Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230332e3231392e302f32342d3234203d3e20313431303339.roa
File: 3138352e3230332e3231392e302f32342d3234203d3e20313431303339.roa (raw, json)
Hash identifier: 2d8o4372cQjioQ8lBoPR+9EnKBdQpbemFbQWhyfCBXg=
Subject key identifier: 43:44:97:D2:FC:A1:66:8A:27:B1:AE:1E:50:80:54:C6:82:71:3E:9B
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2007561D6EDC3E195BF9899CEDB91659832539F9
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230332e3231392e302f32342d3234203d3e20313431303339.roa
Signing time: Fri 24 Jul 2026 15:27:00 +0000
ROA not before: Fri 24 Jul 2026 15:22:00 +0000
ROA not after: Fri 23 Jul 2027 15:27:00 +0000
asID: 141039
IP address blocks: 185.203.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:12:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:07:56:1d:6e:dc:3e:19:5b:f9:89:9c:ed:b9:16:59:83:25:39:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 24 15:22:00 2026 GMT
Not After : Jul 23 15:27:00 2027 GMT
Subject: CN=434497D2FCA1668A27B1AE1E508054C682713E9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fd:ba:92:17:68:c6:2e:ba:82:97:2b:9e:62:
6c:3e:37:47:3f:8e:fd:62:c7:6c:f2:51:18:33:87:
15:a0:fd:56:5d:04:22:ae:c4:db:9d:d5:f4:33:79:
dd:d8:4d:28:fb:9f:13:70:0e:ff:11:02:19:bf:f6:
77:6c:4a:14:27:23:2d:1d:01:93:93:56:a3:ab:16:
7f:f4:40:75:24:74:1b:e0:74:9a:f8:b7:b4:25:5d:
d8:b6:f3:a8:7e:32:e1:d5:de:c4:6d:fe:aa:2f:2d:
90:34:35:5b:22:2c:83:53:68:ce:5f:da:30:ca:5b:
95:67:8d:2e:57:8c:5c:6e:94:a8:25:87:f0:5c:ed:
ca:6e:6d:36:fe:05:5e:50:f1:1f:45:76:65:11:c3:
82:79:6b:f3:1d:a1:e0:be:9e:25:44:2a:02:3a:9f:
b1:b6:22:ed:c0:73:02:06:4e:82:e4:54:92:c8:9d:
b2:94:c3:53:ac:72:d7:cf:6b:13:74:66:66:c3:04:
fd:b8:02:dd:15:3f:4c:00:18:38:7a:71:76:a5:69:
b6:34:15:fe:bc:76:71:11:c5:be:2c:9e:18:00:aa:
6c:24:e4:ca:09:0a:0d:15:72:5f:25:ca:b5:99:9f:
c0:42:b4:dc:1a:5a:06:43:a4:fb:1b:6b:ab:9c:ea:
28:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:44:97:D2:FC:A1:66:8A:27:B1:AE:1E:50:80:54:C6:82:71:3E:9B
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230332e3231392e302f32342d3234203d3e20313431303339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.203.219.0/24
Signature Algorithm: sha256WithRSAEncryption
15:09:a6:65:10:f4:28:38:64:2b:c1:3e:71:8a:bd:e6:c4:b2:
4b:ec:3f:9e:5f:4d:24:c8:9f:c0:ed:36:61:7e:a5:5e:5b:e7:
10:fd:44:55:86:5e:69:af:ad:06:dd:b5:d8:b4:20:28:2f:24:
3a:ac:74:65:c9:c9:34:f5:f1:2f:7d:73:2f:86:ff:52:a7:fc:
5e:3f:8c:2a:82:51:35:58:84:22:2a:f3:b6:99:64:56:7d:07:
04:b8:97:59:d2:65:67:95:4e:38:8c:22:06:d9:3a:46:d2:b3:
08:21:e2:c6:6d:fb:de:0c:f9:b3:04:42:74:f1:54:7e:f4:e1:
b4:38:3d:9b:3e:39:78:fa:68:cd:62:8c:81:62:a8:2f:a8:43:
33:f9:ba:12:e3:e1:93:ff:6d:6d:7f:10:d5:38:2b:79:ed:7b:
3c:8e:95:52:82:d8:b7:c3:8f:d6:cd:68:90:3e:fd:32:fe:c0:
65:b7:a9:42:48:05:4f:bf:6f:bd:7f:e5:1b:4f:ad:5e:5e:61:
51:74:c8:ff:ee:d3:6e:82:3b:3d:f6:a0:09:ed:dd:1b:cf:58:
c2:b4:d6:d0:16:e4:2e:62:31:72:a8:03:25:7e:e0:f8:f1:f2:
20:fc:59:9d:e5:29:67:f8:5f:12:91:74:3e:b6:16:d0:25:b9:
27:33:cb:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:21:10 2026 by rpki-client