Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231362e37322e302f32342d3234203d3e20323133313232.roa
File: 3138352e3231362e37322e302f32342d3234203d3e20323133313232.roa (raw, json)
Hash identifier: ptsuZ6DqGcppcLrR8iPGAM2RV1fQ1PQR4LTF4iChdpU=
Subject key identifier: 8A:09:55:57:E4:25:DE:18:27:DA:D8:27:86:05:E6:9A:FE:16:6E:EC
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 33E2A2B000483A0B59E7F03145342370C2CE88FA
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231362e37322e302f32342d3234203d3e20323133313232.roa
Signing time: Fri 24 Jul 2026 15:27:03 +0000
ROA not before: Fri 24 Jul 2026 15:22:03 +0000
ROA not after: Fri 23 Jul 2027 15:27:03 +0000
asID: 213122
IP address blocks: 185.216.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:e2:a2:b0:00:48:3a:0b:59:e7:f0:31:45:34:23:70:c2:ce:88:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 24 15:22:03 2026 GMT
Not After : Jul 23 15:27:03 2027 GMT
Subject: CN=8A095557E425DE1827DAD8278605E69AFE166EEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:93:f5:5a:be:3a:d9:e8:fd:c9:cc:fd:f6:23:
9b:51:5a:76:b7:08:57:3b:c2:85:c5:39:27:3f:bf:
76:4e:14:9f:a3:ce:2a:1e:77:38:ef:10:ca:a1:6c:
fd:ff:b1:89:54:e5:36:1e:90:de:98:d9:a6:18:b9:
ca:80:ef:ee:bc:c6:be:a3:71:4f:ea:d4:ba:4a:b4:
08:3c:3f:f7:a9:ef:25:43:b3:19:a6:7e:ae:f2:0e:
8b:f2:1d:fd:ac:64:1f:a5:96:29:11:c6:d6:d4:b9:
cb:5a:aa:eb:5b:35:a5:0e:33:12:00:0b:80:8a:2f:
7a:c2:0d:de:a1:7c:e9:ca:cf:90:0c:a9:c6:ad:08:
9b:5a:ff:42:47:eb:7c:c1:fb:26:12:34:85:51:96:
cf:43:7b:bb:b7:1f:d6:67:43:8d:ae:99:62:83:f9:
5e:84:9d:ba:0b:8c:a3:8e:52:34:ac:fd:19:fc:eb:
6b:03:0c:29:90:d1:88:44:0e:cb:47:e3:f6:ed:e7:
e9:11:f6:44:67:5d:1d:65:66:18:04:d4:eb:84:b7:
8d:4d:07:7c:60:57:fc:76:d2:92:ae:0f:e6:89:55:
30:eb:07:00:3b:e1:ac:83:1c:9e:a2:32:c6:f1:88:
f4:a5:7d:5c:d4:9e:d3:88:02:16:ae:db:42:cb:69:
c2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:09:55:57:E4:25:DE:18:27:DA:D8:27:86:05:E6:9A:FE:16:6E:EC
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231362e37322e302f32342d3234203d3e20323133313232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.216.72.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:0e:7e:d1:9b:f5:9e:b1:63:a6:9f:7a:73:a7:b6:68:e9:58:
b7:c8:71:20:b9:59:e6:e3:e6:91:5b:9b:64:52:d5:cd:60:68:
2b:26:89:43:bb:d6:23:00:ff:77:42:d7:76:f6:15:27:82:d4:
66:31:dc:a0:ee:d9:7b:51:b8:00:bb:63:77:15:14:f9:ac:f8:
6e:45:3d:d2:5a:5b:be:75:b2:95:65:18:d3:f3:5d:10:ec:2c:
a0:0f:2d:5b:b9:ee:25:f6:e2:59:b7:b3:61:53:71:54:a1:72:
87:17:1e:f1:d6:9e:66:13:1c:32:a0:b1:1c:5c:ef:29:e4:9d:
03:18:f4:35:64:73:59:15:32:11:ff:41:bd:59:36:68:95:56:
69:47:cc:1e:13:ca:8c:35:52:eb:01:f7:cc:7f:d3:2b:8f:2a:
52:cd:ca:e5:24:6b:99:d4:5e:22:37:77:b6:47:d5:7c:a8:2e:
b6:80:ff:62:7c:44:7a:8d:47:af:98:23:a1:65:17:be:88:cf:
97:f8:4d:8b:6a:9c:69:d6:15:78:72:73:77:94:a8:e3:ad:ac:
7b:9b:b0:0e:87:84:e7:7a:20:d1:5d:7b:73:db:f3:77:00:12:
9b:4a:8a:f4:b5:81:be:a8:61:c8:e6:9f:bb:8a:f9:ed:2a:6f:
8f:11:c5:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:38:24 2026 by rpki-client