Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232392e3131382e302f32342d3234203d3e203437353833.roa
File: 3138352e3232392e3131382e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier: ERpu4eHaI3e6ieo765j24aTjQoa2DByCrZpsmDDzmYo=
Subject key identifier: FC:79:E7:51:D6:1B:F9:27:F8:FC:4A:05:6F:E2:E2:73:B2:2B:8F:0E
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6D7A399A2CBDB25033014BB7FA9E77C9D909CA8C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232392e3131382e302f32342d3234203d3e203437353833.roa
Signing time: Fri 24 Jul 2026 15:26:35 +0000
ROA not before: Fri 24 Jul 2026 15:21:35 +0000
ROA not after: Fri 23 Jul 2027 15:26:35 +0000
asID: 47583
IP address blocks: 185.229.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:12:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:7a:39:9a:2c:bd:b2:50:33:01:4b:b7:fa:9e:77:c9:d9:09:ca:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 24 15:21:35 2026 GMT
Not After : Jul 23 15:26:35 2027 GMT
Subject: CN=FC79E751D61BF927F8FC4A056FE2E273B22B8F0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:78:2d:57:8a:e2:10:97:60:7a:75:b1:2a:9b:
95:62:18:d9:6c:9a:6e:83:fc:89:f1:74:1f:53:b9:
35:9c:0c:c0:00:17:47:e6:89:b9:64:c2:0b:84:e3:
25:28:be:77:19:3a:2a:f6:b9:a6:19:f4:2e:63:6c:
60:8b:a1:4e:6c:58:76:64:d4:23:2e:31:50:d6:45:
60:74:75:f9:92:af:cb:f1:9b:c3:29:6d:b1:43:df:
d0:32:01:b2:92:f6:66:cb:d1:c7:d7:f1:63:b6:80:
da:3e:c3:c9:44:16:67:61:65:98:f3:b1:a1:c1:18:
0e:d7:9b:64:4f:54:fe:81:45:6d:13:14:34:c9:75:
b3:7e:25:59:62:6d:c8:41:49:92:6e:e7:99:e7:c1:
90:01:0a:0d:63:f2:6b:2c:0c:d8:3e:e1:10:d5:17:
7e:7a:f3:01:4a:21:b5:77:bf:c9:43:78:c3:4e:48:
02:44:8b:cc:7a:c6:24:13:52:e2:93:61:fd:df:7e:
d9:f9:a0:3d:93:d0:e9:ce:72:66:c1:ae:ed:aa:5b:
2f:e8:a2:f9:1d:b7:8d:9f:b8:a0:c2:3b:88:37:f9:
39:8b:ba:f0:89:1e:1c:5d:d5:e6:d7:36:90:fe:bb:
82:df:fe:55:e2:43:f9:29:5e:f2:42:0e:0c:5b:83:
b1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:79:E7:51:D6:1B:F9:27:F8:FC:4A:05:6F:E2:E2:73:B2:2B:8F:0E
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232392e3131382e302f32342d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.118.0/24
Signature Algorithm: sha256WithRSAEncryption
88:f7:5e:cd:f7:20:b2:bd:2a:0c:63:85:03:9c:d2:3a:07:81:
c2:6a:af:70:3d:f6:c1:72:05:e8:7a:40:e4:21:fd:c5:25:2d:
c1:59:41:99:cc:26:24:b0:af:78:d2:d7:ee:6e:1b:81:0c:a4:
d6:e6:bb:51:d2:fb:d5:1e:af:0f:59:66:9f:cd:20:78:bd:d6:
f6:c2:3e:e3:0e:61:73:aa:24:d6:90:5c:73:ac:be:61:8e:fd:
84:b4:26:53:df:5a:51:02:6f:8a:27:b1:42:94:45:d2:4e:64:
4e:81:9c:12:ee:1f:c3:37:e9:8a:3e:fd:2c:4b:fb:bc:07:77:
e6:5b:97:76:4e:46:4f:b2:fe:af:a1:dc:3d:6d:ca:7a:ae:cb:
8d:bf:2b:67:44:88:bc:4d:96:a9:7c:96:42:a2:c1:b4:d8:fb:
bd:d0:b0:5c:16:b1:08:b9:99:1d:b8:86:4b:d7:9e:bf:81:3e:
f9:88:d3:22:16:52:95:f5:86:70:1e:7f:d2:e9:7f:2e:db:f5:
e4:80:f1:e4:bd:e6:d9:e7:7a:52:f6:5a:13:d8:2c:2f:64:47:
20:96:de:8d:52:6e:17:bb:1a:7d:24:c2:67:74:4e:09:c9:b7:
bd:3a:65:e0:52:77:4c:3b:e3:68:c6:23:f8:a2:ef:d7:08:52:
3b:b3:a5:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:20:00 2026 by rpki-client