Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139332e36352e302f32342d3234203d3e203630353438.roa
File: 3138352e3139332e36352e302f32342d3234203d3e203630353438.roa (raw, json)
Hash identifier: B4IdnvNEsc86uDYG/k0K/AiuSo5yjzlyOX9ZcwnBvBc=
Subject key identifier: 3F:D8:8E:76:DB:06:D6:F8:38:10:9C:73:03:12:E7:14:FF:CB:C0:88
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 373E26C3C70B0B84F92DB58ADAAE46E70E829FC2
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139332e36352e302f32342d3234203d3e203630353438.roa
Signing time: Fri 24 Jul 2026 15:27:02 +0000
ROA not before: Fri 24 Jul 2026 15:22:02 +0000
ROA not after: Fri 23 Jul 2027 15:27:02 +0000
asID: 60548
IP address blocks: 185.193.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:12:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:3e:26:c3:c7:0b:0b:84:f9:2d:b5:8a:da:ae:46:e7:0e:82:9f:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 24 15:22:02 2026 GMT
Not After : Jul 23 15:27:02 2027 GMT
Subject: CN=3FD88E76DB06D6F838109C730312E714FFCBC088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:87:54:d5:ab:42:61:e8:8a:8e:c6:24:7b:1a:
de:2f:6b:a1:4d:78:5b:99:9a:d3:36:c7:a3:48:fa:
9e:b0:ff:a6:b8:9c:50:93:24:a6:8b:1a:2a:10:93:
60:2d:8d:54:ac:78:f5:bf:e4:30:66:5f:1c:89:6e:
1c:06:c8:46:32:59:82:4a:73:d1:1b:9f:55:b9:ae:
6b:7a:8a:dc:a7:04:5b:f9:74:82:23:a0:22:ec:6a:
52:9d:d0:2a:67:1f:b1:d8:45:4b:99:e6:93:91:d7:
11:65:65:ae:d2:5c:c5:f9:c4:b3:89:86:16:98:9b:
9a:c9:12:f6:c5:03:8b:86:24:e0:d2:e5:10:93:60:
31:27:44:e7:d1:7c:d9:f5:2f:af:36:2a:b5:f5:67:
df:5b:7c:c6:b7:3a:5a:28:b8:3f:e5:ff:a3:3f:2e:
4e:90:ce:ca:e1:6e:69:47:57:b5:35:0a:c0:95:8d:
2a:e0:a7:ea:5e:a8:c1:62:33:af:e4:87:73:79:ce:
fd:68:e9:b9:98:e1:cc:46:2d:e4:0d:ab:8a:03:2a:
60:68:b5:23:c8:e8:2f:92:89:7a:a1:96:0c:f0:9d:
8b:16:96:80:bc:70:6d:66:d5:53:6a:b7:90:7c:cd:
92:84:ba:6d:ea:48:1a:1a:1d:58:de:52:c6:bf:f9:
71:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D8:8E:76:DB:06:D6:F8:38:10:9C:73:03:12:E7:14:FF:CB:C0:88
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139332e36352e302f32342d3234203d3e203630353438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.65.0/24
Signature Algorithm: sha256WithRSAEncryption
11:14:63:80:ed:8a:1a:e5:60:8b:5b:4b:d6:5b:d8:05:7f:8b:
6d:50:84:05:24:40:71:00:fc:aa:2d:46:cd:ae:9c:05:45:c8:
76:02:e0:c5:15:bc:06:6f:20:57:d9:5c:f6:22:59:4a:bb:3a:
37:a2:c3:19:a1:21:6d:75:f0:8e:34:8f:65:7a:bb:e8:82:f2:
40:38:f6:7d:51:54:66:46:d2:c5:30:45:c0:f0:41:8a:c3:32:
98:13:6a:a7:aa:ac:39:6d:3e:d7:ba:1f:dc:49:2d:23:26:bf:
56:24:9c:7a:8f:df:1b:fd:3a:eb:5e:6f:6a:65:57:77:79:c5:
0a:80:26:a6:b0:23:15:d3:67:74:64:b2:66:c1:1a:1b:16:2d:
52:2f:89:74:f0:ed:04:da:7d:08:d9:3c:98:06:0f:37:d7:29:
f1:f8:1b:5a:5f:e4:83:9b:8d:16:08:ff:e1:1a:a7:d2:25:65:
01:af:43:3f:29:23:a4:f5:c2:96:b5:1d:07:b9:2f:83:32:58:
e5:4d:32:46:a3:df:3e:f9:d3:a7:f7:68:1c:06:4c:fe:f1:f3:
f6:92:4a:ff:69:12:a4:96:2a:8f:bd:19:19:4b:ee:fd:a2:f4:
b7:4f:3a:d8:f1:52:95:8f:ac:0f:05:7f:fc:5d:de:c9:a7:48:
8e:bf:0d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:20:26 2026 by rpki-client