Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3233352e302f32342d3332203d3e203430303231.roa
File: 3138352e3138372e3233352e302f32342d3332203d3e203430303231.roa (raw, json)
Hash identifier: BAWxHbVXPVYKgAbwMAe+Hqa4bnhpSaDXam5JY6YUuyA=
Subject key identifier: 8D:46:06:AE:FF:AB:2B:81:20:96:C5:3A:41:6C:CE:D8:66:61:D0:44
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 18DC11232E8A0E5B291C6ED373578DCC72459F3C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3233352e302f32342d3332203d3e203430303231.roa
Signing time: Fri 24 Jul 2026 15:27:04 +0000
ROA not before: Fri 24 Jul 2026 15:22:04 +0000
ROA not after: Fri 23 Jul 2027 15:27:04 +0000
asID: 40021
IP address blocks: 185.187.235.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:dc:11:23:2e:8a:0e:5b:29:1c:6e:d3:73:57:8d:cc:72:45:9f:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 24 15:22:04 2026 GMT
Not After : Jul 23 15:27:04 2027 GMT
Subject: CN=8D4606AEFFAB2B812096C53A416CCED86661D044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:62:fc:1b:40:6c:82:08:e4:2d:80:8e:9b:9e:
37:c1:17:e2:bf:2f:09:7f:6e:44:28:f1:cf:d1:2e:
4e:d7:c8:95:0e:fa:9f:ab:75:a6:e1:1a:bf:43:de:
ba:e3:75:32:4f:29:c4:72:82:9b:34:87:4a:bf:7f:
21:9d:35:c5:7a:15:62:15:bc:9a:fb:c1:3b:ad:1e:
76:0d:15:09:69:2f:e2:23:47:1b:c3:d4:ea:41:b3:
a7:75:02:04:56:8b:f0:fa:f5:20:09:ed:ae:ee:16:
ae:41:ed:32:a7:2b:93:be:e3:72:bc:89:70:b6:01:
6f:ba:31:35:af:6b:6a:be:8b:c6:2c:42:25:6c:d4:
5e:0b:59:7d:dc:19:ec:da:4c:cc:69:02:3e:bd:27:
e6:d0:e2:4e:ae:02:a9:f0:e2:e2:01:25:24:69:50:
9b:c9:f9:8e:6c:a1:2b:29:01:8a:98:d7:a0:48:76:
08:67:0b:26:c4:11:34:91:a7:99:b2:79:f8:f8:19:
5e:2f:63:41:65:4b:3f:50:ae:38:78:17:6f:b0:de:
f8:51:26:69:ae:21:30:62:e2:c7:a5:b7:c1:df:af:
bf:35:b4:af:bc:cc:fb:d1:63:c6:d1:bd:dc:7d:de:
80:db:72:91:79:9c:ee:b7:a1:48:c8:54:6f:f5:9a:
59:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:46:06:AE:FF:AB:2B:81:20:96:C5:3A:41:6C:CE:D8:66:61:D0:44
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3233352e302f32342d3332203d3e203430303231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.235.0/24
Signature Algorithm: sha256WithRSAEncryption
34:fe:6d:a3:05:b4:34:81:5e:fa:74:9d:04:cc:01:32:de:f1:
1d:6e:d3:f6:25:92:db:7b:06:60:d1:dc:5e:dd:cf:18:3f:91:
8e:4e:a4:25:24:66:16:11:0f:6d:8d:c1:3f:80:77:b5:7a:d3:
d3:e2:bd:de:f2:81:17:fd:33:20:4e:23:fe:d2:cd:b0:8c:f6:
27:f5:2e:c6:93:26:55:43:86:dd:8e:c6:a5:ef:cf:c4:4e:31:
72:a6:db:77:37:e1:44:eb:ee:9a:67:c2:84:15:69:e3:0e:27:
7e:65:d5:c5:fa:e1:4e:ad:e4:d9:e3:8e:5c:dd:a1:86:c6:e5:
16:d7:0d:6e:be:6e:e0:dc:83:cd:85:e8:7d:17:e5:27:f3:19:
b8:88:eb:f1:d1:04:d4:10:6c:e7:f3:f9:85:57:b2:3b:60:8e:
68:1a:45:ae:35:82:f5:f1:e1:03:4b:36:38:a3:90:9a:cf:f8:
5a:c9:22:1e:e8:a4:df:7e:d9:29:c5:f8:2f:13:21:40:69:c2:
ef:ac:a3:af:58:55:aa:71:d2:9f:ca:f1:96:00:db:c4:0e:c7:
3e:c7:73:9a:c0:cd:98:5c:d5:ba:7c:75:b7:72:11:79:79:a3:
69:ea:20:05:07:ca:ff:23:ce:77:9a:90:92:8f:f4:cf:83:9b:
34:5a:c6:d3
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUGNwRIy6KDlspHG7Tc1eNzHJFnzwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA3MjQxNTIyMDRaFw0yNzA3MjMxNTI3MDRaMDMxMTAvBgNV
BAMTKDhENDYwNkFFRkZBQjJCODEyMDk2QzUzQTQxNkNDRUQ4NjY2MUQwNDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUYvwbQGyCCOQtgI6bnjfBF+K/
Lwl/bkQo8c/RLk7XyJUO+p+rdabhGr9D3rrjdTJPKcRygps0h0q/fyGdNcV6FWIV
vJr7wTutHnYNFQlpL+IjRxvD1OpBs6d1AgRWi/D69SAJ7a7uFq5B7TKnK5O+43K8
iXC2AW+6MTWva2q+i8YsQiVs1F4LWX3cGezaTMxpAj69J+bQ4k6uAqnw4uIBJSRp
UJvJ+Y5soSspAYqY16BIdghnCybEETSRp5myefj4GV4vY0FlSz9Qrjh4F2+w3vhR
JmmuITBi4selt8Hfr781tK+8zPvRY8bRvdx93oDbcpF5nO63oUjIVG/1mlkBAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUjUYGrv+rK4EglsU6QWzO2GZh0EQwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMTM4MzcyZTMy
MzMzNTJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM0MzAzMDMyMzEucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAC5u+swDQYJKoZIhvcNAQELBQADggEBADT+baMFtDSBXvp0nQTMATLe8R1u0/Yl
ktt7BmDR3F7dzxg/kY5OpCUkZhYRD22NwT+Ad7V609Pivd7ygRf9MyBOI/7SzbCM
9if1LsaTJlVDht2OxqXvz8ROMXKm23c34UTr7ppnwoQVaeMOJ35l1cX64U6t5Nnj
jlzdoYbG5RbXDW6+buDcg82F6H0X5SfzGbiI6/HRBNQQbOfz+YVXsjtgjmgaRa41
gvXx4QNLNjijkJrP+FrJIh7opN9+2SnF+C8TIUBpwu+so69YVapx0p/K8ZYA28QO
xz7Hc5rAzZhc1bp8dbdyEXl5o2nqIAUHyv8jzneakJKP9M+DmzRaxtM=
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:23:51 2026 by rpki-client