Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3234322e302f32342d3332203d3e203531313637.roa
File: 3138352e3138372e3234322e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: oPghrXTByOehIy90mMH38ntnrg3ykUW2ZoWcH6u/ePY=
Subject key identifier: B3:7A:12:83:EE:F2:B9:B5:0C:1A:DE:2B:6E:99:35:D6:4A:7C:BD:F2
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7FC2377B0FA12EDEA95DAF5D7667E7971E6E88EB
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3234322e302f32342d3332203d3e203531313637.roa
Signing time: Fri 24 Jul 2026 15:26:48 +0000
ROA not before: Fri 24 Jul 2026 15:21:48 +0000
ROA not after: Fri 23 Jul 2027 15:26:48 +0000
asID: 51167
IP address blocks: 185.187.242.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:c2:37:7b:0f:a1:2e:de:a9:5d:af:5d:76:67:e7:97:1e:6e:88:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 24 15:21:48 2026 GMT
Not After : Jul 23 15:26:48 2027 GMT
Subject: CN=B37A1283EEF2B9B50C1ADE2B6E9935D64A7CBDF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:01:02:4f:30:16:10:1c:0a:d6:4f:03:4a:08:
ac:4b:0d:e7:c8:61:0d:63:b5:f5:93:c3:04:b1:09:
d2:16:ab:25:28:04:bf:34:22:86:e9:e4:fa:f8:37:
af:86:d4:a2:7e:fe:66:8e:ab:bb:29:de:1a:a3:b5:
6e:46:f6:44:46:d3:55:0a:7c:e7:7d:9c:b5:11:2f:
5c:44:2c:a9:78:c9:25:99:52:d1:5e:2b:e9:d5:e9:
41:52:e2:b7:ac:0a:a8:e0:06:c0:f9:f7:2b:42:d9:
aa:12:31:09:b1:53:84:da:49:8e:01:d1:79:34:e9:
4b:48:70:75:1d:60:0e:c8:8b:c1:e9:9f:ea:3c:cf:
c9:9c:29:2c:d7:be:80:f0:06:0f:35:db:fa:96:4b:
d3:1a:02:d8:e7:5b:45:11:e3:e8:43:89:a9:7b:bc:
8d:12:32:68:1e:5e:8f:75:aa:e4:be:55:e8:f6:5f:
5e:8a:19:78:81:b6:b0:27:9d:cd:ff:c7:c8:34:3b:
20:23:4f:9d:a5:bd:0a:c3:16:f6:b7:0d:74:46:5c:
a4:b7:b2:3b:e7:f4:d6:36:aa:78:3a:04:fd:96:23:
4b:ff:f8:73:8e:59:e4:68:80:3e:65:55:81:69:c8:
e7:ab:9d:0d:80:d7:f1:4e:31:e5:7e:5f:81:48:e6:
59:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:7A:12:83:EE:F2:B9:B5:0C:1A:DE:2B:6E:99:35:D6:4A:7C:BD:F2
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3234322e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.242.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:dd:74:95:e6:a9:a7:9e:de:ee:f9:05:09:90:45:23:27:69:
08:b0:f4:df:88:0b:fa:9f:a7:ee:e1:3e:13:0e:9f:bb:e0:b0:
58:e6:f7:e4:f1:db:0e:42:4f:d3:f1:87:02:dc:0c:a1:cd:84:
70:86:4b:1f:54:c8:67:1d:a7:e3:30:85:67:43:5c:49:be:fe:
f6:47:f0:0e:c8:b3:3f:de:11:7e:ac:e4:07:f1:98:a5:b0:7a:
90:bd:cf:75:99:2c:f3:a2:e1:14:7c:45:14:93:c0:04:f2:2c:
fe:40:21:a5:45:f7:77:a0:69:e1:84:04:a8:89:7b:c5:31:8b:
06:1d:9c:13:c3:84:19:50:b3:b9:38:36:2e:13:d5:40:7f:9f:
28:f8:ce:8f:7f:5f:56:a8:fe:de:d0:3a:3d:89:27:88:08:3e:
36:68:e2:36:8f:92:3d:f4:e7:f1:a5:60:0c:c3:e8:e0:eb:e4:
50:ce:31:ff:db:a0:85:4d:2c:25:5f:99:e8:e0:3b:76:64:df:
89:fe:ea:63:5c:f6:aa:c8:de:31:ef:11:a9:8d:80:b7:80:a8:
f9:e7:6f:10:8a:ef:b1:47:96:a9:95:04:d4:72:63:d0:64:ca:
38:56:87:ef:e3:9e:ea:51:0a:e5:3d:3d:02:e7:71:2e:48:6f:
d6:fb:9e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:10:36 2026 by rpki-client