Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230392e3232302e302f32342d3234203d3e20323036383034.roa
File: 3138352e3230392e3232302e302f32342d3234203d3e20323036383034.roa (raw, json)
Hash identifier: XUNi3LbwiU/bjqp9MvCb+4DntD+ShWidqlobe7n5HMo=
Subject key identifier: 83:78:EA:8C:09:E9:14:C0:E3:69:9C:B4:52:EF:65:6A:BF:6C:DB:53
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 323740AD242C7DCCB6874119798E607799E72A2A
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230392e3232302e302f32342d3234203d3e20323036383034.roa
Signing time: Fri 24 Jul 2026 15:26:59 +0000
ROA not before: Fri 24 Jul 2026 15:21:59 +0000
ROA not after: Fri 23 Jul 2027 15:26:59 +0000
asID: 206804
IP address blocks: 185.209.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:37:40:ad:24:2c:7d:cc:b6:87:41:19:79:8e:60:77:99:e7:2a:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 24 15:21:59 2026 GMT
Not After : Jul 23 15:26:59 2027 GMT
Subject: CN=8378EA8C09E914C0E3699CB452EF656ABF6CDB53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9d:3d:72:b6:b1:9a:fd:0f:d8:00:a4:9a:1e:
b3:24:cd:f3:93:4f:e1:0b:89:20:f0:6d:8c:fd:c3:
ef:1c:0a:37:1a:ea:0c:3f:56:44:44:7f:6a:80:99:
d3:b1:d5:bf:23:88:47:36:0b:59:dc:a0:fc:99:64:
30:51:e7:40:56:95:4e:20:18:c2:cb:1d:20:9a:61:
82:61:c1:d0:8c:5a:9e:f4:d0:b7:f7:b6:05:3e:c7:
9a:99:95:d3:45:33:e2:fc:bd:b3:01:8a:81:73:db:
24:b6:44:9a:63:98:00:e8:f1:9b:6e:ee:8a:a6:4b:
48:13:a5:8e:e7:a7:ec:ea:7c:2f:8e:3a:f1:72:a0:
4f:98:b6:fb:52:46:69:4b:a9:aa:09:35:85:34:f4:
6f:55:6c:da:68:8c:c4:a6:5b:97:96:77:5b:bd:7e:
ae:3e:53:29:2a:93:63:39:bc:68:4f:b1:c8:20:35:
2e:0f:7a:07:a2:99:42:85:73:e8:ce:3d:35:c2:ba:
40:c7:63:31:ff:85:25:8b:5c:35:cf:6e:ef:eb:f4:
4c:e5:60:70:1b:dc:86:ed:e3:e8:2a:d8:6e:c8:99:
d9:56:48:7c:09:23:be:9b:d1:5d:33:c9:54:63:df:
84:86:74:84:4a:63:14:fb:6e:37:b0:0d:fe:2f:79:
6e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:78:EA:8C:09:E9:14:C0:E3:69:9C:B4:52:EF:65:6A:BF:6C:DB:53
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230392e3232302e302f32342d3234203d3e20323036383034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.209.220.0/24
Signature Algorithm: sha256WithRSAEncryption
11:03:d1:77:37:e9:f0:26:37:43:92:c2:47:10:24:50:b5:bf:
fc:03:ac:d6:5b:b3:f9:23:93:69:11:25:0d:85:26:77:31:93:
09:fe:6d:19:f0:4f:77:fa:37:a0:f6:a1:21:d2:81:3f:5c:26:
4e:db:29:10:b6:22:88:f0:45:76:53:1c:e8:8a:4a:fb:16:38:
92:d0:4c:e6:57:77:26:f4:a8:46:05:8a:02:59:8b:e3:98:ee:
2b:f4:cb:15:c7:57:ec:b9:d2:5b:2d:b3:3e:8a:e3:db:3f:fc:
ad:3a:65:b0:d4:d8:4d:43:e1:db:f0:53:59:67:9b:f5:8f:82:
b6:3e:73:17:1b:34:48:52:cc:65:cb:62:4d:f2:ec:5d:8b:65:
3d:f2:93:0b:e2:e0:25:9a:41:87:60:2c:ab:88:fb:61:4a:05:
56:f1:d0:ac:b1:3b:8c:36:14:9e:ec:f8:db:81:2f:0e:51:2c:
69:ff:2e:49:f1:a4:d5:e6:19:21:2a:63:45:c4:83:6b:91:0a:
11:a1:2b:73:0e:78:25:e5:58:6b:94:77:6e:91:71:07:e8:09:
c1:9b:1b:53:69:11:11:9f:a8:f5:4f:4c:09:34:7e:11:8c:22:
ef:c1:dd:8a:51:4d:6a:35:ec:32:09:e3:d4:4b:3b:90:80:88:
37:98:27:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:53:31 2026 by rpki-client