:75:dc:bc:fd:1e:ba:03:51:31:b7:
32:1a:78:3b:54:a5:9f:9c:2f:5e:4c:40:7f:18:b8:
c7:6d:29:15:87:fd:75:12:b7:05:fc:57:d1:02:e9:
db:65:a7:f2:ad:6f:76:c0:32:a8:82:01:a3:05:bc:
25:6a:fc:9f:ee:85:68:60:d7:12:7b:77:dd:68:f3:
0e:7f:a3:ce:4d:64:22:67:52:cc:00:fe:fb:a5:27:
54:7d:35:73:2f:39:87:0d:f2:d9:cc:77:38:62:1c:
23:cc:3f:c0:47:8a:b1:dd:10:70:14:fd:f3:ba:bb:
2d:57:80:54:aa:6c:96:8b:7e:98:f5:20:e7:40:2e:
59:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:63:53:55:AB:84:6E:3B:41:18:F1:C9:61:8F:06:59:8B:1B:1A:11
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3233342e302f32342d3234203d3e2033333536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.234.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:01:2f:ff:dd:12:c8:24:c3:28:3d:fb:74:8d:ae:4f:da:cb:
48:f4:5d:60:bd:48:3d:97:b8:72:fd:3f:2e:19:1a:8f:4a:97:
8a:90:b1:68:0a:2a:1b:a2:f0:14:f5:c7:35:e0:53:5e:cd:0c:
72:1c:42:0b:8d:99:b5:76:96:af:d9:fe:34:a3:eb:1e:39:d6:
a9:91:cc:09:c1:22:cf:e9:db:4f:bd:35:f0:da:b0:bf:d7:f0:
1b:bc:20:ce:f6:e2:a4:36:4f:bc:e3:ad:12:46:a4:50:72:c3:
dc:fa:2c:17:93:29:b9:ef:37:13:a1:88:0e:2f:55:2c:13:d1:
37:cd:85:d6:86:9a:dd:17:37:20:cb:27:10:42:e0:60:6a:92:
0b:a9:48:6c:e9:b8:6a:7f:51:24:14:fb:06:a9:5d:0c:68:a3:
b2:01:09:5f:c1:b3:51:91:ed:b2:80:b2:32:d3:ca:32:33:4e:
e7:3b:31:89:6b:ed:ef:51:8b:bf:69:5f:82:de:51:41:77:d0:
e9:ee:02:3b:c0:ff:0f:89:01:d4:5e:5f:58:a1:b7:6e:2f:42:
20:49:66:c2:3f:71:64:90:7b:c2:28:15:c8:0f:b2:b6:9a:f4:
39:0c:fb:a5:80:0d:c6:6b:1d:47:4d:58:00:e8:6c:44:6d:2c:
47:29:13:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:37:20 2026 by rpki-client