Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231392e3134302e302f32342d3234203d3e20323132323338.roa
File: 3138352e3231392e3134302e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: EMolmvFK4agXhiXgNdTtpYPeRvk+AU3Pj/O4MVNs4fk=
Subject key identifier: 70:2E:74:1B:B9:42:8E:C1:F1:02:EA:A2:C3:C2:9E:DD:45:95:5D:91
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 431E14903A87923580E12461072F0A0955B81401
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231392e3134302e302f32342d3234203d3e20323132323338.roa
Signing time: Fri 17 Apr 2026 10:23:45 +0000
ROA not before: Fri 17 Apr 2026 10:18:45 +0000
ROA not after: Fri 16 Apr 2027 10:23:45 +0000
asID: 212238
IP address blocks: 185.219.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:1e:14:90:3a:87:92:35:80:e1:24:61:07:2f:0a:09:55:b8:14:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 17 10:18:45 2026 GMT
Not After : Apr 16 10:23:45 2027 GMT
Subject: CN=702E741BB9428EC1F102EAA2C3C29EDD45955D91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a9:81:cb:10:3d:b2:14:bb:fb:0d:24:78:66:
f2:83:97:99:26:b0:3d:7c:f7:f4:08:2a:ac:20:6a:
c2:2c:6a:e4:29:43:f9:dd:2b:31:c2:dc:de:f6:30:
ee:a2:4c:cb:76:d2:7c:30:54:8e:56:ce:40:03:97:
25:25:3a:95:10:89:e8:2f:39:56:90:39:e0:67:05:
0c:6a:dc:d0:d5:66:c3:18:6d:cc:10:89:14:b7:1f:
81:88:82:08:df:99:c2:1c:0c:2c:b3:3a:8c:cb:0b:
1b:bc:17:dc:0a:b5:ab:68:6f:8e:66:46:7b:1a:33:
79:bb:9f:32:fd:9b:22:9c:61:35:bf:e1:5d:cb:47:
86:f1:38:a6:8f:84:31:f0:9f:63:87:90:70:f8:51:
e6:d3:79:c8:f6:d2:7d:f1:c4:f0:fd:27:19:32:cd:
62:20:c5:11:5a:74:7f:f3:ee:29:a8:e4:6c:53:a8:
89:35:24:5c:17:69:ca:7a:ab:2f:06:1d:ed:98:72:
16:36:73:da:3a:6e:80:a4:4c:86:57:46:a0:64:6e:
a7:74:ed:65:0d:6f:dc:05:40:52:13:f2:ee:29:28:
da:7a:20:a7:2e:80:4e:b5:83:16:8f:4a:7e:73:bb:
21:a1:54:c0:00:3d:d9:5d:aa:e9:a0:3b:fc:70:4b:
5e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:2E:74:1B:B9:42:8E:C1:F1:02:EA:A2:C3:C2:9E:DD:45:95:5D:91
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231392e3134302e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.219.140.0/24
Signature Algorithm: sha256WithRSAEncryption
84:4b:d6:40:ab:0d:20:03:0a:12:47:15:4d:1b:42:16:4a:3f:
08:d2:16:47:ed:f9:53:af:5b:0b:8f:ce:ad:8b:b5:71:67:e9:
c8:bd:93:57:14:ea:87:c2:51:a0:43:4b:ef:4a:75:9f:42:9b:
78:91:aa:de:f4:02:bf:0d:04:fb:a2:98:5c:a7:e7:5c:94:ce:
2d:a0:3f:79:54:76:6a:40:bf:0c:b7:86:af:3f:53:6b:b1:0c:
78:e2:f9:e6:99:18:13:22:11:b2:e1:12:8e:f2:12:a0:e2:04:
6d:fd:a2:5b:4b:9a:e5:2c:0d:18:5b:e2:ee:e5:f2:09:25:be:
15:ca:ed:1c:37:4c:b2:af:2e:0e:02:a9:a8:46:8a:d6:60:57:
c2:05:b5:1b:0c:56:d1:e9:c5:3e:35:12:9d:96:1f:63:03:af:
8a:ca:2f:79:17:07:b2:e5:21:ac:6b:32:85:53:9d:94:80:20:
6c:81:f2:0e:e1:63:c0:62:ab:a1:3f:4e:13:03:fd:29:12:08:
3d:34:02:f4:ae:0a:f7:e2:01:52:c5:e8:90:6d:47:18:54:df:
0a:b3:e7:50:c6:63:5f:4b:ad:2f:b5:06:1b:f8:d6:0d:65:06:
f9:02:fa:52:27:85:4a:f2:84:73:2b:40:c9:0d:47:50:9d:ae:
13:f4:09:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:34:42 2026 by rpki-client