Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231312e352e302f32342d3332203d3e203531313637.roa
File: 3138352e3231312e352e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: Roov5pnlj4a0RjtPn795ZlnAkwUtc+D0qWmyzeS5o3c=
Subject key identifier: DD:ED:D8:62:63:8C:3D:41:6C:EF:A2:37:07:45:30:F0:BE:D9:EF:A5
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 78AB747D1A92CA5677CB46DD8A35486FEFB40B77
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231312e352e302f32342d3332203d3e203531313637.roa
Signing time: Fri 24 Jul 2026 15:26:55 +0000
ROA not before: Fri 24 Jul 2026 15:21:55 +0000
ROA not after: Fri 23 Jul 2027 15:26:55 +0000
asID: 51167
IP address blocks: 185.211.5.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:ab:74:7d:1a:92:ca:56:77:cb:46:dd:8a:35:48:6f:ef:b4:0b:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 24 15:21:55 2026 GMT
Not After : Jul 23 15:26:55 2027 GMT
Subject: CN=DDEDD862638C3D416CEFA237074530F0BED9EFA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c3:e0:a6:19:ab:e2:1e:c0:ae:9a:bb:c0:09:
c1:fc:08:82:7e:f3:b4:54:3c:ef:18:b1:62:32:35:
93:79:b9:6b:e4:c1:b9:3c:7f:f2:c3:44:f8:04:b3:
0b:3a:8d:3d:88:93:06:d0:70:31:20:07:4d:2d:5f:
02:3d:79:de:bd:76:ee:57:13:86:be:74:c5:6d:9a:
cf:55:bd:4f:0d:c6:1f:c8:4b:9b:a3:36:7b:db:51:
80:f8:5c:82:21:99:82:46:e2:c4:89:36:f9:c9:05:
1a:1a:87:98:2a:ec:df:8b:df:e0:93:9f:b9:5a:c8:
67:73:46:df:5f:3f:67:13:f2:5e:6a:33:ee:c0:30:
89:75:5a:cf:03:d3:5a:aa:1a:8b:f6:2a:1e:98:23:
7d:08:f0:61:f4:7e:a7:26:b5:05:cc:cb:a9:15:67:
d5:7e:2b:55:fb:40:1d:18:37:29:21:68:61:37:82:
9e:bc:60:69:7e:c2:01:d4:30:6a:7c:54:31:5b:10:
c8:1d:81:07:44:33:ae:8c:bb:4b:51:e5:e9:bb:7e:
5f:74:1d:2d:3d:36:07:40:c6:bf:4e:65:95:ec:59:
c1:0d:c6:cd:07:76:58:67:3e:11:30:c1:04:c4:9a:
d1:de:dc:46:d6:e0:9b:fd:e5:5a:be:1b:1f:92:c0:
98:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:ED:D8:62:63:8C:3D:41:6C:EF:A2:37:07:45:30:F0:BE:D9:EF:A5
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231312e352e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.5.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:9d:67:45:e4:b8:0d:a6:8c:42:c6:cf:28:fd:c4:0b:95:79:
cf:11:56:df:79:a0:10:60:81:5b:49:97:ed:1b:b9:80:f1:04:
dd:87:31:c5:3a:4c:5c:77:92:bb:90:a4:c1:2a:51:4a:87:b6:
58:93:c0:f1:ff:7d:a1:7f:70:a1:98:7f:67:74:7d:f5:19:c2:
de:95:6a:1c:92:56:3b:78:b0:3f:03:4d:b2:81:82:6e:b1:44:
61:51:41:7a:ec:b8:f8:a5:4f:5e:ab:21:b4:49:70:85:68:92:
b3:23:31:6f:b1:bc:a9:7f:5c:78:b8:4a:7f:da:2e:f8:c0:68:
69:b6:4a:7f:48:4e:88:17:a0:e5:3a:77:5d:b4:c1:03:50:2c:
47:c3:e5:93:e9:a4:90:68:d1:f8:55:c5:12:53:c5:fe:01:a0:
56:aa:af:d7:e1:a9:a1:b2:33:9d:6a:09:e2:4b:c4:57:17:e9:
0c:aa:cc:7e:4e:31:a5:9d:34:1a:5a:17:43:62:9c:8f:28:38:
dc:89:40:7a:ba:b1:88:b0:a3:dc:ef:10:ae:9b:23:ea:e7:cc:
60:fa:f0:11:89:d9:07:78:9a:8b:a6:a5:fe:f2:63:a3:3d:a1:
bb:40:2e:84:aa:98:2c:80:42:75:69:f1:22:63:a8:47:dc:0c:
41:c9:65:3f
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUeKt0fRqSylZ3y0bdijVIb++0C3cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA3MjQxNTIxNTVaFw0yNzA3MjMxNTI2NTVaMDMxMTAvBgNV
BAMTKERERUREODYyNjM4QzNENDE2Q0VGQTIzNzA3NDUzMEYwQkVEOUVGQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkw+CmGaviHsCumrvACcH8CIJ+
87RUPO8YsWIyNZN5uWvkwbk8f/LDRPgEsws6jT2IkwbQcDEgB00tXwI9ed69du5X
E4a+dMVtms9VvU8Nxh/IS5ujNnvbUYD4XIIhmYJG4sSJNvnJBRoah5gq7N+L3+CT
n7layGdzRt9fP2cT8l5qM+7AMIl1Ws8D01qqGov2Kh6YI30I8GH0fqcmtQXMy6kV
Z9V+K1X7QB0YNykhaGE3gp68YGl+wgHUMGp8VDFbEMgdgQdEM66Mu0tR5em7fl90
HS09NgdAxr9OZZXsWcENxs0HdlhnPhEwwQTEmtHe3EbW4Jv95Vq+Gx+SwJizAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU3e3YYmOMPUFs76I3B0Uw8L7Z76UwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMjMxMzEyZTM1
MmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzUzMTMxMzYzNy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALnT
BTANBgkqhkiG9w0BAQsFAAOCAQEATZ1nReS4DaaMQsbPKP3EC5V5zxFW33mgEGCB
W0mX7Ru5gPEE3YcxxTpMXHeSu5CkwSpRSoe2WJPA8f99oX9woZh/Z3R99RnC3pVq
HJJWO3iwPwNNsoGCbrFEYVFBeuy4+KVPXqshtElwhWiSsyMxb7G8qX9ceLhKf9ou
+MBoabZKf0hOiBeg5Tp3XbTBA1AsR8Plk+mkkGjR+FXFElPF/gGgVqqv1+GpobIz
nWoJ4kvEVxfpDKrMfk4xpZ00GloXQ2Kcjyg43IlAerqxiLCj3O8Qrpsj6ufMYPrw
EYnZB3iai6al/vJjoz2hu0AuhKqYLIBCdWnxImOoR9wMQcllPw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:53:05 2026 by rpki-client