Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230322e3233362e302f32342d3332203d3e203531313637.roa
File: 3138352e3230322e3233362e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: Yw3TK8MpG1rWtYJSo0I39c5hQ3Ut8wFsj+/rLUhaeK4=
Subject key identifier: 53:EE:4A:AE:55:B5:A5:E7:A8:1B:75:CB:16:4A:1A:8A:3C:71:54:D4
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 34326E201B665FBEEF112AEE7F83399D56B0FA90
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230322e3233362e302f32342d3332203d3e203531313637.roa
Signing time: Fri 24 Jul 2026 15:26:52 +0000
ROA not before: Fri 24 Jul 2026 15:21:52 +0000
ROA not after: Fri 23 Jul 2027 15:26:52 +0000
asID: 51167
IP address blocks: 185.202.236.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:32:6e:20:1b:66:5f:be:ef:11:2a:ee:7f:83:39:9d:56:b0:fa:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 24 15:21:52 2026 GMT
Not After : Jul 23 15:26:52 2027 GMT
Subject: CN=53EE4AAE55B5A5E7A81B75CB164A1A8A3C7154D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f0:96:ce:62:37:ea:33:a9:86:b7:88:f9:b8:
ae:f8:2e:5e:e8:94:b9:4e:12:7a:df:d9:a3:d9:f4:
78:4b:d6:d0:48:9c:d5:8e:21:54:65:84:1a:4d:23:
0f:29:35:8d:d0:3d:ad:46:db:5e:dc:7b:1d:2a:e1:
3f:9e:41:ce:7d:dd:c6:b6:20:3e:40:42:d5:a0:46:
a7:79:01:f6:f9:fd:cb:0d:74:fd:dc:4d:40:8e:f5:
82:d1:57:9a:b1:98:b9:ce:8f:8f:6f:18:a4:e3:8c:
fb:85:1e:49:ba:bf:f8:1d:4b:6a:3f:9a:20:d0:d5:
4b:3d:02:84:4c:37:9d:dd:48:e8:19:67:6a:c6:46:
b8:ff:7d:6c:0e:34:d1:4d:2f:de:d4:e5:f1:1b:e9:
ae:5a:cc:65:13:a2:86:9c:95:c4:90:28:6d:d8:f1:
b2:50:8b:ec:0d:3a:56:81:11:c2:09:b1:d9:94:8b:
ed:3f:4b:c6:e7:21:a1:62:c4:d0:c2:fc:86:aa:0e:
8e:d8:e0:9b:fe:a3:e6:77:e3:ee:86:f2:b9:a6:81:
48:7d:7b:92:ad:76:82:9f:6c:52:78:8b:1a:0a:60:
9e:0a:bb:5b:b7:e3:d9:8e:db:94:50:45:d0:fd:6a:
0f:bc:e4:5d:56:8c:15:06:94:a1:fa:19:6d:5e:90:
ba:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:EE:4A:AE:55:B5:A5:E7:A8:1B:75:CB:16:4A:1A:8A:3C:71:54:D4
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230322e3233362e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.236.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:8f:20:3a:b6:0a:12:db:5f:3f:05:45:e2:c7:d1:ca:9f:dc:
10:f4:e5:03:b6:9c:9a:a0:97:80:81:ba:d2:22:11:0c:7d:28:
51:8e:17:b9:9f:93:81:57:d0:90:13:cb:ff:1e:f4:87:79:ba:
4e:75:f1:bc:66:24:ac:15:30:2a:be:64:cb:64:ae:36:b1:df:
fa:1c:63:e1:c9:e1:20:ce:9c:a7:5b:82:6c:f4:c5:44:06:80:
f0:7e:36:42:60:fe:f3:e4:fb:21:8b:f4:74:7b:9b:14:79:7f:
7d:61:75:09:b5:d4:01:09:a1:1c:e5:12:b1:e3:55:98:7b:a5:
71:4f:4d:f8:64:22:f2:89:cd:80:77:a2:20:48:f7:9a:74:ea:
3d:1d:4a:cb:0f:6d:5b:8c:10:a1:00:19:10:10:5a:a5:8e:28:
a2:10:4a:41:03:31:01:29:3c:86:4b:ea:df:d4:b9:00:ec:a5:
d1:e1:72:0f:93:d1:0a:28:9b:42:a5:d5:dc:a7:10:ef:32:b5:
51:46:5f:21:0b:58:d3:39:63:a7:07:a8:65:d1:45:b9:18:23:
90:54:c8:09:09:b7:d2:96:fd:5b:0d:03:2a:88:fa:32:33:2a:
0a:e0:35:9c:e0:48:f3:fe:2b:30:0d:3f:d1:35:94:db:eb:d3:
3c:bc:23:6f
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUNDJuIBtmX77vESruf4M5nVaw+pAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA3MjQxNTIxNTJaFw0yNzA3MjMxNTI2NTJaMDMxMTAvBgNV
BAMTKDUzRUU0QUFFNTVCNUE1RTdBODFCNzVDQjE2NEExQThBM0M3MTU0RDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB8JbOYjfqM6mGt4j5uK74Ll7o
lLlOEnrf2aPZ9HhL1tBInNWOIVRlhBpNIw8pNY3QPa1G217cex0q4T+eQc593ca2
ID5AQtWgRqd5Afb5/csNdP3cTUCO9YLRV5qxmLnOj49vGKTjjPuFHkm6v/gdS2o/
miDQ1Us9AoRMN53dSOgZZ2rGRrj/fWwONNFNL97U5fEb6a5azGUTooaclcSQKG3Y
8bJQi+wNOlaBEcIJsdmUi+0/S8bnIaFixNDC/IaqDo7Y4Jv+o+Z34+6G8rmmgUh9
e5KtdoKfbFJ4ixoKYJ4Ku1u349mO25RQRdD9ag+85F1WjBUGlKH6GW1ekLqRAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUU+5KrlW1peeoG3XLFkoaijxxVNQwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMjMwMzIyZTMy
MzMzNjJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM1MzEzMTM2Mzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAC5yuwwDQYJKoZIhvcNAQELBQADggEBAA+PIDq2ChLbXz8FReLH0cqf3BD05QO2
nJqgl4CButIiEQx9KFGOF7mfk4FX0JATy/8e9Id5uk518bxmJKwVMCq+ZMtkrjax
3/ocY+HJ4SDOnKdbgmz0xUQGgPB+NkJg/vPk+yGL9HR7mxR5f31hdQm11AEJoRzl
ErHjVZh7pXFPTfhkIvKJzYB3oiBI95p06j0dSssPbVuMEKEAGRAQWqWOKKIQSkED
MQEpPIZL6t/UuQDspdHhcg+T0Qoom0Kl1dynEO8ytVFGXyELWNM5Y6cHqGXRRbkY
I5BUyAkJt9KW/VsNAyqI+jIzKgrgNZzgSPP+KzANP9E1lNvr0zy8I28=
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:32:26 2026 by rpki-client