Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3233342e302f32342d3234203d3e20333939363431.roa
File: 3138352e3138372e3233342e302f32342d3234203d3e20333939363431.roa (raw, json)
Hash identifier: jR7w4noPg8rLcTbXtKKFo88rYnIBOsi3/J6usVfcQks=
Subject key identifier: 7B:82:26:9E:33:6F:B8:4F:3E:34:35:BD:16:3D:E7:71:E8:76:E2:BF
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 624FCFB014461DDA47D68209DEC52ACB83B72174
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3233342e302f32342d3234203d3e20333939363431.roa
Signing time: Fri 24 Jul 2026 15:26:48 +0000
ROA not before: Fri 24 Jul 2026 15:21:48 +0000
ROA not after: Fri 23 Jul 2027 15:26:48 +0000
asID: 399641
IP address blocks: 185.187.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:12:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:4f:cf:b0:14:46:1d:da:47:d6:82:09:de:c5:2a:cb:83:b7:21:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 24 15:21:48 2026 GMT
Not After : Jul 23 15:26:48 2027 GMT
Subject: CN=7B82269E336FB84F3E3435BD163DE771E876E2BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e9:2f:32:6e:57:99:b3:43:c8:10:8c:ee:3e:
55:da:81:09:2d:88:e7:7c:f5:89:77:cb:01:2d:ff:
f5:01:49:dc:b0:d2:7f:07:b0:eb:c9:09:9a:dc:07:
09:c5:99:ac:8c:79:dd:42:8d:33:fd:7f:3b:fa:82:
27:b1:c8:53:1a:9c:ad:01:b6:ec:97:e0:39:da:f2:
18:57:31:ab:fb:3c:94:d4:b6:2d:0e:cb:fe:88:a6:
7a:a0:65:58:93:bc:8d:4c:e4:17:42:ad:4a:4e:2b:
ff:80:9f:fe:5d:83:a2:d8:57:24:da:1a:65:60:79:
6c:9d:88:3e:14:ba:42:c4:f0:ea:b3:d7:b4:47:76:
4e:93:7d:c7:05:4a:92:42:13:51:89:04:64:01:56:
98:63:77:35:dc:d1:8c:16:8b:8f:5f:9b:1f:7c:4c:
64:13:c2:86:d4:6d:a3:66:02:33:31:ab:ec:e7:06:
23:d9:64:a7:d1:d9:15:d7:9e:23:0d:06:f7:e6:77:
72:bb:1b:dd:30:46:ce:59:46:64:23:3e:2f:35:7e:
f8:4d:17:91:a2:fb:24:33:95:0b:2f:a5:12:06:67:
1d:9c:83:4b:43:ed:17:5d:77:1c:b8:57:31:ac:36:
56:bc:69:20:15:ef:57:7a:f7:ab:c4:49:4f:1c:75:
e9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:82:26:9E:33:6F:B8:4F:3E:34:35:BD:16:3D:E7:71:E8:76:E2:BF
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3233342e302f32342d3234203d3e20333939363431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.234.0/24
Signature Algorithm: sha256WithRSAEncryption
78:0c:f1:04:1f:e5:c5:77:8b:27:c3:52:a8:d6:19:92:ec:52:
42:82:d5:7d:80:a4:2d:f8:fe:ea:ad:6f:b9:4d:ce:35:23:e0:
f8:c5:fa:8b:e4:d7:d7:e0:07:5d:fd:36:f6:4d:96:71:35:04:
d1:d3:06:9a:f7:c4:84:ae:04:64:4f:eb:92:78:7b:d8:25:a3:
e5:ef:c8:ae:02:2a:af:db:ed:40:23:cd:78:01:ea:8a:68:3d:
ed:0a:fc:d9:2d:83:47:a8:16:85:b1:68:5a:2d:16:ec:72:f6:
94:db:d0:3a:c2:9b:1d:f7:f6:f9:2e:9c:5c:12:a1:29:08:ed:
72:78:eb:f1:f9:9f:0c:65:de:70:09:11:05:45:4b:61:76:ad:
10:8f:38:8d:35:0c:4d:91:6e:3a:e5:5d:c5:0c:ca:8f:35:ed:
17:c7:39:98:a3:db:af:f2:ad:83:d0:67:a4:d2:0f:59:64:b2:
b9:91:58:36:4a:06:30:c7:2a:b3:40:67:98:4a:db:a7:04:75:
9a:a7:ac:62:21:6d:d3:79:d1:1d:43:4b:da:9d:70:43:af:4c:
61:24:d0:30:9c:6e:46:fa:94:5c:47:af:82:15:a5:cc:62:67:
97:05:56:b4:b7:42:b1:a4:6b:5f:09:65:53:4d:5e:0d:b2:3e:
2e:81:b9:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:31:27 2026 by rpki-client