Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230322e3232332e302f32342d3332203d3e203531313637.roa
File: 3138352e3230322e3232332e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: 3ChucQkhtmvZbxNqFH6P2ZHZvTCDtmJ5kxZ4jl7qcXw=
Subject key identifier: B3:BC:28:79:55:7F:D7:A2:4A:EC:1B:24:0C:46:EB:17:17:6B:2A:04
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 16833D16819428359B1F6CA2B8BBDCE31F1D3456
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230322e3232332e302f32342d3332203d3e203531313637.roa
Signing time: Fri 24 Jul 2026 15:26:53 +0000
ROA not before: Fri 24 Jul 2026 15:21:53 +0000
ROA not after: Fri 23 Jul 2027 15:26:53 +0000
asID: 51167
IP address blocks: 185.202.223.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:83:3d:16:81:94:28:35:9b:1f:6c:a2:b8:bb:dc:e3:1f:1d:34:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 24 15:21:53 2026 GMT
Not After : Jul 23 15:26:53 2027 GMT
Subject: CN=B3BC2879557FD7A24AEC1B240C46EB17176B2A04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2b:8c:eb:4c:e3:3b:4b:04:79:17:04:14:97:
16:f2:7a:c4:68:a8:3a:92:d8:f7:19:35:67:a3:45:
8d:34:15:a1:9f:92:71:57:f0:d2:1f:b3:b0:56:16:
a8:9b:90:0f:2f:af:57:fd:f4:00:13:03:0d:db:d5:
ad:23:39:91:68:28:17:7b:b2:89:0e:ea:2f:ad:34:
58:d1:47:e1:b3:56:20:20:3e:27:84:6d:8f:cf:a7:
8f:97:3c:0e:ac:30:1a:99:8a:d8:fe:8f:10:73:a4:
61:c7:87:27:5b:a3:4d:ac:c4:3e:43:96:fd:75:28:
36:27:17:b9:43:18:8b:2f:28:77:de:e7:db:c6:71:
5c:75:c0:70:b5:81:af:07:c7:45:ee:72:9c:c2:f4:
d1:d7:9b:61:0c:59:a0:58:36:bd:42:f8:e5:e1:9b:
69:68:36:f2:a7:20:23:3e:7b:0c:f5:a2:8c:0d:73:
25:c3:57:c6:30:4c:71:87:c0:55:0a:bc:0e:eb:bc:
7b:78:bd:0b:58:ee:d8:a5:c5:06:b0:14:d2:bf:e9:
98:55:cf:d8:96:5a:04:f1:90:35:58:7c:65:00:b1:
4a:79:a1:38:76:6a:eb:be:72:82:64:e5:ca:0f:b3:
70:d7:c6:74:ff:30:68:a6:66:b4:58:62:70:ec:e3:
46:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:BC:28:79:55:7F:D7:A2:4A:EC:1B:24:0C:46:EB:17:17:6B:2A:04
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230322e3232332e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.223.0/24
Signature Algorithm: sha256WithRSAEncryption
36:22:04:0d:84:49:5c:2c:05:1c:ef:cc:02:af:3b:4b:17:b1:
3a:a6:e5:44:2e:62:ea:40:a4:c8:8b:bf:9c:8b:3f:a0:da:fa:
5a:bc:4c:7c:20:fd:75:ad:95:58:1d:27:51:60:eb:0e:9f:a1:
e3:b6:b4:d5:b4:e1:6f:97:23:55:8c:98:83:a7:f8:d1:06:d3:
56:65:30:2d:ff:3b:9c:aa:4a:03:7e:81:8e:a2:cd:dc:e9:9c:
df:6a:47:d0:4e:f8:f3:74:8c:ad:a5:ef:55:e9:4a:07:3f:76:
05:2d:20:ba:09:78:25:3d:f3:d2:cd:ab:13:89:b4:2b:ee:6d:
aa:09:80:9e:a4:a2:79:bc:85:5c:19:5e:2e:16:45:0c:ad:0a:
e0:5b:bd:1f:41:22:00:ac:69:72:f5:4b:cc:37:24:0f:62:ed:
dc:ac:e2:2f:a4:4b:62:52:4d:ef:cd:df:57:f9:a9:ae:8c:c7:
d3:9e:fe:5e:2f:4c:00:19:45:4c:49:61:f8:63:5b:fb:90:04:
0a:f5:bc:21:72:96:42:75:b5:77:88:36:75:cc:0b:8f:52:11:
9a:7b:c9:b9:ee:b1:84:d6:ea:4d:d1:a5:d1:55:81:f4:5d:cc:
93:8b:c5:b0:53:a1:f1:64:23:29:7c:84:42:01:ea:73:59:2f:
89:c3:c5:af
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUFoM9FoGUKDWbH2yiuLvc4x8dNFYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA3MjQxNTIxNTNaFw0yNzA3MjMxNTI2NTNaMDMxMTAvBgNV
BAMTKEIzQkMyODc5NTU3RkQ3QTI0QUVDMUIyNDBDNDZFQjE3MTc2QjJBMDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNK4zrTOM7SwR5FwQUlxbyesRo
qDqS2PcZNWejRY00FaGfknFX8NIfs7BWFqibkA8vr1f99AATAw3b1a0jOZFoKBd7
sokO6i+tNFjRR+GzViAgPieEbY/Pp4+XPA6sMBqZitj+jxBzpGHHhydbo02sxD5D
lv11KDYnF7lDGIsvKHfe59vGcVx1wHC1ga8Hx0XucpzC9NHXm2EMWaBYNr1C+OXh
m2loNvKnICM+ewz1oowNcyXDV8YwTHGHwFUKvA7rvHt4vQtY7tilxQawFNK/6ZhV
z9iWWgTxkDVYfGUAsUp5oTh2auu+coJk5coPs3DXxnT/MGimZrRYYnDs40abAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUs7woeVV/16JK7BskDEbrFxdrKgQwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMjMwMzIyZTMy
MzIzMzJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM1MzEzMTM2Mzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAC5yt8wDQYJKoZIhvcNAQELBQADggEBADYiBA2ESVwsBRzvzAKvO0sXsTqm5UQu
YupApMiLv5yLP6Da+lq8THwg/XWtlVgdJ1Fg6w6foeO2tNW04W+XI1WMmIOn+NEG
01ZlMC3/O5yqSgN+gY6izdzpnN9qR9BO+PN0jK2l71XpSgc/dgUtILoJeCU989LN
qxOJtCvubaoJgJ6konm8hVwZXi4WRQytCuBbvR9BIgCsaXL1S8w3JA9i7dys4i+k
S2JSTe/N31f5qa6Mx9Oe/l4vTAAZRUxJYfhjW/uQBAr1vCFylkJ1tXeINnXMC49S
EZp7ybnusYTW6k3RpdFVgfRdzJOLxbBTofFkIyl8hEIB6nNZL4nDxa8=
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:56:01 2026 by rpki-client