Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230322e3233382e302f32332d3332203d3e203531313637.roa
File: 3138352e3230322e3233382e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier: +NdkKt67x3Sgp08aylfl0FLB5lq7+8AKzaksmP1Hdb0=
Subject key identifier: A3:D0:CF:BF:DD:2B:26:08:A1:2C:BC:59:6B:BB:84:AC:2C:3C:3C:F6
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 65589C239F29B16322206FB38E84102A4A6CCAD7
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230322e3233382e302f32332d3332203d3e203531313637.roa
Signing time: Fri 24 Jul 2026 15:27:00 +0000
ROA not before: Fri 24 Jul 2026 15:22:00 +0000
ROA not after: Fri 23 Jul 2027 15:27:00 +0000
asID: 51167
IP address blocks: 185.202.238.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:12:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:58:9c:23:9f:29:b1:63:22:20:6f:b3:8e:84:10:2a:4a:6c:ca:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 24 15:22:00 2026 GMT
Not After : Jul 23 15:27:00 2027 GMT
Subject: CN=A3D0CFBFDD2B2608A12CBC596BBB84AC2C3C3CF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5a:9b:64:10:46:cf:67:c9:da:42:6f:b7:7b:
f4:23:66:a3:65:11:0d:37:20:bc:a1:2b:fb:98:93:
1c:d6:a2:ab:f1:6a:61:5c:8d:f2:d5:bd:37:14:8f:
3a:d5:90:77:1b:74:c7:7e:37:e6:f6:d9:0c:b2:b1:
a7:b1:11:60:ac:76:8a:c3:d5:9e:ad:ef:4d:24:ec:
4e:38:6d:4b:c3:17:d9:fb:84:02:95:51:db:51:08:
05:90:72:da:38:85:41:e5:b9:d5:00:86:f0:93:95:
83:9e:8e:04:48:58:a9:df:83:29:7f:ea:8f:97:9f:
21:90:2b:1f:44:8d:0b:e9:9d:7d:55:5b:77:b1:61:
b3:a7:bb:62:96:d2:d4:79:6c:ad:22:e5:66:6e:ca:
90:82:2c:fe:b0:e3:84:5c:d9:25:c9:47:e6:62:b4:
9b:35:7c:f0:15:b4:a7:5e:47:f0:d4:3e:29:aa:97:
d5:03:f5:09:ec:d5:a0:7d:a2:6e:53:33:eb:41:1d:
93:02:d7:8d:5f:ae:8b:f9:83:5e:25:a1:8f:5d:da:
37:f9:70:1a:47:ef:01:cc:ce:64:36:ca:b9:7f:76:
fa:e3:5e:15:c3:f3:34:a0:c6:cd:21:4c:60:cb:3d:
d3:eb:ce:db:af:29:55:6f:b4:e1:42:bf:38:17:25:
53:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D0:CF:BF:DD:2B:26:08:A1:2C:BC:59:6B:BB:84:AC:2C:3C:3C:F6
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230322e3233382e302f32332d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.238.0/23
Signature Algorithm: sha256WithRSAEncryption
36:ab:41:81:85:34:4d:58:de:90:b7:aa:71:63:5c:d7:40:1f:
b5:a9:af:c4:4a:57:f9:78:77:2f:ba:f4:0f:57:9d:99:2d:48:
15:9a:39:45:67:aa:02:ea:ab:4c:3b:88:74:7f:47:7d:70:17:
fa:ff:11:b1:b2:ed:2f:4d:fa:31:a3:06:85:ee:fc:49:f1:98:
ac:11:44:17:02:bc:ad:ca:78:92:2d:f7:48:28:9b:b8:4c:46:
ad:c6:d8:0a:c5:9b:88:5a:29:5e:4a:2a:ca:32:d9:89:d1:21:
be:ee:b4:ae:8b:4b:d1:22:18:17:f6:f5:02:09:00:af:57:e9:
6b:83:cc:07:e1:88:26:e0:d8:ae:af:92:d1:87:e4:b7:64:dd:
5f:a6:48:80:d7:6f:bd:27:34:c1:1a:66:fc:89:2c:cc:b3:55:
2d:ec:a0:aa:a1:b7:ef:5c:3e:c8:5d:c4:b1:fa:46:f4:bf:3f:
60:31:39:51:16:a9:5b:d8:74:83:af:cf:fa:82:3f:ad:0a:aa:
8b:64:54:9a:2b:05:ef:97:bc:50:c5:4c:6d:f7:96:bb:5c:44:
be:80:99:06:ac:80:78:4f:13:86:74:e8:41:55:00:8d:36:69:
39:a6:19:34:7d:a0:29:fe:fd:29:d0:8b:39:45:2b:ab:be:de:
6f:8a:d2:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:38:01 2026 by rpki-client