Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231342e3133322e302f32332d3234203d3e203437353833.roa
File: 3138352e3231342e3133322e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: 4HxI2Gv3YzRgxbcFo+KrZSKH9WH6YdpVdgcEP90NSJA=
Subject key identifier: 42:19:58:C5:C8:3E:5C:A5:F3:73:E4:13:E4:E9:1A:81:FF:85:F2:B0
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5DDC06F372F27930C32800E644DD6A148C43698F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231342e3133322e302f32332d3234203d3e203437353833.roa
Signing time: Fri 24 Jul 2026 15:26:42 +0000
ROA not before: Fri 24 Jul 2026 15:21:42 +0000
ROA not after: Fri 23 Jul 2027 15:26:42 +0000
asID: 47583
IP address blocks: 185.214.132.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:dc:06:f3:72:f2:79:30:c3:28:00:e6:44:dd:6a:14:8c:43:69:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 24 15:21:42 2026 GMT
Not After : Jul 23 15:26:42 2027 GMT
Subject: CN=421958C5C83E5CA5F373E413E4E91A81FF85F2B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9f:5a:a3:b0:19:2f:0a:16:83:df:d9:39:a5:
ff:39:2a:b5:5e:2a:1f:59:e5:37:14:1a:bf:37:1e:
ac:2c:87:3f:5d:c9:0d:b1:d9:ba:bd:56:08:40:4c:
68:d4:d8:ce:c9:89:53:3d:cc:65:f4:f6:99:b7:10:
96:ca:0f:b0:fc:8d:25:2f:aa:ac:d0:e2:e9:2d:6a:
70:40:4c:d5:44:d0:50:0f:29:39:76:fd:9c:61:17:
1a:b7:e8:d0:9b:f5:e1:64:b5:22:3a:d9:6b:25:c8:
fe:93:f1:35:ec:c8:80:87:bf:24:89:df:eb:f3:c0:
7d:34:8d:d5:0b:e3:05:62:70:19:4e:18:6a:8f:6c:
15:33:75:ba:4a:92:13:b1:16:81:fc:a4:5d:af:73:
da:b1:4f:0e:56:07:bf:09:82:ea:a2:84:84:56:a6:
52:98:f7:b7:80:dd:98:cf:fd:f6:9f:e3:39:c8:d7:
84:22:73:38:99:c8:c7:ea:19:62:ee:55:bd:5b:d8:
e7:8e:07:df:66:47:a6:26:46:23:70:08:15:cd:8b:
f9:52:31:62:3d:53:c3:4a:9e:16:ef:9c:86:bb:c9:
01:3e:1e:0f:92:fc:84:55:88:9d:a6:84:9c:c3:34:
ac:8b:ba:20:9f:52:5f:70:13:d7:b5:c3:b5:8a:f7:
60:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:19:58:C5:C8:3E:5C:A5:F3:73:E4:13:E4:E9:1A:81:FF:85:F2:B0
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231342e3133322e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.132.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:e6:4d:c2:44:ef:0d:54:a8:c3:82:03:d4:c6:04:39:31:28:
9a:dc:14:ee:0d:ff:88:2e:84:b6:18:5b:1b:a5:be:49:6d:09:
3a:06:47:ff:12:f7:f7:87:32:39:11:f5:d0:55:49:41:b6:74:
60:fe:62:39:ee:43:f5:0f:50:bc:86:9a:8d:d9:e4:a0:c3:a4:
fd:29:5a:d5:e0:c5:45:03:07:2b:5c:fa:14:26:98:a3:ef:41:
ed:e7:5f:4b:23:e7:69:ca:ee:f8:74:0c:90:07:da:4e:b2:f8:
2b:bc:fc:d6:fa:af:b1:ec:e7:26:14:4f:7d:1b:7e:12:99:21:
c6:58:7c:b6:5e:17:60:83:9d:bf:fd:22:5b:f5:aa:2a:6b:2f:
e7:f0:8e:cf:24:be:f5:56:3f:9c:50:60:e5:e0:10:b3:cf:f9:
6d:66:ac:bf:a5:4b:92:c5:91:d8:16:ac:ea:b5:e3:1f:93:e8:
f7:4d:38:b2:1f:1f:ef:05:3c:aa:c4:18:a2:01:e1:3f:a1:c7:
d4:47:67:f2:00:b8:e0:99:81:05:0a:b5:9a:29:70:63:f5:88:
5a:82:be:ae:8a:34:3b:23:50:a9:eb:1c:49:d5:da:72:09:b1:
58:74:cc:93:cb:a8:99:d6:81:6f:0e:69:14:15:17:c2:59:d9:
7c:53:25:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:37:16 2026 by rpki-client