Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231362e3230322e302f32342d3234203d3e20383334.roa
File: 3138352e3231362e3230322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: NZZx+kaXFxeLbTAkrhBOB8jogQt3MGWDRrO//BTxwAQ=
Subject key identifier: F1:0A:C3:8C:9D:B0:CB:92:03:60:B2:6A:18:5C:C5:8B:1F:59:89:A6
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 336C8927F8071BBB1277CC154EF4CE115B687DFB
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231362e3230322e302f32342d3234203d3e20383334.roa
Signing time: Sun 07 Jun 2026 09:25:04 +0000
ROA not before: Sun 07 Jun 2026 09:20:04 +0000
ROA not after: Sun 06 Jun 2027 09:25:04 +0000
asID: 834
IP address blocks: 185.216.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:42:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:6c:89:27:f8:07:1b:bb:12:77:cc:15:4e:f4:ce:11:5b:68:7d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 7 09:20:04 2026 GMT
Not After : Jun 6 09:25:04 2027 GMT
Subject: CN=F10AC38C9DB0CB920360B26A185CC58B1F5989A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:39:16:21:44:44:96:fa:07:53:93:ed:2a:07:
2d:16:8d:93:06:cf:fb:e7:be:af:32:9d:59:91:88:
de:c5:db:d5:02:ae:a5:0a:e7:3b:e1:0b:ed:d8:9e:
4e:f3:3f:e2:56:b1:9f:9a:63:d5:b2:c8:4e:f4:8f:
00:08:6d:37:a3:d0:34:09:bd:a0:87:4c:15:a7:d1:
de:e1:c0:a2:b6:a9:bc:2f:83:99:d2:58:24:b8:2d:
34:0a:51:21:94:d6:8f:82:df:c4:8c:d6:4e:8c:d7:
63:a3:5b:a9:03:c0:b2:f3:b3:0f:00:17:14:4b:ff:
58:8e:3a:45:63:b6:68:ff:d6:e8:ac:1d:20:ba:5e:
82:7d:7f:b6:22:49:ce:a6:22:24:7e:45:e1:c3:87:
0c:46:40:d9:bb:d4:b6:b3:c8:05:8e:0d:18:ca:66:
f0:7f:6f:c7:32:a4:82:36:5d:e1:e0:b7:6d:97:07:
59:b9:60:b9:54:8c:ad:72:3d:41:d9:f2:28:ef:95:
32:93:81:d1:63:25:f6:bc:7e:3a:9c:71:8e:28:f5:
b0:ff:06:00:87:b4:60:d8:c3:7c:35:65:e0:a3:91:
80:fc:d9:a6:a6:8c:e9:c2:2a:f2:54:0e:2a:a6:17:
fb:fa:f1:0b:df:7f:8d:3c:db:b4:dc:92:89:68:fe:
5a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:0A:C3:8C:9D:B0:CB:92:03:60:B2:6A:18:5C:C5:8B:1F:59:89:A6
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231362e3230322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.216.202.0/24
Signature Algorithm: sha256WithRSAEncryption
33:10:af:86:61:50:3d:a2:ae:78:03:fb:ca:fc:ea:7d:b3:63:
c1:95:7f:fb:cc:9c:24:dd:b2:db:14:18:61:66:8d:2d:b5:cf:
39:56:04:89:af:aa:ef:2c:21:8a:4f:d4:44:98:59:2d:d6:85:
6b:97:50:5a:46:89:20:36:7c:42:4b:12:2b:9e:63:6e:cc:6f:
4c:55:74:b9:38:27:d0:fb:30:d4:45:da:62:4e:96:25:b9:fc:
64:d8:d8:4d:91:24:18:ce:69:fe:71:54:91:39:77:35:9a:f2:
eb:ad:55:2a:87:e5:b7:f2:fb:e6:26:f8:53:84:87:0e:c3:06:
51:35:41:39:bd:bc:1b:f0:32:c6:e0:d4:ea:10:90:dc:a4:96:
8e:4f:19:68:f4:2e:93:1b:56:73:20:81:d0:0d:a0:0f:32:b4:
9c:f3:0d:3f:80:2e:fc:b6:39:5c:1f:e5:4e:aa:8e:f4:55:f4:
98:fc:d9:92:c3:68:e6:89:8b:c3:f4:1b:3b:a3:d8:60:d9:cc:
02:61:09:46:1c:49:ff:da:cb:a8:77:cf:a3:6b:1d:6a:ad:66:
b2:cd:5d:fe:20:2a:cf:d6:39:4a:45:50:78:67:6f:21:75:bd:
af:56:05:27:fa:13:86:d8:79:48:e6:11:a2:76:9c:01:01:33:
a8:1f:d4:b6
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUM2yJJ/gHG7sSd8wVTvTOEVtoffswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA2MDcwOTIwMDRaFw0yNzA2MDYwOTI1MDRaMDMxMTAvBgNV
BAMTKEYxMEFDMzhDOURCMENCOTIwMzYwQjI2QTE4NUNDNThCMUY1OTg5QTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvORYhRESW+gdTk+0qBy0WjZMG
z/vnvq8ynVmRiN7F29UCrqUK5zvhC+3Ynk7zP+JWsZ+aY9WyyE70jwAIbTej0DQJ
vaCHTBWn0d7hwKK2qbwvg5nSWCS4LTQKUSGU1o+C38SM1k6M12OjW6kDwLLzsw8A
FxRL/1iOOkVjtmj/1uisHSC6XoJ9f7YiSc6mIiR+ReHDhwxGQNm71LazyAWODRjK
ZvB/b8cypII2XeHgt22XB1m5YLlUjK1yPUHZ8ijvlTKTgdFjJfa8fjqccY4o9bD/
BgCHtGDYw3w1ZeCjkYD82aamjOnCKvJUDiqmF/v68Qvff40827Tckolo/lp1AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU8QrDjJ2wy5IDYLJqGFzFix9ZiaYwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMjMxMzYyZTMy
MzAzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALnY
yjANBgkqhkiG9w0BAQsFAAOCAQEAMxCvhmFQPaKueAP7yvzqfbNjwZV/+8ycJN2y
2xQYYWaNLbXPOVYEia+q7ywhik/URJhZLdaFa5dQWkaJIDZ8QksSK55jbsxvTFV0
uTgn0Psw1EXaYk6WJbn8ZNjYTZEkGM5p/nFUkTl3NZry661VKoflt/L75ib4U4SH
DsMGUTVBOb28G/AyxuDU6hCQ3KSWjk8ZaPQukxtWcyCB0A2gDzK0nPMNP4Au/LY5
XB/lTqqO9FX0mPzZksNo5omLw/QbO6PYYNnMAmEJRhxJ/9rLqHfPo2sdaq1mss1d
/iAqz9Y5SkVQeGdvIXW9r1YFJ/oThth5SOYRonacAQEzqB/Utg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:05:57 2026 by rpki-client