Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230392e3232302e302f32342d3234203d3e203538323132.roa
File: 3138352e3230392e3232302e302f32342d3234203d3e203538323132.roa (raw, json)
Hash identifier: DKAyOwIY61MDzUnhMCS9m6WXWM5qepFMj1HQfusulCU=
Subject key identifier: FE:C7:76:71:46:4A:FD:52:83:16:37:B4:46:EF:14:54:F8:3B:56:73
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 684303285728204FB36DBF695FC81CB345DE7ADA
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230392e3232302e302f32342d3234203d3e203538323132.roa
Signing time: Fri 24 Jul 2026 15:26:39 +0000
ROA not before: Fri 24 Jul 2026 15:21:39 +0000
ROA not after: Fri 23 Jul 2027 15:26:39 +0000
asID: 58212
IP address blocks: 185.209.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:43:03:28:57:28:20:4f:b3:6d:bf:69:5f:c8:1c:b3:45:de:7a:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 24 15:21:39 2026 GMT
Not After : Jul 23 15:26:39 2027 GMT
Subject: CN=FEC77671464AFD52831637B446EF1454F83B5673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c8:ca:9c:97:80:e2:e0:91:d1:b5:c8:28:6c:
11:5a:68:dc:e0:7b:26:f5:c3:0f:a9:9f:76:36:f7:
b0:2e:53:09:bb:5e:c9:78:94:21:11:c9:8c:46:17:
b0:21:4c:20:40:61:cd:8d:05:e4:db:f9:10:0b:bb:
69:42:e2:72:33:c9:93:6e:0e:03:7d:19:10:ed:33:
74:28:f6:20:a9:16:ed:0a:5d:7f:7c:9d:2c:89:14:
de:41:5a:c8:5b:e5:dc:b5:1e:28:13:0e:ba:a0:25:
1c:ff:2b:8d:a4:c2:6d:34:9b:6c:e7:35:8c:0a:14:
af:47:75:db:63:8a:b5:e7:4f:78:48:c5:5f:27:16:
b3:04:0f:5e:90:2c:3a:6c:e8:2c:5c:ad:11:e5:68:
31:ba:f0:83:98:a8:ea:12:fc:2a:8d:ff:75:b0:21:
42:b8:cd:bb:ae:f5:a2:f5:a7:7c:1d:dd:fd:9f:c9:
37:c9:7d:c2:4d:79:27:58:2d:00:45:6b:76:bf:ce:
64:be:ef:4e:e4:d7:7d:03:a2:03:25:f5:50:8a:01:
e5:95:68:b2:a3:89:a0:fc:aa:95:31:ab:f3:22:1c:
bd:2c:40:d4:90:1b:2a:78:e2:3e:59:24:28:33:63:
71:14:82:6d:6c:4f:7d:00:5b:f8:5a:ec:aa:3a:71:
7c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:C7:76:71:46:4A:FD:52:83:16:37:B4:46:EF:14:54:F8:3B:56:73
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230392e3232302e302f32342d3234203d3e203538323132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.209.220.0/24
Signature Algorithm: sha256WithRSAEncryption
29:5a:61:23:35:af:6a:58:40:f5:32:60:36:fa:eb:58:eb:35:
7f:cc:d1:dc:df:a2:c3:84:93:8b:a5:6f:ee:8b:3a:2c:73:c8:
08:1d:64:f1:4c:ff:f3:68:3b:8a:46:8f:89:64:dc:d0:3b:bd:
a5:7d:08:4c:bf:83:0e:2f:d4:c4:e6:da:86:e1:c4:58:f6:ef:
50:1c:f1:c6:ac:98:e3:e9:89:ab:74:45:25:8b:bb:e9:e0:fe:
07:6d:a7:1d:87:9a:b2:90:e3:ad:7f:47:70:8d:bb:c3:8b:9a:
de:11:82:1b:b0:6b:44:07:ec:66:de:08:2d:d2:48:3b:5e:9b:
1b:c7:68:de:8a:85:67:3c:97:64:34:ee:7d:e4:7a:b0:2d:ba:
05:84:34:98:36:b0:9a:31:4a:e3:fb:77:96:0e:94:2b:b3:a6:
93:81:52:4f:c3:4d:3a:98:b0:96:d7:22:bf:53:06:c8:ba:e5:
08:81:29:62:fc:ab:08:27:b1:43:72:f8:6b:98:6c:35:a4:53:
bf:8f:33:5b:5a:65:6a:22:5a:c3:b6:0d:ff:64:88:92:81:82:
94:69:88:d7:44:29:54:4c:4d:5d:cb:24:d2:14:b2:4a:45:cc:
ec:e2:e7:41:88:1f:01:00:b6:8d:bc:42:27:54:87:47:7e:7b:
8b:cb:e5:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:38:04 2026 by rpki-client