Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230332e3231382e302f32342d3234203d3e20313431303339.roa
File: 3138352e3230332e3231382e302f32342d3234203d3e20313431303339.roa (raw, json)
Hash identifier: CnhymgrWFSUhfvPbEq3CqKp+DlO4yYqzqNhPGF31M/4=
Subject key identifier: 02:D0:72:64:6C:B3:F2:80:70:E6:7D:6E:E9:46:02:D1:53:62:26:39
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2C15BA91F37D04F4EA18305CAED8C05FE33F0811
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230332e3231382e302f32342d3234203d3e20313431303339.roa
Signing time: Fri 24 Jul 2026 15:26:56 +0000
ROA not before: Fri 24 Jul 2026 15:21:56 +0000
ROA not after: Fri 23 Jul 2027 15:26:56 +0000
asID: 141039
IP address blocks: 185.203.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:12:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:15:ba:91:f3:7d:04:f4:ea:18:30:5c:ae:d8:c0:5f:e3:3f:08:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 24 15:21:56 2026 GMT
Not After : Jul 23 15:26:56 2027 GMT
Subject: CN=02D072646CB3F28070E67D6EE94602D153622639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9f:e5:bb:f9:bb:5d:54:e9:90:6d:17:f8:9f:
ab:4b:2e:4e:ce:5e:69:f7:aa:4b:dd:6f:4a:a5:d1:
a8:72:1a:16:fa:bd:de:9d:58:37:9f:a1:b9:49:11:
16:ce:b1:21:ac:b1:74:be:a7:bc:1a:ff:d2:47:d2:
93:6f:60:09:20:0e:b7:6f:24:f8:f3:75:fe:e0:99:
79:0d:a5:63:34:7b:6d:e1:0b:81:ab:b7:52:a6:11:
4d:4a:18:14:e6:14:1e:d7:02:83:73:93:f0:3a:22:
ff:cc:86:0c:c6:15:2b:a1:0b:ec:e6:5f:a1:39:17:
bf:d7:34:04:99:d1:6a:76:19:0d:05:bd:11:15:cc:
d0:8f:64:4a:ed:16:f0:2d:45:9d:42:57:c6:0a:1a:
b6:bd:bd:99:3a:a1:f0:4e:01:b0:dd:75:52:ee:84:
9d:6b:8c:5c:e3:f1:f2:d5:50:ab:9e:29:9a:06:d5:
35:fd:fb:eb:b9:e6:cd:63:bb:e6:17:df:b9:59:7c:
6a:9d:27:3b:6e:78:78:0a:54:28:da:d0:62:ef:d5:
b1:6d:4b:86:34:16:09:47:1d:a8:ce:bb:31:0f:8e:
02:8d:34:9b:25:63:28:8e:7a:f2:dd:bd:8a:af:d0:
0f:39:78:cc:44:cf:74:fb:ba:01:67:aa:f5:0f:0d:
dc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:D0:72:64:6C:B3:F2:80:70:E6:7D:6E:E9:46:02:D1:53:62:26:39
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230332e3231382e302f32342d3234203d3e20313431303339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.203.218.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:72:97:d8:54:c7:2b:d2:18:10:4b:f2:12:87:2c:4a:78:61:
d1:c6:28:bb:9d:59:02:3a:25:af:58:7f:47:72:8f:6c:6e:de:
e6:0c:c2:2c:02:9f:50:93:54:1f:c2:b5:61:08:2b:33:90:0b:
9d:49:d4:18:58:55:6c:d8:68:e7:e7:77:c9:3f:93:2e:e3:b8:
c6:51:84:6d:b8:28:03:d7:fc:f6:27:cf:3e:4a:5b:51:1a:c2:
c9:8f:8a:b6:dc:0d:f9:57:15:b7:b5:8b:5f:91:a6:b5:01:6d:
75:7f:83:6d:51:e0:5d:8b:b8:53:62:eb:19:26:2f:1b:f8:62:
72:53:b4:38:e5:be:90:8d:4c:e0:bd:e6:28:62:f2:71:41:0b:
dd:d7:67:68:48:c3:f2:d7:ef:cc:5c:ab:d9:49:ef:1d:a7:08:
c1:9e:2b:86:24:e2:95:4a:1d:71:fe:25:6a:e2:5b:a3:b0:28:
0d:06:97:99:5b:4b:61:bb:14:72:ce:77:8b:a4:ee:63:ea:73:
dc:b9:96:b5:85:70:5d:e4:bc:e0:9c:a1:ba:54:23:7f:28:11:
b1:43:47:18:9d:8d:13:d5:b5:65:e5:66:87:9f:94:c9:94:ff:
3e:a1:4a:e5:5f:bb:59:ad:03:16:e5:ac:44:12:76:49:ca:32:
6e:8d:9a:25
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIULBW6kfN9BPTqGDBcrtjAX+M/CBEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA3MjQxNTIxNTZaFw0yNzA3MjMxNTI2NTZaMDMxMTAvBgNV
BAMTKDAyRDA3MjY0NkNCM0YyODA3MEU2N0Q2RUU5NDYwMkQxNTM2MjI2MzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcn+W7+btdVOmQbRf4n6tLLk7O
Xmn3qkvdb0ql0ahyGhb6vd6dWDefoblJERbOsSGssXS+p7wa/9JH0pNvYAkgDrdv
JPjzdf7gmXkNpWM0e23hC4Grt1KmEU1KGBTmFB7XAoNzk/A6Iv/MhgzGFSuhC+zm
X6E5F7/XNASZ0Wp2GQ0FvREVzNCPZErtFvAtRZ1CV8YKGra9vZk6ofBOAbDddVLu
hJ1rjFzj8fLVUKueKZoG1TX9++u55s1ju+YX37lZfGqdJztueHgKVCja0GLv1bFt
S4Y0FglHHajOuzEPjgKNNJslYyiOevLdvYqv0A85eMxEz3T7ugFnqvUPDdxxAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUAtByZGyz8oBw5n1u6UYC0VNiJjkwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMjMwMzMyZTMy
MzEzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzMTMwMzMzOS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEALnL2jANBgkqhkiG9w0BAQsFAAOCAQEAW3KX2FTHK9IYEEvyEocsSnhh0cYo
u51ZAjolr1h/R3KPbG7e5gzCLAKfUJNUH8K1YQgrM5ALnUnUGFhVbNho5+d3yT+T
LuO4xlGEbbgoA9f89ifPPkpbURrCyY+KttwN+VcVt7WLX5GmtQFtdX+DbVHgXYu4
U2LrGSYvG/hiclO0OOW+kI1M4L3mKGLycUEL3ddnaEjD8tfvzFyr2UnvHacIwZ4r
hiTilUodcf4lauJbo7AoDQaXmVtLYbsUcs53i6TuY+pz3LmWtYVwXeS84JyhulQj
fygRsUNHGJ2NE9W1ZeVmh5+UyZT/PqFK5V+7Wa0DFuWsRBJ2Scoybo2aJQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 17:21:11 2026 by rpki-client