Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230322e3232302e302f32342d3234203d3e20313431303339.roa
File: 3138352e3230322e3232302e302f32342d3234203d3e20313431303339.roa (raw, json)
Hash identifier: VgJi/Udztbk6ctbXMxyVOnq8QlJX8FiSAnWMA0VX8nQ=
Subject key identifier: DE:CD:1F:8F:90:9E:88:CD:CA:97:EF:0D:22:85:C5:9D:5B:49:3A:39
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 244B3BF1E055C6E23106AD5C451237E45413EAFB
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230322e3232302e302f32342d3234203d3e20313431303339.roa
Signing time: Fri 24 Jul 2026 15:26:35 +0000
ROA not before: Fri 24 Jul 2026 15:21:35 +0000
ROA not after: Fri 23 Jul 2027 15:26:35 +0000
asID: 141039
IP address blocks: 185.202.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:4b:3b:f1:e0:55:c6:e2:31:06:ad:5c:45:12:37:e4:54:13:ea:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 24 15:21:35 2026 GMT
Not After : Jul 23 15:26:35 2027 GMT
Subject: CN=DECD1F8F909E88CDCA97EF0D2285C59D5B493A39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:fb:7e:f7:af:c9:ba:97:d2:f2:3c:e7:2b:63:
ae:27:d7:0c:e4:95:53:55:f4:ff:cb:19:b3:81:ea:
49:75:9d:58:d6:62:f1:5e:79:0c:50:f9:d3:0a:6b:
90:66:c2:6b:3a:dd:6a:89:91:a5:7f:c4:95:82:a2:
e1:bd:ae:72:ff:39:5f:96:c7:50:f1:0c:ef:95:58:
30:f7:64:57:9d:29:73:ba:1e:17:c9:f9:4a:66:dc:
49:fb:fb:8a:3b:2b:8c:27:22:65:15:a4:28:37:bd:
5e:1f:00:d4:bf:1d:6e:6e:59:3f:84:42:85:b3:b5:
a3:a8:24:83:26:ef:5e:ac:90:5a:4d:17:3e:53:7d:
ff:b1:bb:58:8e:cc:94:8f:b7:41:06:7b:9d:09:ba:
3f:07:f5:c4:33:51:9a:32:50:8e:df:a7:5b:45:60:
80:66:9d:bd:72:d1:6a:6e:8d:7d:61:40:0e:7c:e2:
71:f0:0c:f1:08:81:d0:bf:0f:00:8d:b7:e0:82:21:
ca:4d:47:b3:1b:f8:58:cb:14:12:d8:ad:3d:a5:2a:
ec:04:8d:e3:75:dd:57:9b:23:95:68:b0:b0:16:e7:
c6:05:c6:b6:07:e2:a6:33:77:05:e8:77:27:6c:5d:
92:a9:eb:c8:35:51:97:aa:8a:3e:5e:35:db:2c:19:
05:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:CD:1F:8F:90:9E:88:CD:CA:97:EF:0D:22:85:C5:9D:5B:49:3A:39
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230322e3232302e302f32342d3234203d3e20313431303339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.220.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:9a:cf:9c:50:75:0d:1c:a3:6e:d2:86:26:53:26:b4:e6:d8:
c1:e2:a1:ff:5a:f6:be:6b:57:61:9f:f4:aa:2b:95:65:2a:a4:
58:ae:31:59:5b:31:89:57:76:5e:7e:5f:b1:30:e4:65:ec:54:
c9:a9:55:16:99:6a:54:27:10:35:3d:5a:84:ed:a5:40:fe:24:
3b:ae:98:d5:ab:cd:bf:f7:f9:58:b6:00:8f:14:a5:7e:a8:26:
c3:a4:c2:0e:57:a7:07:09:a0:5c:b9:3b:46:87:ec:97:bb:62:
bc:96:0e:02:ee:56:fe:dd:0b:15:44:19:c1:a6:09:65:a9:80:
0c:27:f0:af:28:4d:7d:30:59:9c:2b:af:79:c7:cb:aa:14:e5:
7f:75:d1:72:da:f5:10:71:25:9f:cd:61:2f:cb:85:0a:7b:8b:
89:88:e9:b9:25:f0:f7:11:3c:8e:13:0a:1b:00:a7:8d:77:d8:
34:a1:35:3a:ab:5a:1c:28:5e:6c:02:53:f4:f5:29:de:5a:bf:
5d:4a:45:bd:94:ea:70:d0:cd:85:85:e4:27:0a:00:99:76:a8:
ad:28:bf:13:5b:8f:d1:93:fc:a0:ee:95:ed:a3:89:60:97:15:
ca:5d:93:f1:cf:59:6a:32:26:f8:37:2c:8c:58:b8:35:c3:e1:
2e:0f:72:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:06:02 2026 by rpki-client