Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232312e3133322e302f32342d3234203d3e20323036383034.roa
File: 3138352e3232312e3133322e302f32342d3234203d3e20323036383034.roa (raw, json)
Hash identifier: ZgTYgAm9Tu1byI1Heb62Yi+nHFXnB0uw+C1xGH+Z94k=
Subject key identifier: C9:F6:52:20:88:04:8D:8E:95:0D:AB:13:94:F5:08:C3:40:B4:88:46
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 308645D50F81438A026A9DD7711A9BA935E9398A
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232312e3133322e302f32342d3234203d3e20323036383034.roa
Signing time: Fri 24 Jul 2026 15:26:44 +0000
ROA not before: Fri 24 Jul 2026 15:21:44 +0000
ROA not after: Fri 23 Jul 2027 15:26:44 +0000
asID: 206804
IP address blocks: 185.221.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:86:45:d5:0f:81:43:8a:02:6a:9d:d7:71:1a:9b:a9:35:e9:39:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 24 15:21:44 2026 GMT
Not After : Jul 23 15:26:44 2027 GMT
Subject: CN=C9F6522088048D8E950DAB1394F508C340B48846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:99:af:e1:1d:10:ba:9e:c0:18:b3:be:26:b8:
c3:61:d4:b2:d0:7d:d5:dc:5a:54:ec:05:a2:4f:a6:
8e:99:f2:66:9c:3c:1b:c7:dc:52:b8:56:1a:8d:d4:
04:75:b9:9e:e9:c5:ec:e5:3f:a0:50:6b:67:d5:98:
81:c1:eb:ec:e3:fe:51:b7:96:31:64:67:fc:75:d2:
b5:3a:e7:a2:fa:48:97:14:10:97:d7:93:a9:bd:c7:
a5:49:8f:63:0c:05:19:94:43:b3:46:53:97:0b:cc:
d6:d6:67:ea:06:a2:83:df:ed:4f:95:16:cb:02:57:
b4:d7:29:ec:de:6d:bd:78:51:d3:2f:3c:a9:9f:90:
26:37:1e:30:96:74:d0:a5:07:5d:8f:a8:89:fc:65:
f3:0c:6b:cb:ff:3c:2e:6b:5c:2f:b6:40:5d:e0:c5:
32:76:b0:55:5c:d4:22:8b:06:ee:0d:53:3c:75:86:
a7:55:a9:6b:49:37:6b:07:5a:4e:c3:fc:1d:2e:01:
f7:b7:f1:e4:dd:1f:d1:f5:23:a8:22:35:0f:06:71:
41:a6:35:52:6e:a7:1f:e5:11:73:50:79:54:a6:dc:
01:99:ba:96:0b:b2:70:67:31:7b:c6:88:66:9b:d3:
9a:15:77:0b:19:7a:96:d7:be:9b:cd:08:49:c8:f4:
fd:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F6:52:20:88:04:8D:8E:95:0D:AB:13:94:F5:08:C3:40:B4:88:46
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232312e3133322e302f32342d3234203d3e20323036383034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.132.0/24
Signature Algorithm: sha256WithRSAEncryption
19:db:c4:8a:d0:bc:78:56:58:1f:b6:3d:5e:01:64:66:e6:ba:
18:d3:47:0d:9a:39:06:8c:cd:42:bd:f5:d9:eb:03:e9:0b:e7:
53:17:e6:1a:91:79:9c:ab:b1:02:8f:1b:0e:0f:e5:f2:f9:f0:
c8:4a:f4:3c:d6:14:d8:a6:9f:da:b3:45:30:fc:f4:24:74:61:
02:79:29:8b:22:8f:da:f3:b2:36:eb:38:ac:c2:b1:7b:18:de:
e2:61:0e:f0:5d:d8:8f:93:a6:0c:3a:a0:56:87:10:f2:c9:c9:
1a:6d:73:f5:02:a0:fd:0b:5c:ba:16:e0:10:79:65:b4:7e:7a:
d7:7f:bb:2a:04:54:4e:a4:42:67:50:83:86:18:ae:5f:73:96:
52:51:53:6c:42:36:29:92:b9:b5:ac:88:b6:b3:fe:0f:fb:05:
d8:08:6f:ed:49:13:7a:30:2d:a1:57:08:a4:5e:2f:f1:ec:30:
f8:44:24:2b:b5:0d:22:08:2a:c7:c2:6c:37:f8:2b:43:eb:c2:
ee:31:66:da:7c:a9:3e:27:7f:c0:f6:d2:8d:26:26:05:d9:bd:
fb:1a:f6:c8:62:26:82:39:e6:df:43:ef:7a:a0:05:c1:a0:5b:
8b:8b:bb:26:49:88:6b:e4:c7:9b:42:e8:ff:51:0f:d8:24:d4:
09:56:c0:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:38:12 2026 by rpki-client