Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231332e38332e302f32342d3234203d3e20313437303439.roa
File: 3138352e3231332e38332e302f32342d3234203d3e20313437303439.roa (raw, json)
Hash identifier: 1YV9EBk8Hawna3CaS2x9AS1+qvhxECBEKfJB3IjTyvA=
Subject key identifier: 56:CF:41:00:33:86:5B:01:63:F6:E3:12:A2:22:57:B4:36:B2:A3:D9
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0867DD7CF2FAC547D9BF1B7CBA95587F285B2B09
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231332e38332e302f32342d3234203d3e20313437303439.roa
Signing time: Fri 24 Jul 2026 15:26:41 +0000
ROA not before: Fri 24 Jul 2026 15:21:41 +0000
ROA not after: Fri 23 Jul 2027 15:26:41 +0000
asID: 147049
IP address blocks: 185.213.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:67:dd:7c:f2:fa:c5:47:d9:bf:1b:7c:ba:95:58:7f:28:5b:2b:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 24 15:21:41 2026 GMT
Not After : Jul 23 15:26:41 2027 GMT
Subject: CN=56CF410033865B0163F6E312A22257B436B2A3D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:12:6f:dc:a4:b2:ad:e6:2d:e0:cb:b4:8e:8e:
f8:cc:49:8a:b0:89:e1:0f:fa:8c:e5:dc:b6:ca:f9:
00:83:9f:45:67:72:f1:22:1e:72:47:21:10:e0:dd:
bd:0c:9b:94:7d:45:42:42:f3:24:6c:8b:c6:10:bc:
af:04:9b:f2:c0:34:9d:10:57:e5:5d:2c:9e:94:d1:
9e:3d:52:53:a9:b4:79:26:0f:5f:33:20:20:0e:1c:
3d:4a:5d:8b:54:0e:e0:44:af:fb:31:0c:0b:7c:f3:
80:60:6a:19:38:f8:49:25:57:9b:3b:04:cf:8a:12:
f9:76:77:21:8f:7c:97:a5:6e:dc:a7:ac:4c:b5:d3:
66:5f:64:a0:fa:d8:17:a0:ce:c2:c1:e7:08:61:99:
e5:65:7b:67:64:d3:c3:9a:8c:d9:2a:ef:2f:5c:b6:
a3:6c:f5:31:ce:13:f0:ec:5b:6a:dc:a1:97:e8:e4:
b4:f3:22:a2:82:82:e9:6a:ef:33:b1:39:e1:15:0c:
45:d3:64:33:b7:c9:69:e5:cd:ca:62:38:2c:a0:12:
67:c6:99:8c:51:50:31:2f:41:b4:bf:44:90:32:ed:
0c:36:c2:9d:99:41:52:4b:20:7b:74:64:e7:48:25:
21:23:e5:07:9e:e9:8d:9e:4f:ff:b9:74:2f:c9:4b:
56:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:CF:41:00:33:86:5B:01:63:F6:E3:12:A2:22:57:B4:36:B2:A3:D9
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231332e38332e302f32342d3234203d3e20313437303439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.83.0/24
Signature Algorithm: sha256WithRSAEncryption
08:de:51:19:32:87:fd:b2:31:f7:bf:47:01:5b:f6:d0:a6:82:
e0:5a:a8:e1:22:f0:43:09:58:50:af:34:d3:fa:5c:2d:a0:ac:
08:5f:59:6c:e5:42:cf:b6:ce:cd:27:55:0c:4e:cd:d6:20:77:
26:b6:7d:d2:58:74:bd:6d:dd:6c:fa:88:60:7c:98:e8:13:58:
24:22:7e:50:f2:8f:3f:3c:88:83:65:41:fb:e1:3b:75:3b:9b:
20:85:2b:d6:30:55:d4:3a:f9:df:28:6f:61:1e:c7:4f:0f:1c:
be:de:e6:33:72:ef:5f:a2:95:7a:68:41:0e:cc:80:a7:8b:97:
4a:27:0f:1f:b4:e4:94:4a:d4:0a:b8:e6:46:ce:69:3d:b9:aa:
40:12:47:94:a4:c5:48:12:2e:a7:ad:5e:6a:01:5d:e7:7e:14:
7e:2f:92:ff:29:6a:ee:80:35:fb:ab:36:3c:31:03:6a:a6:e9:
93:3a:af:bc:6e:47:4a:50:a3:39:7a:f8:d3:3e:58:dd:86:b2:
a4:5c:f8:82:7d:b8:4b:c0:56:38:0e:6c:7a:7a:28:30:98:ba:
0d:c0:6b:c9:36:d6:95:d7:8f:95:56:f9:73:0c:50:c1:4e:42:
cd:3c:e6:85:f4:b2:70:c4:14:af:e1:2f:e9:54:61:4d:ea:ea:
a9:bb:97:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:27:49 2026 by rpki-client