Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232312e3133332e302f32342d3234203d3e2036353937.roa
File: 3138352e3232312e3133332e302f32342d3234203d3e2036353937.roa (raw, json)
Hash identifier: PG67XkTVOxs55JKiGFCkdLN2ncO/ORZEeLW2DIaxWbE=
Subject key identifier: F8:77:2B:B8:8B:12:90:E1:A9:05:46:24:F6:69:FF:D5:9E:08:2C:D8
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3BCAA1CE4D533AA340A674220EF6BF7E1EE1116B
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232312e3133332e302f32342d3234203d3e2036353937.roa
Signing time: Fri 24 Jul 2026 15:27:02 +0000
ROA not before: Fri 24 Jul 2026 15:22:02 +0000
ROA not after: Fri 23 Jul 2027 15:27:02 +0000
asID: 6597
IP address blocks: 185.221.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:ca:a1:ce:4d:53:3a:a3:40:a6:74:22:0e:f6:bf:7e:1e:e1:11:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 24 15:22:02 2026 GMT
Not After : Jul 23 15:27:02 2027 GMT
Subject: CN=F8772BB88B1290E1A9054624F669FFD59E082CD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ac:6f:c3:a2:f9:19:1e:4b:50:c8:d6:59:e1:
2f:f8:fb:19:fb:3d:89:e4:82:9d:60:49:44:86:d2:
21:92:34:e0:b0:ed:58:51:cb:1e:4d:15:6f:8c:43:
05:67:fd:24:a4:03:33:0a:e9:bc:14:23:76:81:70:
4e:1e:81:16:f5:df:ff:9e:c3:34:4b:7f:90:4c:3c:
13:a1:bd:02:37:9e:85:47:dc:cc:a4:a6:e5:dd:3f:
a5:1e:3a:5b:af:fb:4e:34:af:26:50:88:31:f1:c0:
ef:06:13:18:ca:b9:27:7c:a3:e6:f7:9f:06:ff:31:
a8:c6:5e:cd:45:8a:7a:cc:0f:d9:e9:da:02:63:70:
1b:7c:8c:08:85:17:a5:85:42:73:9b:50:ce:d6:81:
a2:0f:dc:c3:68:64:80:99:de:f9:2c:ad:b5:3d:12:
6a:0c:9d:f1:f5:ba:99:cc:44:16:e9:c2:c0:11:01:
b1:e5:49:a7:11:15:ea:22:91:8a:3c:be:24:54:08:
d3:8e:d7:c1:68:31:99:8c:6a:08:81:4a:ce:74:f0:
03:e3:73:e6:d2:15:34:0b:e7:ef:c4:4a:ab:1e:67:
ca:d1:d4:31:e8:67:16:19:90:63:8b:1c:d6:f2:02:
e4:38:c0:a8:d5:16:0f:0e:d9:32:31:6c:0e:99:1f:
0a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:77:2B:B8:8B:12:90:E1:A9:05:46:24:F6:69:FF:D5:9E:08:2C:D8
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232312e3133332e302f32342d3234203d3e2036353937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.133.0/24
Signature Algorithm: sha256WithRSAEncryption
47:3f:09:a0:fc:bd:e9:0a:e7:e7:de:7b:6a:6c:78:80:0e:42:
6a:c0:17:a8:2b:92:73:ec:47:32:21:51:0e:0d:c1:ec:1a:ce:
cc:62:86:bc:9c:65:4f:fd:89:b0:40:17:6a:ea:56:63:50:5b:
72:f8:5d:9b:4f:d1:f0:3d:7c:61:3b:9b:3b:ef:56:da:47:1d:
8f:e2:45:28:77:f8:0f:98:7d:86:ed:63:72:e3:e2:bd:1a:14:
8c:3d:1a:54:05:35:cd:77:75:2f:af:1a:b0:d2:ad:58:66:f1:
ce:9f:fc:2d:58:2a:18:1d:f9:d9:90:f9:fe:9a:25:d9:54:48:
cd:f3:6e:0b:d2:16:75:3d:0b:27:3f:12:13:33:03:80:09:ae:
e9:de:52:2a:d1:ab:f9:98:b7:b9:23:aa:9f:16:14:a5:0e:51:
59:a6:4d:db:76:a0:49:bd:59:05:d4:ac:c5:6a:18:8d:4a:c4:
15:dd:3b:81:89:08:eb:0c:7e:f5:cf:97:38:61:95:b4:38:30:
88:bd:b8:ce:0d:7f:51:f7:2d:fb:a9:d6:d5:31:36:a1:61:6c:
60:3b:be:47:92:70:42:ed:3b:c2:87:ed:0c:67:c3:63:0f:0c:
e4:73:ac:14:94:84:4b:65:4e:a6:42:02:45:ae:4a:d6:d9:12:
f4:1b:34:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:01:19 2026 by rpki-client