Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3233342e302f32342d3234203d3e203631333137.roa
File: 3138352e3138372e3233342e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: ELeU1b0oLYOCgM6peOfeRUfhCErbN3qOqJKr89DG5MU=
Subject key identifier: B7:14:44:A7:AC:FF:A8:17:84:36:49:CB:2C:87:38:BA:65:8C:50:A6
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4850EB1D15A98FE9CAA113E4E7676089E8352076
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3233342e302f32342d3234203d3e203631333137.roa
Signing time: Fri 24 Jul 2026 15:26:39 +0000
ROA not before: Fri 24 Jul 2026 15:21:39 +0000
ROA not after: Fri 23 Jul 2027 15:26:39 +0000
asID: 61317
IP address blocks: 185.187.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:50:eb:1d:15:a9:8f:e9:ca:a1:13:e4:e7:67:60:89:e8:35:20:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 24 15:21:39 2026 GMT
Not After : Jul 23 15:26:39 2027 GMT
Subject: CN=B71444A7ACFFA817843649CB2C8738BA658C50A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e1:0b:5f:3f:26:46:01:da:ab:3c:06:2c:15:
d5:fb:e7:c8:76:32:22:dc:30:45:72:a1:99:1e:ee:
b8:fe:28:e3:c0:78:5d:3b:43:33:29:c1:91:97:60:
84:89:87:44:ba:6e:26:fa:ff:77:df:56:4c:e8:4d:
5d:57:35:0f:64:bb:cd:66:8d:f7:82:b1:bf:0c:3b:
6a:8e:ed:84:19:26:69:d9:b7:75:be:0b:94:57:1b:
ea:83:a6:0e:28:66:bd:20:ec:a3:89:c2:b7:5d:6e:
0d:1f:4d:e0:d7:6c:cf:d7:9b:23:c9:38:6b:0c:d3:
8b:5d:ba:19:7d:fc:82:17:b0:2a:04:90:32:27:23:
57:f4:37:de:9d:8e:82:2e:d8:a2:85:a2:87:77:bc:
6c:db:78:f3:8d:07:59:ef:98:88:0e:ac:4e:77:92:
86:ca:23:b4:6b:12:c7:92:68:28:a5:1c:ce:ae:99:
7f:05:a4:54:41:4e:97:02:21:16:ae:2f:7e:9f:1e:
bf:cb:42:25:bf:f2:7b:b0:69:e4:e2:87:6a:75:c4:
6a:b7:96:1f:40:90:39:2f:94:47:47:3a:6e:7b:28:
ec:aa:b3:aa:4a:ee:98:00:cd:39:71:ab:b0:a7:a6:
52:0d:62:da:40:77:0f:5b:42:4d:ad:ba:58:93:b3:
31:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:14:44:A7:AC:FF:A8:17:84:36:49:CB:2C:87:38:BA:65:8C:50:A6
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3233342e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.234.0/24
Signature Algorithm: sha256WithRSAEncryption
84:70:3a:c0:de:04:53:d8:e6:e9:e5:f1:f3:a2:c6:f7:1a:4b:
cd:ea:74:7f:a6:f0:26:44:33:38:83:0e:b5:b3:76:fc:cb:51:
ae:3a:99:b3:74:ed:a3:e0:15:38:4e:99:d0:02:85:06:15:1c:
25:20:ae:b9:98:55:83:7a:9e:7c:a6:a0:85:46:cf:df:73:71:
7f:d5:a6:d4:85:7c:4d:46:8e:a7:95:87:29:66:ac:ae:f0:51:
fc:4b:9e:5b:06:1a:09:1d:e7:91:56:e1:7d:4a:df:1a:db:82:
4d:82:c1:98:51:5a:5c:5c:32:01:56:42:83:90:aa:f0:da:5f:
3b:aa:47:4c:59:38:39:bc:12:47:43:7e:c0:1c:ac:20:6d:39:
a4:15:d3:41:e7:6a:e3:74:d7:1a:da:77:61:35:11:3b:77:6a:
99:55:94:98:41:8d:d3:b5:2d:04:58:20:55:85:11:5d:61:e9:
10:f1:49:8c:63:bb:d5:d1:35:bc:d8:f0:36:6b:29:d0:d3:34:
2e:07:ab:b2:4d:14:8d:1a:c7:8c:97:00:8f:e4:28:83:c0:40:
28:0e:db:7d:6b:30:dc:47:4a:4e:79:1b:c8:fc:1a:e3:88:13:
15:f3:10:96:a9:12:dd:9a:56:4e:36:18:60:bf:11:70:50:3d:
19:d1:b0:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:42:24 2026 by rpki-client