Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230392e3232302e302f32342d3234203d3e20323033333830.roa
File: 3138352e3230392e3232302e302f32342d3234203d3e20323033333830.roa (raw, json)
Hash identifier: 8OlombEA1hw6N8akJt4771qsWQi5Tawm4FzqbxXVAw4=
Subject key identifier: 1A:40:5D:66:B0:62:08:4C:9B:C9:00:56:61:D4:1E:F3:CA:81:D5:07
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2AA092FB53CDF445A7E05B5F884FFBA29271C3D9
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230392e3232302e302f32342d3234203d3e20323033333830.roa
Signing time: Fri 24 Jul 2026 15:26:44 +0000
ROA not before: Fri 24 Jul 2026 15:21:44 +0000
ROA not after: Fri 23 Jul 2027 15:26:44 +0000
asID: 203380
IP address blocks: 185.209.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:a0:92:fb:53:cd:f4:45:a7:e0:5b:5f:88:4f:fb:a2:92:71:c3:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 24 15:21:44 2026 GMT
Not After : Jul 23 15:26:44 2027 GMT
Subject: CN=1A405D66B062084C9BC9005661D41EF3CA81D507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:48:e3:3a:e3:30:13:b1:f1:80:a7:83:fb:bd:
94:0f:bf:96:4a:8b:9a:1f:89:7a:57:41:93:d6:c5:
cb:24:4f:a8:2e:0f:a4:41:e3:56:93:7e:d6:e2:65:
03:4d:d9:97:da:6e:29:53:2b:d6:e2:0b:e7:7d:47:
7e:52:c2:75:51:38:e0:e4:a9:df:67:dc:ea:43:89:
82:c6:da:c9:6e:24:2a:c1:a6:de:22:be:9a:0d:61:
42:fd:57:46:5b:1a:ac:37:a8:fb:0a:5a:35:43:b2:
24:0a:1f:bd:02:28:ad:fc:0b:3b:1c:9f:d7:1d:9f:
e4:65:01:09:24:ce:f8:b9:db:42:90:d7:4d:6a:1c:
c8:7c:77:3c:c8:93:d7:3c:9c:1b:6a:81:36:82:95:
55:72:29:1d:52:2a:e8:15:4a:6d:be:0a:c7:3f:d7:
60:17:be:8b:56:aa:23:04:99:fe:a0:16:c8:bf:4e:
20:75:3a:11:68:ae:e2:89:5a:00:ef:f9:a2:05:5d:
06:2e:fd:5c:ae:51:09:ce:d5:a1:9c:51:0a:62:f9:
17:c3:61:e4:d9:f0:12:2d:48:aa:99:dd:13:99:64:
07:7e:22:5b:7b:cf:de:60:84:4c:fc:2f:16:91:f8:
ed:cd:88:07:48:7d:e6:e0:8a:f5:2a:0d:f3:21:54:
85:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:40:5D:66:B0:62:08:4C:9B:C9:00:56:61:D4:1E:F3:CA:81:D5:07
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230392e3232302e302f32342d3234203d3e20323033333830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.209.220.0/24
Signature Algorithm: sha256WithRSAEncryption
98:5e:5c:cb:9c:4a:b9:bc:e2:5a:93:e8:ec:28:19:23:2b:7c:
63:39:d0:3c:26:1c:86:11:ba:19:5c:1b:48:31:de:74:fc:18:
00:81:06:22:e3:28:b2:65:13:bc:d4:69:f8:60:f1:6d:c5:4a:
83:75:54:76:59:16:41:98:25:62:f4:1b:50:b6:21:36:06:eb:
4b:27:24:bd:be:a9:2c:c0:7a:d1:58:ec:ef:19:60:20:58:7c:
67:20:f5:c3:6a:c0:cb:2d:af:d2:3a:87:a6:6e:cb:28:92:0d:
3b:89:ff:92:b1:5e:fc:83:ed:f6:a5:b2:81:c2:14:f7:00:3d:
46:38:a0:f0:84:6e:5c:ca:fc:3b:ea:66:0d:66:c1:3e:ca:66:
4c:ff:df:03:5d:e7:32:78:d4:99:4e:bc:c2:81:06:14:82:11:
fd:66:fd:9f:2a:45:6f:bf:49:6d:df:ca:f3:ae:a9:d3:65:c0:
82:d9:df:87:b0:57:8b:f0:b7:b3:9f:26:c2:97:cd:95:d5:a7:
33:12:7e:da:54:cc:85:37:0d:67:ec:b2:76:54:2d:a6:72:7d:
cc:16:f2:7b:70:9c:6c:49:48:8d:38:f2:b2:fc:55:2d:1f:ea:
4b:9e:3b:67:fc:0c:a3:0f:08:ec:78:b2:4e:c3:73:c5:69:95:
6f:b9:57:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:18:36 2026 by rpki-client