Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139372e3139342e302f32332d3332203d3e203531313637.roa
File: 3138352e3139372e3139342e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier: FpyVJ0JJt56T9jYlTt1uG8MGW6XXR2ASCwpuxp3hn3Q=
Subject key identifier: 9D:3A:A9:A8:C8:13:C8:01:0E:EB:A7:53:72:92:AA:C0:26:BD:DE:1F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6192D3B1813D4B7A0E529BD6AD8632D634F8CCBD
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139372e3139342e302f32332d3332203d3e203531313637.roa
Signing time: Fri 24 Jul 2026 15:26:57 +0000
ROA not before: Fri 24 Jul 2026 15:21:57 +0000
ROA not after: Fri 23 Jul 2027 15:26:57 +0000
asID: 51167
IP address blocks: 185.197.194.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:92:d3:b1:81:3d:4b:7a:0e:52:9b:d6:ad:86:32:d6:34:f8:cc:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 24 15:21:57 2026 GMT
Not After : Jul 23 15:26:57 2027 GMT
Subject: CN=9D3AA9A8C813C8010EEBA7537292AAC026BDDE1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:cf:81:31:b7:a2:23:0d:99:68:5f:9e:4c:92:
75:7a:b9:d8:c5:80:42:3f:b9:1a:f7:e5:c4:62:5b:
61:ab:69:c9:34:3e:f0:3f:04:68:57:ac:03:21:55:
e7:28:71:c5:ff:bb:af:85:a2:61:d2:98:d2:d5:65:
68:a7:0e:d6:eb:36:7a:28:45:99:c4:a6:70:4f:e0:
65:8b:89:b7:d6:a8:41:80:3a:9f:96:db:ee:2f:a5:
cb:60:cf:81:2b:05:50:e0:a1:1e:dd:e4:8e:4c:6e:
0a:0c:13:f1:71:4d:3f:a9:cf:46:e7:77:62:d3:76:
5a:70:61:9c:d4:6f:cb:db:04:19:c0:54:e6:e9:1a:
ed:77:83:25:ad:0e:5f:65:e9:d6:5c:13:95:f4:31:
b1:5d:4e:34:26:28:ab:01:0e:96:13:11:e4:bd:e1:
f1:b7:68:83:34:09:28:26:71:f3:f6:f4:29:35:8d:
aa:94:c4:7d:11:05:5a:b6:e9:ed:4f:8b:55:27:a2:
48:75:f9:e7:39:9f:d0:15:2d:9b:39:c1:d0:38:b2:
f5:10:1c:73:a6:25:bc:67:3d:65:3d:21:4b:95:74:
4a:0e:32:2b:b2:34:6e:09:47:31:70:be:b5:6d:df:
e9:10:ef:04:83:a0:a3:7f:49:07:68:8e:09:a6:41:
7b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:3A:A9:A8:C8:13:C8:01:0E:EB:A7:53:72:92:AA:C0:26:BD:DE:1F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139372e3139342e302f32332d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.194.0/23
Signature Algorithm: sha256WithRSAEncryption
99:28:70:f3:18:f9:7e:f4:4f:36:65:60:b0:74:38:24:b6:24:
9c:7c:fc:dc:a1:18:b0:1a:3a:ec:8d:31:02:6d:1c:94:ba:d6:
4e:24:4b:62:ca:5b:c0:a4:f9:ae:d9:1a:95:f5:d0:da:99:dc:
58:3a:31:f5:60:0e:4b:84:f8:2c:e5:02:4b:85:57:bc:58:02:
23:dc:a2:81:5a:33:29:cf:73:77:d4:c1:99:52:e4:c7:24:a6:
38:53:54:b5:3b:10:81:95:af:9e:56:9b:d0:89:db:69:ec:98:
db:7e:71:a8:b9:73:b8:b7:a4:a4:2c:e3:43:f2:02:7e:df:b2:
1d:41:57:e5:3c:72:ee:be:64:19:9c:9d:ce:56:58:a3:35:3c:
5f:f5:dc:85:9b:3f:90:d2:71:9b:4d:94:9c:3d:c4:fb:57:d9:
c8:68:15:d9:56:45:b6:f6:47:8f:66:25:e1:5a:90:ed:2e:4a:
cc:4c:b5:f4:96:25:f5:f9:8a:95:47:a6:4d:38:6a:25:6b:c1:
4b:ff:ee:48:2a:44:5a:82:b7:c0:36:cb:3b:56:b7:16:9f:28:
b7:2f:62:ed:69:11:4c:47:54:91:71:e5:9a:32:07:e6:e0:3d:
53:3e:73:67:fe:23:07:33:e8:4b:16:8e:73:c1:e8:a7:07:a9:
e4:ac:e9:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:18:18 2026 by rpki-client