Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139302e3134322e302f32332d3332203d3e203531313637.roa
File: 3138352e3139302e3134322e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier: Y+Sc14EV1cHhaxMIz2cBcVYjmwI6pAMvseCa2N6sWQY=
Subject key identifier: 7A:BF:09:E2:B3:98:05:94:09:60:36:79:9F:1F:1B:4E:83:C0:18:A2
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 36D9C50156F21EC0C750A9054C8EFECA2534ECEB
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139302e3134322e302f32332d3332203d3e203531313637.roa
Signing time: Fri 24 Jul 2026 15:27:02 +0000
ROA not before: Fri 24 Jul 2026 15:22:02 +0000
ROA not after: Fri 23 Jul 2027 15:27:02 +0000
asID: 51167
IP address blocks: 185.190.142.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:d9:c5:01:56:f2:1e:c0:c7:50:a9:05:4c:8e:fe:ca:25:34:ec:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 24 15:22:02 2026 GMT
Not After : Jul 23 15:27:02 2027 GMT
Subject: CN=7ABF09E2B3980594096036799F1F1B4E83C018A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:ec:25:6d:66:d2:09:1b:96:bf:9e:9c:d6:61:
fd:95:08:47:be:58:ff:9e:19:e0:31:5d:7c:1b:fc:
a4:ff:79:68:24:27:83:82:b1:56:38:40:05:c6:c9:
37:fe:fc:1f:61:9e:f3:03:0a:aa:1d:e7:29:73:49:
c9:96:a5:b0:bc:f6:77:67:11:d6:8d:d7:c4:ad:83:
b7:37:83:e1:0f:29:01:ab:d5:a2:86:42:8a:2a:c4:
ad:eb:5d:4a:a4:15:cd:6e:3d:72:bd:e0:1c:40:0b:
fe:98:78:37:af:6f:95:87:d9:c9:40:37:7d:b5:8b:
ff:f9:33:74:5f:63:c6:eb:c1:52:f7:b7:ca:a3:e6:
eb:20:e6:f4:c1:74:aa:82:b9:8e:7f:4d:4e:18:71:
a6:07:b0:4b:92:4a:53:bf:ca:f2:2d:23:37:9c:c2:
1b:d8:c2:01:85:2b:8b:21:2f:df:6d:c7:6a:48:ab:
16:c5:f5:92:9f:3d:24:c5:22:04:fc:38:b1:49:5e:
db:36:55:e1:90:26:8a:d6:88:8b:7d:ba:30:86:44:
d1:5f:a5:a9:9f:1d:78:72:28:02:14:8b:99:12:1f:
b9:81:74:bb:85:03:09:78:1f:ef:d3:5f:48:d9:fd:
7a:db:2c:92:e5:fd:25:9e:da:5d:da:91:32:58:d7:
03:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:BF:09:E2:B3:98:05:94:09:60:36:79:9F:1F:1B:4E:83:C0:18:A2
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139302e3134322e302f32332d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.142.0/23
Signature Algorithm: sha256WithRSAEncryption
28:5f:bf:f7:5d:f4:7e:fa:75:c4:c0:f9:23:fe:5a:59:98:b6:
be:e0:fb:f1:69:14:98:7f:1e:e5:61:0b:3d:23:64:64:5c:9a:
ba:f0:48:c9:59:82:f1:e1:4f:8b:95:b0:ce:9b:18:49:68:58:
57:fa:6c:4c:6b:0e:61:1a:fe:69:20:86:14:a9:8c:70:a5:89:
e8:a3:b0:25:dc:7b:89:4e:8d:d1:0d:24:d0:d2:cf:e7:ef:99:
c7:c5:f3:43:65:7d:c2:6b:a3:bf:61:da:e6:c9:ea:de:e9:a7:
86:cd:63:6d:f5:3c:28:36:b2:af:75:5b:32:51:f4:32:12:80:
c3:41:12:b1:47:89:6c:0e:27:20:c5:2a:e7:cd:78:f9:13:4e:
67:d8:ec:10:cc:73:e0:fb:86:67:c8:24:86:ae:22:f3:e7:6f:
1d:b6:d0:3a:d8:54:2d:38:b4:c5:aa:e7:b9:89:d8:a1:29:d9:
2e:33:f6:e2:e5:cc:d0:6c:ad:40:80:b5:b0:cb:88:f0:3a:b3:
43:a0:02:17:26:96:d4:93:e8:27:df:09:0f:47:72:d5:2a:ec:
61:1c:f8:95:da:5f:f1:05:6b:6c:40:d8:70:10:6b:be:fb:cc:
23:68:2d:97:9d:ba:b7:f8:bc:b8:df:73:e4:ee:40:37:06:1c:
20:88:ec:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:19:33 2026 by rpki-client