Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231382e3132362e302f32342d3332203d3e203531313637.roa
File: 3138352e3231382e3132362e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: Xpu2AqLcC9MY7wgZMae/UDuQo8KQsApdv9LBclbuR/k=
Subject key identifier: 1F:1E:A9:38:CF:90:EF:03:CF:60:96:19:90:8D:C7:0D:63:B6:96:F3
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0198D95FC0B3F34F7ACE544B1B93FAE6A53473AE
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231382e3132362e302f32342d3332203d3e203531313637.roa
Signing time: Fri 24 Jul 2026 15:26:40 +0000
ROA not before: Fri 24 Jul 2026 15:21:40 +0000
ROA not after: Fri 23 Jul 2027 15:26:40 +0000
asID: 51167
IP address blocks: 185.218.126.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d9:5f:c0:b3:f3:4f:7a:ce:54:4b:1b:93:fa:e6:a5:34:73:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 24 15:21:40 2026 GMT
Not After : Jul 23 15:26:40 2027 GMT
Subject: CN=1F1EA938CF90EF03CF609619908DC70D63B696F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0a:ba:97:f7:44:a8:b7:27:63:3d:92:ae:9f:
9a:be:77:69:11:b5:9d:59:0a:4b:fb:84:7e:dd:06:
10:1b:3b:b4:f2:fc:e8:7e:5a:16:c0:92:41:57:cd:
3b:ec:64:6c:0d:95:0e:ce:0b:1a:96:00:ba:cb:2f:
c8:ee:91:3e:28:67:7b:27:04:fe:33:98:68:ac:97:
2a:f5:9d:07:97:33:26:25:77:79:7a:bc:7e:1a:6d:
7b:28:31:9b:0d:ed:3c:bd:9a:2a:36:af:cc:eb:93:
06:b5:a7:8c:31:19:e2:6d:cf:a8:33:2d:f3:70:b2:
78:be:c2:08:28:00:60:ec:b8:4b:0d:02:b4:6d:79:
b7:e5:b9:f9:a0:e1:12:b6:71:0f:04:f4:aa:70:68:
b1:4c:ad:a1:ce:ac:10:92:3f:53:f8:81:2f:19:f6:
e2:34:90:58:9c:4d:05:80:6a:ca:2f:b3:b3:f2:5c:
d2:ec:d5:4a:07:cc:86:d1:57:06:60:95:aa:1a:14:
92:86:34:f6:a3:60:a6:f7:e9:2b:6f:72:29:5c:91:
49:ba:2e:d8:64:8b:08:08:be:9e:0b:3d:5e:9e:1f:
45:52:b2:e9:ae:ad:72:9d:33:da:12:94:d3:6f:7f:
5f:7c:74:a2:2a:24:a6:a2:71:50:d5:71:6c:b0:1b:
b5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:1E:A9:38:CF:90:EF:03:CF:60:96:19:90:8D:C7:0D:63:B6:96:F3
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231382e3132362e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.126.0/24
Signature Algorithm: sha256WithRSAEncryption
37:17:43:ae:a3:c6:4c:44:2b:b6:14:e1:9e:92:ee:91:0d:e8:
b8:24:73:bd:c7:97:ac:52:39:9c:e4:74:d9:85:5c:18:8f:44:
53:68:e4:f1:5d:00:66:05:61:77:73:24:ab:3a:d8:2a:fd:64:
73:e4:51:3b:be:c3:07:46:e9:bb:f8:11:e2:e9:cf:1e:ab:ba:
65:0e:75:9f:a7:01:5a:d3:2a:a0:d2:52:68:0e:c3:2a:a0:5f:
17:54:24:71:14:5e:4e:79:f4:5f:48:f4:97:f0:a4:2a:38:13:
42:00:46:6c:99:47:a9:69:0a:e7:56:87:24:bf:79:c7:77:97:
5c:5e:ac:6c:dd:1a:6c:69:de:90:86:1d:22:23:08:61:ca:61:
02:19:c4:1d:6d:b7:e1:d6:c4:64:78:7a:94:6b:7e:e1:6c:45:
2a:2f:24:f7:8b:34:78:cf:49:89:31:a9:9b:29:62:e7:8b:82:
46:24:22:ea:6d:fb:2e:cc:da:01:bf:3c:78:2c:48:6d:79:35:
d1:e1:2c:a2:23:3c:2e:73:d3:f6:50:06:1b:ce:d7:bd:7d:84:
e3:a0:d9:7a:ea:dc:cd:99:93:bc:c1:1d:83:fc:b0:c9:43:26:
09:d8:a9:5d:88:d7:60:7f:2d:0c:db:65:69:4a:bc:b9:b3:75:
6a:5b:47:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:52:24 2026 by rpki-client