Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230322e3232312e302f32342d3234203d3e20313431303339.roa
File: 3138352e3230322e3232312e302f32342d3234203d3e20313431303339.roa (raw, json)
Hash identifier: yI008Zm1s2+ypPXR/59c8XwggbvsWgel2c4GFnmwknY=
Subject key identifier: 31:82:A4:45:D6:FF:E2:D3:A4:6E:75:0C:CF:54:AA:D6:5A:E8:CF:11
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1780A8CC88693437F1587228996C33C5DF89897A
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230322e3232312e302f32342d3234203d3e20313431303339.roa
Signing time: Fri 24 Jul 2026 15:26:48 +0000
ROA not before: Fri 24 Jul 2026 15:21:48 +0000
ROA not after: Fri 23 Jul 2027 15:26:48 +0000
asID: 141039
IP address blocks: 185.202.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:80:a8:cc:88:69:34:37:f1:58:72:28:99:6c:33:c5:df:89:89:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 24 15:21:48 2026 GMT
Not After : Jul 23 15:26:48 2027 GMT
Subject: CN=3182A445D6FFE2D3A46E750CCF54AAD65AE8CF11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:85:99:64:5d:77:cd:1e:89:d1:c6:07:83:7b:
76:12:bb:c5:d2:9c:f4:9e:83:1d:07:ad:44:1a:36:
1b:71:cf:59:d1:8f:3f:98:37:fa:6d:a6:c8:b0:8f:
ef:98:67:13:f6:bf:4a:16:d9:0a:2d:29:68:0b:02:
9c:23:79:29:22:05:51:c0:f6:5b:3a:a8:96:c2:8d:
a7:19:d4:7a:58:38:71:8e:1a:54:de:5e:6c:7b:7d:
7b:84:5b:cb:cb:d4:6d:b5:6a:17:89:f0:8c:42:38:
44:ee:39:68:6a:f0:72:d8:a7:30:67:37:b3:9d:ba:
cf:c0:a4:6f:d0:a3:89:17:78:1a:25:4f:3f:b8:49:
64:2c:82:c4:de:d3:c5:2e:fb:c4:e0:04:55:3b:19:
fb:95:cf:f1:b9:c9:04:aa:7c:31:af:9d:ec:3a:66:
2a:1c:b7:ac:00:82:83:fd:66:bb:60:21:be:f8:90:
1a:3f:79:53:42:d8:d0:9c:1b:bd:08:8c:57:55:67:
ab:89:68:49:fa:22:27:2a:9a:01:31:94:da:a3:66:
bb:e1:89:65:8d:53:bf:88:aa:54:c9:4c:32:62:a5:
68:92:4e:d2:93:d7:18:3f:e1:f1:e3:ca:bc:88:1d:
2e:f1:0f:08:88:ab:7d:61:7d:49:ee:1c:ad:25:71:
86:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:82:A4:45:D6:FF:E2:D3:A4:6E:75:0C:CF:54:AA:D6:5A:E8:CF:11
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230322e3232312e302f32342d3234203d3e20313431303339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.221.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:b5:31:b8:03:46:27:5a:75:a6:ea:dd:b2:c5:00:6b:40:1f:
bf:c1:f9:2a:e6:df:4e:74:a7:c9:cf:9d:a7:bf:f5:cb:91:7b:
a0:b9:09:f3:64:1c:12:1e:40:ce:e1:90:61:80:cc:bf:49:2a:
3b:76:4d:5c:4d:29:09:7b:96:d6:d4:9a:9f:80:c9:b1:44:53:
4b:32:48:c8:1b:4d:ce:39:79:66:19:3d:2f:2f:19:81:11:3d:
2a:3a:dc:33:15:2e:db:48:a8:46:a6:04:f7:20:b4:e7:56:e7:
87:9d:51:71:09:0b:09:fb:21:91:ce:40:0d:7c:35:9c:99:aa:
2e:4b:71:46:cc:09:65:b9:42:d4:ba:fd:fe:9d:16:8b:c4:1f:
0b:53:84:35:59:f3:e0:43:3c:ed:10:73:83:f1:77:0b:21:8e:
52:36:e1:34:1a:bb:68:0c:67:e1:9a:7a:4c:b8:dc:83:0a:0c:
9e:48:0f:b9:4c:d1:8a:20:65:fd:42:fb:60:27:1a:bf:2b:99:
3b:0b:43:4b:82:f9:fd:d3:46:ff:62:06:90:f7:8f:00:b1:91:
17:26:48:7d:3f:9c:1b:53:58:dc:af:ba:87:60:6f:2e:93:4b:
e1:28:2d:4a:81:a1:dc:57:a4:e8:9b:9b:58:4f:3a:a5:d6:e5:
cc:b2:02:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:27:48 2026 by rpki-client