Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230392e3232302e302f32342d3234203d3e20323031383832.roa
File: 3138352e3230392e3232302e302f32342d3234203d3e20323031383832.roa (raw, json)
Hash identifier: 4mNha2pg4+BsEK66KA7RR7KYkDwyWThjUqynQ33CO7I=
Subject key identifier: EC:75:E9:F8:42:61:04:EF:B5:4E:96:B3:C5:B8:2B:CD:D5:CE:B6:41
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 06C9AD8EB948199D80D3FFF48B7154EC66ECB6D2
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230392e3232302e302f32342d3234203d3e20323031383832.roa
Signing time: Fri 24 Jul 2026 15:26:38 +0000
ROA not before: Fri 24 Jul 2026 15:21:38 +0000
ROA not after: Fri 23 Jul 2027 15:26:38 +0000
asID: 201882
IP address blocks: 185.209.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:c9:ad:8e:b9:48:19:9d:80:d3:ff:f4:8b:71:54:ec:66:ec:b6:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 24 15:21:38 2026 GMT
Not After : Jul 23 15:26:38 2027 GMT
Subject: CN=EC75E9F8426104EFB54E96B3C5B82BCDD5CEB641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:75:59:9a:55:4b:a2:93:95:4d:fa:29:69:09:
af:48:c6:38:33:f0:73:bb:92:77:2a:22:ed:99:74:
e6:68:94:d2:8b:d6:66:7e:10:3d:17:c8:68:54:42:
cb:58:89:98:06:f0:c0:1f:37:c0:8c:99:c6:47:98:
9a:fe:48:be:40:81:36:35:10:31:eb:bd:7b:86:18:
af:77:29:f5:2a:4b:9f:81:21:12:14:9f:99:be:fc:
ee:15:43:05:0c:bb:39:b6:9b:b0:9b:4f:a5:d3:06:
36:f7:5f:29:39:ca:3b:c8:3f:61:88:6a:ab:f2:84:
a1:91:73:4b:41:9c:91:31:72:c1:0f:b1:34:be:e8:
d3:3f:96:fa:a4:17:de:22:3e:3f:dd:f3:db:2d:ee:
8e:4f:17:49:22:27:8e:7e:b4:29:bf:83:77:d5:25:
4f:f9:92:da:51:df:47:2c:0b:c1:6d:6e:bd:76:ab:
06:62:51:31:ad:60:5c:5c:0a:5e:88:32:8d:51:19:
6e:90:3d:ff:bc:f3:59:81:68:6d:4b:a7:5b:61:ca:
ad:41:d0:b9:2d:24:75:30:e2:65:a5:0e:06:c7:43:
48:fa:fb:a6:52:3e:9e:94:19:9e:a6:99:b7:6f:7e:
74:3d:f2:92:12:28:c3:b3:a5:63:65:e6:de:b9:f6:
0c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:75:E9:F8:42:61:04:EF:B5:4E:96:B3:C5:B8:2B:CD:D5:CE:B6:41
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230392e3232302e302f32342d3234203d3e20323031383832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.209.220.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:0b:ec:e2:77:10:6c:1e:96:d5:fd:26:2b:dd:b2:f5:30:16:
e3:30:b1:11:c4:8e:48:aa:b3:f6:c8:63:e0:16:9e:f4:28:94:
ab:5f:60:3d:8b:b5:8a:65:21:cd:3b:3b:64:5d:17:bd:79:88:
25:38:1d:fd:39:fa:8f:f3:90:53:47:cb:f1:68:e7:fe:c2:04:
24:d1:9b:89:82:ab:66:65:f1:5b:37:86:6e:02:54:cb:12:79:
8c:c7:22:26:51:8f:33:ed:d9:26:0f:60:3c:f8:53:3e:78:22:
56:02:72:df:9e:05:82:c4:c8:1b:86:45:4e:50:3f:4a:28:65:
b7:98:e2:7a:a7:b1:9a:51:ff:33:54:f7:3d:84:18:af:e1:5e:
82:6b:bd:f3:68:e7:ec:d9:53:46:86:1f:62:05:cb:45:78:17:
2a:45:0c:3e:3f:53:fd:58:9c:f7:01:1a:9d:af:1d:d4:cd:95:
44:70:4e:c0:ab:42:0a:1f:9f:28:4e:38:72:6f:f6:4d:55:64:
57:85:5e:0f:3e:fa:37:3a:45:02:d3:b0:b0:b2:aa:8e:fb:d9:
ff:51:3e:6b:cb:ec:98:75:1f:f7:5d:44:82:0e:7a:5c:4a:24:
ff:f3:36:d6:86:12:f5:62:4a:ee:16:01:c8:c5:5a:8f:19:3c:
b6:b7:38:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:12:40 2026 by rpki-client