Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139302e3134312e302f32342d3234203d3e20323132323338.roa
File: 3138352e3139302e3134312e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: RhJSSxUzdSsMndzlyELNKRZfusPdBzcdvQLKS0X1Jy0=
Subject key identifier: 71:8A:0F:E9:2C:CF:40:93:50:DF:11:E5:87:AB:28:D4:80:E6:92:18
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 771D716DA83D57019CAA533511A4A331364D3BC9
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139302e3134312e302f32342d3234203d3e20323132323338.roa
Signing time: Tue 19 May 2026 14:24:17 +0000
ROA not before: Tue 19 May 2026 14:19:17 +0000
ROA not after: Tue 18 May 2027 14:24:17 +0000
asID: 212238
IP address blocks: 185.190.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:1d:71:6d:a8:3d:57:01:9c:aa:53:35:11:a4:a3:31:36:4d:3b:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 19 14:19:17 2026 GMT
Not After : May 18 14:24:17 2027 GMT
Subject: CN=718A0FE92CCF409350DF11E587AB28D480E69218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:dc:53:d0:0b:ac:38:94:e6:27:39:a2:6b:0e:
ec:9d:ef:7f:54:b0:c0:35:78:ce:0c:fc:0a:05:b7:
2a:cc:a4:e8:80:ef:40:29:d2:96:3d:8d:82:d3:07:
9c:53:ee:68:b7:17:01:02:30:cc:9c:ea:b0:81:12:
87:6d:eb:18:f1:af:e1:61:d1:c4:60:88:4e:dd:ba:
1b:e4:83:2c:ad:76:ba:ee:75:30:27:c8:62:d8:7d:
5c:a7:fe:f9:65:58:95:f7:f7:9c:e7:d3:f9:13:d5:
08:e6:d4:9d:f0:b7:1c:d6:af:2a:96:d8:d8:63:da:
a2:da:4c:12:fd:b9:7d:12:27:2b:09:59:fd:2c:58:
e9:01:0f:db:cc:08:3d:98:45:2d:45:74:0b:a5:0f:
49:52:90:37:39:a8:4e:7f:cf:50:ea:31:53:d8:03:
3b:38:79:ad:b1:05:20:ef:b3:6b:7d:38:86:c1:e3:
aa:b8:2e:f2:7f:0b:e2:80:95:cb:db:89:ff:ce:9e:
a6:d2:86:5f:22:9c:64:b3:60:07:75:b5:01:02:fe:
b3:af:23:3a:f7:b7:13:0b:b4:9a:a9:06:09:6c:1c:
b9:52:ec:83:af:65:74:6a:7e:94:8f:1c:ea:62:e1:
f9:37:15:85:9f:7e:66:c4:f7:be:c1:09:89:1a:7b:
85:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:8A:0F:E9:2C:CF:40:93:50:DF:11:E5:87:AB:28:D4:80:E6:92:18
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139302e3134312e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.141.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:0d:1f:06:e3:c9:41:ff:e7:8c:bd:fd:df:90:cb:4d:ab:00:
eb:c2:46:ab:3a:26:d7:ca:84:a2:87:6a:6c:2d:9a:b1:6f:07:
21:9d:b5:2e:77:2f:25:1f:ed:c7:1f:2d:7d:13:54:da:0b:1b:
4a:cc:9e:46:69:f7:05:be:c2:d6:3e:fd:2a:cf:10:44:92:b6:
41:08:ff:c6:e6:4f:6c:6c:97:f0:65:a0:2b:49:0d:c2:81:60:
68:89:67:5d:73:07:73:86:12:fa:3a:13:9c:37:dc:86:b2:e2:
bd:01:ee:36:e7:1b:b7:8e:a6:94:e6:8c:41:15:8e:c2:2d:eb:
a7:3e:cf:d3:1b:a1:90:ba:be:8c:9d:4d:5f:66:b1:ac:73:f9:
4f:56:07:36:66:e8:80:3b:a8:95:20:04:d7:7a:ad:6d:19:70:
91:ae:f6:f3:1d:72:18:37:62:0f:41:56:88:82:cd:28:a4:ae:
a6:55:ac:48:31:36:c3:4c:23:8a:73:73:89:50:4b:15:4a:77:
dd:28:03:33:d0:9a:f7:3a:ba:9c:ce:c1:a0:17:f1:bd:25:85:
ff:22:a4:10:b4:0f:a2:21:20:65:4f:b1:39:1c:16:db:c5:89:
35:01:3b:8d:d0:99:1e:ba:0d:94:53:28:5f:af:92:4e:33:d6:
f8:77:73:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:45:08 2026 by rpki-client