Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139332e36352e302f32342d3234203d3e203439393831.roa
File: 3138352e3139332e36352e302f32342d3234203d3e203439393831.roa (raw, json)
Hash identifier: 3qj3NEfcNKJmTdKoFTJxgmBMN+T2dBoeGWLQSyo54Gc=
Subject key identifier: 30:2B:C8:C1:21:70:3C:E3:3A:A9:49:B1:D6:A4:75:22:AA:89:31:29
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 33F1076C364FE8DC25B6240E000D9B7443D702DC
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139332e36352e302f32342d3234203d3e203439393831.roa
Signing time: Fri 24 Jul 2026 15:26:42 +0000
ROA not before: Fri 24 Jul 2026 15:21:42 +0000
ROA not after: Fri 23 Jul 2027 15:26:42 +0000
asID: 49981
IP address blocks: 185.193.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:f1:07:6c:36:4f:e8:dc:25:b6:24:0e:00:0d:9b:74:43:d7:02:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 24 15:21:42 2026 GMT
Not After : Jul 23 15:26:42 2027 GMT
Subject: CN=302BC8C121703CE33AA949B1D6A47522AA893129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:08:ef:8a:29:f7:f6:fd:f3:aa:cc:df:82:19:
03:6e:a0:77:cc:8b:95:e7:18:c4:39:97:db:ff:88:
5e:03:e4:86:75:b3:a7:0d:14:78:a7:4b:3d:66:89:
6b:50:99:69:41:32:38:ee:ee:35:e5:da:df:df:7c:
d4:a4:4b:02:3a:b8:ac:4d:4c:a0:e5:58:41:bb:cb:
cd:40:5e:8b:b4:41:f8:f4:e8:85:3a:84:f2:fc:57:
ed:1d:ca:4b:d1:ab:33:4c:20:0a:a6:b0:a3:2c:79:
c4:bf:8d:76:ec:ad:88:04:6e:84:ee:a6:9f:d1:89:
20:26:c1:73:1c:d3:96:de:26:ab:a5:1e:c7:99:f4:
4b:a4:ae:b6:1e:28:e1:34:58:6b:7f:61:1b:76:eb:
f0:1d:b8:0b:f1:d7:c4:d3:e3:00:3f:64:04:57:c6:
7d:f8:0a:33:0d:28:45:68:43:97:7a:2a:e3:95:d9:
f8:a4:db:ba:05:30:24:57:60:01:0d:d9:a1:7c:fa:
d9:3e:a8:1b:3a:2c:f4:93:cb:4d:46:e9:84:6d:7d:
30:67:0e:b9:be:73:4f:b2:ea:a8:76:82:d4:da:b9:
1a:9b:f5:0f:2c:f6:8f:8d:ae:d5:10:e8:1e:ad:e0:
24:aa:82:06:1c:c6:cc:60:6a:1e:06:5e:8d:bc:e6:
b1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:2B:C8:C1:21:70:3C:E3:3A:A9:49:B1:D6:A4:75:22:AA:89:31:29
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139332e36352e302f32342d3234203d3e203439393831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.65.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:42:0c:79:11:9b:66:0b:d7:c4:e7:39:3e:2a:96:dd:2f:0e:
9a:d1:5d:84:d8:86:b6:86:79:97:e2:4b:53:cf:1a:55:d9:57:
f3:4a:34:9d:11:7e:46:10:6d:63:df:00:b5:9a:16:5f:86:61:
05:cf:17:0b:04:16:74:6d:d4:c8:82:1a:9a:eb:8d:24:1f:01:
c8:10:1f:e2:db:d1:1b:35:d6:db:07:31:d3:fd:16:e9:70:93:
2d:fa:55:ab:98:cb:f7:ae:69:75:67:85:55:42:fd:0f:d1:9f:
fe:b7:37:f8:56:b4:93:15:7d:de:aa:ad:22:6b:cc:29:eb:a0:
c1:4d:bf:cb:13:a1:9d:bb:e3:f4:63:d3:14:56:ad:2e:68:fa:
8b:19:1a:eb:dc:11:71:c1:16:54:4a:69:d7:b5:50:c8:9d:3b:
97:4a:ee:01:54:f3:63:f8:b9:af:b5:d8:98:74:9f:ed:e4:bf:
a9:b0:95:ca:a7:e0:aa:82:16:60:3b:af:45:d4:2c:1f:b0:ac:
6e:42:f9:d2:5e:e9:d8:4b:b6:46:0c:43:08:b0:28:a4:a3:c0:
c1:b1:96:49:8f:a0:a3:92:87:0e:ef:f9:7c:25:15:c7:4f:df:
09:50:c8:ce:d6:d0:8c:67:82:0c:85:d6:01:c3:58:93:4f:0c:
16:85:19:3f
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUM/EHbDZP6NwltiQOAA2bdEPXAtwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA3MjQxNTIxNDJaFw0yNzA3MjMxNTI2NDJaMDMxMTAvBgNV
BAMTKDMwMkJDOEMxMjE3MDNDRTMzQUE5NDlCMUQ2QTQ3NTIyQUE4OTMxMjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXCO+KKff2/fOqzN+CGQNuoHfM
i5XnGMQ5l9v/iF4D5IZ1s6cNFHinSz1miWtQmWlBMjju7jXl2t/ffNSkSwI6uKxN
TKDlWEG7y81AXou0Qfj06IU6hPL8V+0dykvRqzNMIAqmsKMsecS/jXbsrYgEboTu
pp/RiSAmwXMc05beJqulHseZ9EukrrYeKOE0WGt/YRt26/AduAvx18TT4wA/ZARX
xn34CjMNKEVoQ5d6KuOV2fik27oFMCRXYAEN2aF8+tk+qBs6LPSTy01G6YRtfTBn
Drm+c0+y6qh2gtTauRqb9Q8s9o+NrtUQ6B6t4CSqggYcxsxgah4GXo285rHxAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUMCvIwSFwPOM6qUmx1qR1IqqJMSkwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMTM5MzMyZTM2
MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM5MzkzODMxLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
ucFBMA0GCSqGSIb3DQEBCwUAA4IBAQA/Qgx5EZtmC9fE5zk+KpbdLw6a0V2E2Ia2
hnmX4ktTzxpV2VfzSjSdEX5GEG1j3wC1mhZfhmEFzxcLBBZ0bdTIghqa640kHwHI
EB/i29EbNdbbBzHT/RbpcJMt+lWrmMv3rml1Z4VVQv0P0Z/+tzf4VrSTFX3eqq0i
a8wp66DBTb/LE6Gdu+P0Y9MUVq0uaPqLGRrr3BFxwRZUSmnXtVDInTuXSu4BVPNj
+LmvtdiYdJ/t5L+psJXKp+CqghZgO69F1CwfsKxuQvnSXunYS7ZGDEMIsCiko8DB
sZZJj6CjkocO7/l8JRXHT98JUMjO1tCMZ4IMhdYBw1iTTwwWhRk/
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:51:20 2026 by rpki-client