Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231312e372e302f32342d3234203d3e203437353833.roa
File: 3138352e3231312e372e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier: hZFxsrh8R1t/gTY6JFJfg1lTmo4tVYNujUz9yiEgs7A=
Subject key identifier: 84:1B:93:91:83:75:ED:52:58:5A:B1:74:5C:86:3E:4B:5F:04:0A:7F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 64F571AF72ED34C8C249B9AB04F14F060147F416
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231312e372e302f32342d3234203d3e203437353833.roa
Signing time: Fri 24 Jul 2026 15:26:35 +0000
ROA not before: Fri 24 Jul 2026 15:21:35 +0000
ROA not after: Fri 23 Jul 2027 15:26:35 +0000
asID: 47583
IP address blocks: 185.211.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:12:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:f5:71:af:72:ed:34:c8:c2:49:b9:ab:04:f1:4f:06:01:47:f4:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 24 15:21:35 2026 GMT
Not After : Jul 23 15:26:35 2027 GMT
Subject: CN=841B93918375ED52585AB1745C863E4B5F040A7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:95:02:fe:a2:2a:d5:0d:05:35:29:b1:f8:93:
53:ce:60:6a:12:3e:73:7e:31:b9:e4:3f:22:86:d8:
a7:21:c1:7a:59:ee:b2:11:6b:6d:bc:e7:ad:78:3a:
ef:c4:e7:60:05:ae:5f:41:4d:50:54:cd:88:b0:88:
f0:de:2e:db:2a:7a:05:b3:a2:5a:6d:4a:1c:7c:14:
b0:ef:ca:f0:fc:e5:24:a8:f3:66:a6:23:29:46:52:
b9:57:4d:93:63:ed:55:c8:55:a6:81:4c:ad:f6:ca:
b8:98:cb:1a:3a:54:a8:f9:97:a4:b4:de:33:36:1d:
c0:9c:d3:0b:57:79:9f:9f:f0:4c:0a:f1:4f:dd:c8:
9e:8a:db:0e:13:b7:f8:5c:43:52:7a:80:5f:ba:21:
a6:be:f1:31:13:b4:d9:66:b1:ef:a5:7e:85:5c:16:
5f:6d:d7:f8:df:d6:04:b9:7d:9a:9e:35:37:22:2b:
8a:82:5b:09:1a:b7:1d:43:4f:e6:aa:76:2b:fb:fc:
1e:1a:bf:7b:7b:dd:1f:78:91:5c:ae:22:41:98:9a:
70:8e:29:5f:82:e2:17:07:13:79:f5:45:e5:64:7c:
07:84:78:e0:ea:ab:04:cb:93:7b:28:ae:fe:38:76:
49:d5:c7:f8:93:75:32:be:4f:a1:a3:6b:59:01:2c:
c4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:1B:93:91:83:75:ED:52:58:5A:B1:74:5C:86:3E:4B:5F:04:0A:7F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231312e372e302f32342d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.7.0/24
Signature Algorithm: sha256WithRSAEncryption
96:9c:3c:39:7e:92:6a:43:3d:3e:eb:3b:da:de:00:79:84:1c:
c8:25:2d:7c:56:1e:79:96:14:3b:fb:58:79:d7:f3:b8:b3:27:
ec:b6:83:46:f2:6b:b4:c7:4f:6c:20:f7:82:c2:0a:75:cc:04:
47:14:da:b8:83:b7:0f:7e:87:a5:c9:14:9f:92:4a:ac:93:e8:
1b:c9:22:eb:97:82:94:aa:f7:28:93:2c:1e:b5:e3:54:24:3b:
e1:2b:d2:45:f2:f6:98:9e:a5:b1:ec:78:c1:b1:9a:d7:ce:a4:
18:38:24:04:12:04:3a:d0:c8:cc:c0:6e:34:df:5f:9b:48:a6:
db:c2:c0:90:36:ae:b6:e3:8e:01:32:d8:2a:6e:f7:1a:98:ff:
5f:cc:63:7b:60:1a:69:66:65:b4:9c:2f:56:02:ec:8b:26:7e:
ab:43:fa:08:bf:29:7e:37:8a:d6:5f:30:af:3e:70:65:f4:1c:
bb:b9:0b:0d:38:fb:cb:e0:6f:79:a4:4a:00:f2:3f:39:0a:c9:
9e:5d:7d:60:56:e2:a2:56:90:31:44:5b:fb:72:31:76:56:ae:
d9:07:9d:e5:af:84:79:0b:7e:ba:87:fe:30:68:01:84:68:cc:
32:d0:15:02:37:3d:da:18:a3:a0:eb:12:8b:c6:27:c4:6e:30:
16:6d:3e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:17:08 2026 by rpki-client