Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231362e37322e302f32342d3234203d3e20323132353230.roa
File: 3138352e3231362e37322e302f32342d3234203d3e20323132353230.roa (raw, json)
Hash identifier: BgGAmWhGJEdUn810HauObqo213Tfny0Pw94LXtSd7Uc=
Subject key identifier: 81:6E:BD:55:D2:87:8B:D5:E7:DA:7F:1A:D9:AB:B5:AE:CC:32:34:D3
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 69900B051F726BB6BBEA51E57E5AAF5AFD1260FA
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231362e37322e302f32342d3234203d3e20323132353230.roa
Signing time: Fri 24 Jul 2026 15:26:46 +0000
ROA not before: Fri 24 Jul 2026 15:21:46 +0000
ROA not after: Fri 23 Jul 2027 15:26:46 +0000
asID: 212520
IP address blocks: 185.216.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:90:0b:05:1f:72:6b:b6:bb:ea:51:e5:7e:5a:af:5a:fd:12:60:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 24 15:21:46 2026 GMT
Not After : Jul 23 15:26:46 2027 GMT
Subject: CN=816EBD55D2878BD5E7DA7F1AD9ABB5AECC3234D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:da:75:02:4c:b9:33:d8:bf:13:e5:d0:88:09:
66:22:cc:78:15:17:f7:52:d6:02:df:59:bf:f9:c0:
8c:14:f5:17:2b:3d:a6:ff:e5:65:23:92:c9:f6:53:
1e:a9:d1:39:f3:3e:4b:38:90:63:ae:e5:e9:f7:b7:
7f:86:d3:c5:2a:3f:ee:32:1f:24:cb:ec:bb:ba:2a:
ad:85:a3:a3:74:d5:e4:b2:de:cc:f8:a5:01:2e:94:
a0:64:d6:7a:92:4c:0f:76:90:cb:15:c4:ec:00:2b:
1c:d2:95:c4:6e:d0:af:cb:9c:a4:7c:cf:c3:eb:c9:
1d:de:e9:a8:bc:80:c5:59:1f:34:4d:ee:58:3b:f3:
41:e2:72:4c:c0:10:bb:e6:20:06:93:21:57:f6:45:
c4:fe:6a:a7:a0:b2:72:37:56:fc:ce:8f:d9:f9:33:
68:5a:a3:50:5b:e9:eb:49:00:d8:06:88:5e:30:0c:
41:ae:81:a5:05:b2:79:a0:71:9e:9c:a8:9f:36:21:
c7:81:84:ca:cd:42:3c:a1:ef:1c:b6:7a:46:b6:fa:
b1:b1:8e:ca:fd:4f:9f:1a:8b:24:b5:79:e0:5b:dc:
5b:66:f7:ab:87:d2:10:57:bc:1d:a6:e7:39:14:76:
ea:69:20:35:ed:2e:ab:f9:7e:a2:64:62:5b:2c:62:
a0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:6E:BD:55:D2:87:8B:D5:E7:DA:7F:1A:D9:AB:B5:AE:CC:32:34:D3
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231362e37322e302f32342d3234203d3e20323132353230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.216.72.0/24
Signature Algorithm: sha256WithRSAEncryption
95:a0:73:04:a5:a8:48:91:d6:0a:7f:07:6f:10:5c:9f:d9:1f:
ef:6b:00:15:fd:1e:41:a5:4c:cc:9e:7e:1f:9f:36:af:7f:b9:
39:96:3e:3a:51:c3:89:97:a1:66:fe:87:17:8c:ec:0a:69:02:
96:9f:86:6c:68:6f:e1:dd:d6:14:63:88:df:f5:85:57:56:00:
3c:0b:4d:ba:7c:8a:68:df:77:9c:83:99:7c:c5:e6:72:5e:cf:
6f:c0:5a:81:db:d4:5a:6a:4a:e7:96:e4:ba:e3:11:11:9a:ce:
57:22:eb:fb:c6:fd:5c:75:22:2a:87:21:38:e8:76:29:d7:40:
47:2b:3c:3c:c0:7f:d3:92:8c:42:c9:b4:0b:ba:54:d2:32:98:
61:a1:d2:22:47:b4:be:17:04:3d:cb:c0:5c:ad:70:43:b8:55:
66:4c:13:3f:0e:47:1b:22:3f:d0:87:74:bb:bb:ec:74:44:c8:
a6:38:9b:96:1d:f3:47:67:21:7b:cd:d2:5e:5c:69:a7:72:0c:
ac:51:c8:6a:91:9e:77:fe:18:16:c8:30:c7:e9:83:14:fc:f9:
de:3d:cd:c6:c2:c6:01:3d:db:b5:ee:69:e1:4e:75:1b:f7:20:
4c:26:2e:79:96:b7:c3:d1:a6:84:6d:9b:ba:2d:42:48:19:7e:
df:ab:a6:51
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUaZALBR9ya7a76lHlflqvWv0SYPowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA3MjQxNTIxNDZaFw0yNzA3MjMxNTI2NDZaMDMxMTAvBgNV
BAMTKDgxNkVCRDU1RDI4NzhCRDVFN0RBN0YxQUQ5QUJCNUFFQ0MzMjM0RDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH2nUCTLkz2L8T5dCICWYizHgV
F/dS1gLfWb/5wIwU9RcrPab/5WUjksn2Ux6p0TnzPks4kGOu5en3t3+G08UqP+4y
HyTL7Lu6Kq2Fo6N01eSy3sz4pQEulKBk1nqSTA92kMsVxOwAKxzSlcRu0K/LnKR8
z8PryR3e6ai8gMVZHzRN7lg780HickzAELvmIAaTIVf2RcT+aqegsnI3VvzOj9n5
M2hao1Bb6etJANgGiF4wDEGugaUFsnmgcZ6cqJ82IceBhMrNQjyh7xy2eka2+rGx
jsr9T58aiyS1eeBb3Ftm96uH0hBXvB2m5zkUduppIDXtLqv5fqJkYlssYqCRAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUgW69VdKHi9Xn2n8a2au1rswyNNMwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMjMxMzYyZTM3
MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzIzNTMyMzAucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAC52EgwDQYJKoZIhvcNAQELBQADggEBAJWgcwSlqEiR1gp/B28QXJ/ZH+9rABX9
HkGlTMyefh+fNq9/uTmWPjpRw4mXoWb+hxeM7AppApafhmxob+Hd1hRjiN/1hVdW
ADwLTbp8imjfd5yDmXzF5nJez2/AWoHb1FpqSueW5LrjERGazlci6/vG/Vx1IiqH
ITjodinXQEcrPDzAf9OSjELJtAu6VNIymGGh0iJHtL4XBD3LwFytcEO4VWZMEz8O
RxsiP9CHdLu77HREyKY4m5Yd80dnIXvN0l5caadyDKxRyGqRnnf+GBbIMMfpgxT8
+d49zcbCxgE927XuaeFOdRv3IEwmLnmWt8PRpoRtm7otQkgZft+rplE=
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:23:45 2026 by rpki-client