Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231342e3133342e302f32332d3332203d3e203531313637.roa
File: 3138352e3231342e3133342e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier: HUbTjc/E/9ctJwlkQTDDjor4kMsenqDmRJEdNXaZOSI=
Subject key identifier: 84:3C:54:63:DB:48:D1:03:AF:C0:05:72:F2:93:E2:73:02:47:0B:FE
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 121D8BAFE12A44D224ABFFFC8D4D39B36AD7E07E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231342e3133342e302f32332d3332203d3e203531313637.roa
Signing time: Fri 24 Jul 2026 15:26:51 +0000
ROA not before: Fri 24 Jul 2026 15:21:51 +0000
ROA not after: Fri 23 Jul 2027 15:26:51 +0000
asID: 51167
IP address blocks: 185.214.134.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:12:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:1d:8b:af:e1:2a:44:d2:24:ab:ff:fc:8d:4d:39:b3:6a:d7:e0:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 24 15:21:51 2026 GMT
Not After : Jul 23 15:26:51 2027 GMT
Subject: CN=843C5463DB48D103AFC00572F293E27302470BFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:75:c2:a8:4c:13:92:a3:dd:8d:d9:7b:9e:d0:
e2:4d:e1:8d:cd:1d:41:ac:61:eb:aa:e4:65:20:49:
4f:b8:57:03:d1:0a:0c:28:0e:a5:61:80:64:8e:64:
c4:2f:e5:18:79:32:2c:ce:43:fe:10:69:01:17:f7:
bd:30:6d:4e:78:7d:a9:ca:47:2b:fe:19:d1:b7:85:
ad:9f:25:22:7d:cf:6b:b9:e3:a1:1c:ef:e1:a2:c1:
8d:92:dc:87:7c:8d:fe:51:89:e5:d7:9a:d5:5f:65:
5d:9c:e4:2a:39:71:80:3f:1a:22:27:3a:55:0a:7a:
13:6c:75:bb:39:5f:a3:e4:2f:e4:2e:65:e4:d7:59:
ca:41:a8:c9:d6:cf:69:9a:0e:6d:04:20:3f:a8:7c:
02:9f:7c:b8:c8:ff:2a:d6:bb:52:58:7e:99:ef:4e:
97:96:a1:57:74:d6:84:69:55:6c:9a:a4:f8:bd:56:
f0:d8:71:a2:3f:71:b8:cc:af:9a:a6:6b:cb:06:11:
73:ce:61:17:de:02:89:ba:59:a8:39:7f:04:53:e9:
ff:c1:f7:5e:83:e0:97:bd:5d:d8:01:02:61:99:54:
32:62:e1:4b:03:51:85:e0:8c:c3:3e:c2:1d:15:7f:
49:48:3d:19:78:f1:ec:08:09:d3:47:6f:b8:a8:60:
23:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:3C:54:63:DB:48:D1:03:AF:C0:05:72:F2:93:E2:73:02:47:0B:FE
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231342e3133342e302f32332d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.134.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:09:14:15:73:fc:48:d9:3d:e4:75:a1:96:de:8b:79:28:bc:
c5:f8:37:85:08:7b:04:7b:c3:24:2c:7d:8f:4c:3b:f2:6e:8a:
e0:84:0a:1b:12:f9:30:3d:a5:5e:e3:a9:73:32:24:12:7d:63:
02:3a:84:44:44:6a:c2:fd:2a:a2:ae:24:04:13:92:f0:aa:41:
c3:36:bf:23:ee:0a:65:ce:18:81:7c:82:a1:1d:dc:2f:d3:76:
1c:35:8c:2f:0b:3c:37:25:8a:ef:87:80:c9:7d:1c:11:02:d5:
77:0b:85:59:71:a2:f8:67:f4:46:a3:9e:82:6e:14:8c:ef:79:
4f:48:7e:8a:a8:94:36:c6:98:0d:55:18:45:e0:60:6e:c6:39:
f8:e3:4e:6a:b1:3b:a1:63:63:fd:e7:f7:93:2d:7b:68:e0:bd:
83:1f:35:9c:92:7e:5d:23:10:b0:ba:bc:b6:32:3f:eb:4f:7d:
07:a8:9d:62:37:55:97:94:ad:af:c6:0a:77:a1:a3:63:05:79:
0a:ed:db:bd:38:4b:09:8c:33:c6:7e:30:0a:56:6f:31:c7:03:
5e:db:c1:d9:7c:69:fd:8c:c5:2a:57:02:8a:79:cc:aa:de:88:
dd:b4:d8:00:22:99:d3:67:19:65:21:6a:11:dd:6f:8a:68:1a:
85:15:0b:c6
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUEh2Lr+EqRNIkq//8jU05s2rX4H4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA3MjQxNTIxNTFaFw0yNzA3MjMxNTI2NTFaMDMxMTAvBgNV
BAMTKDg0M0M1NDYzREI0OEQxMDNBRkMwMDU3MkYyOTNFMjczMDI0NzBCRkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCydcKoTBOSo92N2Xue0OJN4Y3N
HUGsYeuq5GUgSU+4VwPRCgwoDqVhgGSOZMQv5Rh5MizOQ/4QaQEX970wbU54fanK
Ryv+GdG3ha2fJSJ9z2u546Ec7+GiwY2S3Id8jf5RieXXmtVfZV2c5Co5cYA/GiIn
OlUKehNsdbs5X6PkL+QuZeTXWcpBqMnWz2maDm0EID+ofAKffLjI/yrWu1JYfpnv
TpeWoVd01oRpVWyapPi9VvDYcaI/cbjMr5qma8sGEXPOYRfeAom6Wag5fwRT6f/B
916D4Je9XdgBAmGZVDJi4UsDUYXgjMM+wh0Vf0lIPRl48ewICdNHb7ioYCMbAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUhDxUY9tI0QOvwAVy8pPicwJHC/4wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMjMxMzQyZTMx
MzMzNDJlMzAyZjMyMzMyZDMzMzIyMDNkM2UyMDM1MzEzMTM2Mzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAG51oYwDQYJKoZIhvcNAQELBQADggEBAE8JFBVz/EjZPeR1oZbei3kovMX4N4UI
ewR7wyQsfY9MO/JuiuCEChsS+TA9pV7jqXMyJBJ9YwI6hEREasL9KqKuJAQTkvCq
QcM2vyPuCmXOGIF8gqEd3C/Tdhw1jC8LPDcliu+HgMl9HBEC1XcLhVlxovhn9Eaj
noJuFIzveU9IfoqolDbGmA1VGEXgYG7GOfjjTmqxO6FjY/3n95Mte2jgvYMfNZyS
fl0jELC6vLYyP+tPfQeonWI3VZeUra/GCneho2MFeQrt2704SwmMM8Z+MApWbzHH
A17bwdl8af2MxSpXAop5zKreiN202AAimdNnGWUhahHdb4poGoUVC8Y=
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:25:08 2026 by rpki-client