Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231382e3132342e302f32332d3332203d3e203531313637.roa
File: 3138352e3231382e3132342e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier: i0OfROweO9G4cje8WtXtJ5Qt1efgPtrxcRdgbDDlV88=
Subject key identifier: 90:82:5F:5A:3B:DB:F5:BF:B8:C1:59:2B:D0:DC:3D:A0:36:0D:FF:4A
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3DA21C1B915A6C734EEF67E76B7E4724C9683B42
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231382e3132342e302f32332d3332203d3e203531313637.roa
Signing time: Fri 24 Jul 2026 15:26:44 +0000
ROA not before: Fri 24 Jul 2026 15:21:44 +0000
ROA not after: Fri 23 Jul 2027 15:26:44 +0000
asID: 51167
IP address blocks: 185.218.124.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:12:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:a2:1c:1b:91:5a:6c:73:4e:ef:67:e7:6b:7e:47:24:c9:68:3b:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 24 15:21:44 2026 GMT
Not After : Jul 23 15:26:44 2027 GMT
Subject: CN=90825F5A3BDBF5BFB8C1592BD0DC3DA0360DFF4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:14:62:2f:de:42:6d:52:c6:25:19:53:00:41:
ab:b7:05:97:5f:d3:c4:10:d5:71:22:f4:54:b0:e7:
6e:90:a6:13:e8:78:21:3e:43:3f:08:9d:8a:7b:44:
bb:89:c4:cb:3a:c4:73:1f:83:19:e8:fc:23:de:53:
1b:7a:e1:53:3c:aa:82:68:14:58:f6:b9:f3:90:38:
33:24:c9:2f:0e:67:19:66:03:28:ed:34:16:1e:06:
3e:d5:39:cf:db:79:06:3c:7f:99:c6:1f:8a:cd:eb:
f3:f0:99:1d:e9:3e:9d:bb:85:a0:4f:16:46:65:d8:
85:8d:97:33:75:5e:07:39:94:e0:00:6f:22:f1:3e:
ac:a1:de:3d:df:4c:de:05:d1:bd:3d:8c:69:bf:a5:
b0:29:d0:ec:72:23:df:cb:eb:95:8f:fc:0d:d2:b4:
84:02:a8:0c:c0:53:4d:64:47:0e:64:ff:f3:4f:9c:
68:80:9b:85:9d:06:6b:66:ea:e9:fb:ef:a1:8e:bb:
d2:0c:ac:d3:1b:ed:ad:65:2d:24:8c:93:e9:f9:5b:
8d:bc:24:48:3b:0a:3e:22:9e:2c:38:96:09:26:ab:
ca:72:83:3e:ad:e6:91:f4:d0:1a:00:0c:91:42:b3:
43:0a:4d:0d:22:2a:d7:2e:81:d5:8c:e9:b1:c6:54:
02:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:82:5F:5A:3B:DB:F5:BF:B8:C1:59:2B:D0:DC:3D:A0:36:0D:FF:4A
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231382e3132342e302f32332d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.124.0/23
Signature Algorithm: sha256WithRSAEncryption
41:ce:63:58:c7:74:d9:56:09:98:88:c6:4d:d7:7c:7e:b3:83:
3e:a6:85:56:90:17:2e:4f:73:65:2a:53:69:f1:1e:9e:56:ff:
fb:29:3c:96:27:4d:4b:a7:16:bc:38:7f:cd:43:b7:78:11:4f:
0d:55:ca:62:e6:8f:74:6f:19:06:4a:47:ae:9c:d2:83:18:73:
ff:02:a3:f5:ac:37:0f:62:f3:91:db:e8:13:80:b7:ab:ef:39:
c3:3d:2c:73:06:31:78:84:18:b9:83:ab:98:78:96:13:c2:d5:
35:ac:ec:8c:d0:db:a4:46:c3:d8:a4:77:e7:f9:a4:94:74:af:
32:b3:2c:c9:36:23:55:39:b8:bc:76:dd:44:ff:d0:98:25:08:
7e:5d:6c:9d:05:af:7f:6f:de:1e:fd:55:9f:3a:f4:84:ea:70:
bb:35:46:80:4c:e2:42:71:81:86:f6:32:29:93:9f:41:c5:00:
62:9f:6f:62:e4:fe:0c:f2:ba:c5:11:67:28:c7:a4:8a:f5:c2:
73:ee:9d:7b:e4:1a:06:24:2e:7d:35:93:63:56:df:28:16:be:
ef:2e:20:eb:ef:3e:7f:98:40:55:7c:80:f4:a3:5d:4a:fe:19:
f5:94:80:a3:50:f6:96:e5:bc:27:48:c5:78:5e:2d:c7:d8:1a:
e5:e4:ef:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:18:31 2026 by rpki-client