Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230392e3232302e302f32342d3234203d3e203432383938.roa
File: 3138352e3230392e3232302e302f32342d3234203d3e203432383938.roa (raw, json)
Hash identifier: qjubSsjED3gqIzby2OpPWTb2YvsXE/Yin05Is5KSwLk=
Subject key identifier: 17:F8:C6:EF:55:47:FB:55:A0:1C:9E:78:62:3E:6D:99:2E:6A:E3:CE
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6189CDF407469E0E033C7C4F4E9E6FE6291D2493
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230392e3232302e302f32342d3234203d3e203432383938.roa
Signing time: Fri 24 Jul 2026 15:26:50 +0000
ROA not before: Fri 24 Jul 2026 15:21:50 +0000
ROA not after: Fri 23 Jul 2027 15:26:50 +0000
asID: 42898
IP address blocks: 185.209.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:89:cd:f4:07:46:9e:0e:03:3c:7c:4f:4e:9e:6f:e6:29:1d:24:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 24 15:21:50 2026 GMT
Not After : Jul 23 15:26:50 2027 GMT
Subject: CN=17F8C6EF5547FB55A01C9E78623E6D992E6AE3CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4d:f2:d7:fe:82:82:19:7f:e9:13:c7:a2:40:
73:49:df:7e:f2:e7:b1:48:29:e3:2f:67:97:a5:b5:
a7:cf:f3:d3:45:8c:7f:59:e5:21:d0:54:2c:2b:38:
09:c1:c6:11:65:b3:5a:93:35:29:55:42:bd:05:29:
81:64:13:17:c1:21:6f:d6:3d:fb:1b:27:80:f0:6c:
87:eb:c5:60:ed:03:61:cc:fc:21:23:72:c0:72:ba:
6f:9a:b9:73:84:51:52:16:cc:dd:70:46:bb:e2:4b:
7f:4a:7e:b3:b1:79:64:ce:5a:b7:67:1c:3c:77:97:
3b:fc:eb:02:42:62:00:e2:0b:dc:90:0c:33:54:fe:
73:8c:11:c4:17:b9:b0:2f:31:5b:7d:3d:a2:95:be:
d7:21:0a:a6:3b:8d:ab:69:dd:15:a9:d0:f6:c2:b2:
37:31:75:0b:e8:bc:b5:c1:ba:01:44:83:d7:ae:fc:
46:82:a0:2a:05:77:f0:58:7d:c2:c9:99:fa:be:01:
62:f3:ba:d5:88:1f:46:79:ac:a3:37:74:21:39:f3:
2c:af:db:17:f0:b1:5d:f8:a4:4a:ae:c7:3c:d2:53:
94:73:58:7a:dd:90:2e:bc:53:fe:45:48:30:a1:d2:
0e:b8:4d:e6:7b:5c:c2:b7:7d:5c:a8:4a:56:d4:f8:
d8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F8:C6:EF:55:47:FB:55:A0:1C:9E:78:62:3E:6D:99:2E:6A:E3:CE
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230392e3232302e302f32342d3234203d3e203432383938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.209.220.0/24
Signature Algorithm: sha256WithRSAEncryption
85:ca:de:45:37:c1:e8:9d:54:18:e2:34:57:3a:0b:90:97:d6:
cb:1f:eb:1d:74:fe:af:f2:24:ac:5b:5a:3b:42:e3:30:9c:7e:
43:f9:4c:63:a3:50:5a:e4:8d:11:b0:b4:2f:0a:64:2b:b3:db:
fe:fa:9d:29:1b:3b:cd:96:38:4b:07:95:0e:e3:23:65:43:95:
9e:bf:a4:fa:fc:ba:c4:c1:20:28:14:16:7b:b5:d9:6c:8b:71:
d5:7b:e9:d8:ba:7d:66:e9:d7:b3:4b:8e:db:46:bf:92:fa:c9:
06:e8:c6:2f:4d:c3:f5:a8:6e:c2:c5:7e:7c:fb:93:9d:99:19:
8b:cd:c1:68:5d:85:97:1f:46:d9:c6:17:74:82:b5:59:b9:59:
da:74:89:16:3e:61:7a:33:8d:40:5c:a2:bc:b7:85:9d:23:56:
5d:48:ca:a4:2f:de:7f:57:36:0a:90:e1:20:0d:a3:5f:39:87:
a9:20:d5:a1:9a:32:b3:d8:a8:11:45:65:c5:d3:e8:4b:44:6f:
c7:20:9e:4a:10:db:e4:60:96:00:eb:64:17:3a:d8:60:48:22:
94:f0:85:f6:a2:7e:a2:21:09:92:00:46:0e:3f:96:5e:e1:a2:
da:ca:66:63:d3:b2:15:c6:41:e6:b8:52:f5:8e:3d:b1:80:82:
d8:da:e2:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:55:54 2026 by rpki-client