Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230372e3235312e302f32342d3332203d3e203531313637.roa
File: 3138352e3230372e3235312e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: DRPo2xByDG9nGUAMtdFsQ/30vh5GXuhRHyV9FPjJYYc=
Subject key identifier: 32:88:66:13:B5:DD:02:AB:0C:A4:25:3E:30:E2:A2:0C:FF:98:40:C9
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4E931EF132E7E059294834B0E68464BB046A0DEE
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230372e3235312e302f32342d3332203d3e203531313637.roa
Signing time: Fri 24 Jul 2026 15:26:58 +0000
ROA not before: Fri 24 Jul 2026 15:21:58 +0000
ROA not after: Fri 23 Jul 2027 15:26:58 +0000
asID: 51167
IP address blocks: 185.207.251.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:93:1e:f1:32:e7:e0:59:29:48:34:b0:e6:84:64:bb:04:6a:0d:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 24 15:21:58 2026 GMT
Not After : Jul 23 15:26:58 2027 GMT
Subject: CN=32886613B5DD02AB0CA4253E30E2A20CFF9840C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:67:e5:41:d0:22:41:4f:20:ed:22:29:16:8f:
24:7c:d6:e7:ef:87:34:ac:d0:65:56:e4:51:f7:8a:
f8:86:63:e9:02:03:57:18:b1:2b:40:cc:86:fa:f9:
94:29:0c:d1:47:f1:43:10:20:8f:9e:26:31:41:84:
f5:f4:a7:b6:23:f9:d7:94:e8:cf:9a:ff:72:da:2a:
11:9e:4c:a3:18:10:93:8b:b3:bd:ad:7c:58:2f:ad:
ac:5d:76:8c:ea:8f:1c:b6:56:f8:c1:c4:92:97:e8:
18:1b:ca:58:ac:01:1b:e4:b5:ac:5f:5f:56:87:29:
42:35:8d:95:74:c3:7e:81:ae:76:83:a9:cd:c7:c6:
8f:40:92:7c:6b:3e:bc:d2:99:24:81:42:8f:8b:29:
61:91:1e:cc:b7:a3:6e:a7:d5:9f:60:63:00:44:22:
b4:3b:36:d9:45:31:b1:91:f3:41:eb:ff:ab:4b:89:
d2:d4:9e:e0:b1:69:d0:01:4c:1f:9b:24:f8:69:0f:
dc:52:39:26:27:df:4b:55:88:50:d4:a0:1c:e0:38:
19:ea:ef:cd:4f:1c:90:2b:52:72:0e:6a:1e:83:86:
38:c9:66:cd:7a:9d:73:33:14:e8:23:77:33:31:7f:
48:cf:95:8e:2b:38:da:5a:bb:a7:41:85:67:ed:c5:
6b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:88:66:13:B5:DD:02:AB:0C:A4:25:3E:30:E2:A2:0C:FF:98:40:C9
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230372e3235312e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.207.251.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:b8:82:fa:13:6f:e6:53:ba:60:31:5d:dc:f7:61:3d:bf:00:
ad:76:0f:a5:c5:28:90:15:72:0b:5f:a2:27:66:a9:91:9a:16:
2c:10:fb:85:f5:c4:65:20:08:5a:15:59:56:4c:c5:78:c8:3b:
2a:f0:ee:93:8d:f6:24:33:7e:85:58:e5:00:d9:1d:e6:8f:17:
20:14:4a:40:70:eb:be:6a:34:47:1a:cc:06:60:c2:51:2a:57:
c5:c3:5a:9e:ce:da:d9:a5:74:a7:0b:bc:00:86:52:39:24:35:
da:6e:a4:06:3b:2f:15:c7:65:29:c9:53:46:c6:68:33:d9:d7:
e7:79:5c:e7:03:81:fa:f5:2d:b4:f0:6c:30:fc:04:98:5b:8a:
41:80:03:17:f3:07:5b:78:fc:92:d2:be:58:72:93:6c:4b:fb:
da:18:34:c3:6e:e6:ea:29:80:52:cb:2c:b8:4a:02:a3:d7:13:
cc:c8:d4:1e:63:50:69:e0:1a:36:51:7e:4f:a8:3d:85:eb:d6:
6d:a7:a4:c0:97:b2:dd:81:7d:5b:f5:38:a3:9d:b6:9d:a6:5e:
04:35:e3:1a:2d:e2:2d:c2:a2:71:6f:3b:22:70:80:ff:ed:86:
ac:3f:0f:2c:b1:62:1d:6c:34:76:7d:66:72:ef:4d:c3:50:d5:
70:1a:5f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:29:07 2026 by rpki-client