Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3233392e3230382e302f32332d3332203d3e203531313637.roa
File: 3138352e3233392e3230382e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier: loEi116Gocv9WWMDHxkqVD+WkwuBgmoa9RpQTpD2xHE=
Subject key identifier: 86:4F:2D:0C:BC:91:5F:AD:DE:21:CE:04:4E:B8:D5:DE:FF:82:F5:D9
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1A3E1D8BBB6A0B01B807D4A5CF56F38F4BD36DF7
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3233392e3230382e302f32332d3332203d3e203531313637.roa
Signing time: Fri 24 Jul 2026 15:26:52 +0000
ROA not before: Fri 24 Jul 2026 15:21:52 +0000
ROA not after: Fri 23 Jul 2027 15:26:52 +0000
asID: 51167
IP address blocks: 185.239.208.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:3e:1d:8b:bb:6a:0b:01:b8:07:d4:a5:cf:56:f3:8f:4b:d3:6d:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 24 15:21:52 2026 GMT
Not After : Jul 23 15:26:52 2027 GMT
Subject: CN=864F2D0CBC915FADDE21CE044EB8D5DEFF82F5D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:01:71:22:03:7b:a7:cd:44:43:6c:c4:07:81:
5a:a6:c0:64:1f:91:b1:a9:04:8e:ea:86:26:71:9e:
c7:9f:3c:96:16:9c:a3:4f:9f:1e:5f:6b:5f:eb:56:
8f:d8:70:37:6d:bc:6f:09:03:fe:34:75:78:4a:54:
08:97:be:ee:e5:4a:df:0e:10:f1:08:4d:b2:b6:a0:
b7:7f:57:c6:45:c5:f2:99:07:37:78:d4:a6:88:90:
6b:2c:45:1d:a1:9b:3f:1e:68:2a:93:41:61:26:19:
5a:b5:37:8a:b2:8e:44:a9:12:26:ce:11:72:8e:d9:
ad:4c:7d:0c:05:89:5d:69:e5:92:29:b6:21:c7:4b:
38:55:eb:dc:9e:34:59:25:d3:89:17:72:01:95:13:
fa:88:dc:90:e7:47:44:bc:ca:33:c0:81:1a:f6:ff:
eb:36:ab:d0:68:2f:57:cc:b1:a0:5c:75:00:7f:0c:
cb:30:2a:f5:52:8c:86:75:04:16:fe:1e:b2:e8:04:
b4:cd:e7:c1:c4:11:01:49:ae:b8:70:26:d8:53:4f:
dc:70:62:c7:37:a6:60:d6:5a:11:a9:81:1b:55:c3:
54:6e:87:6c:30:50:6d:98:67:11:e4:0e:08:87:8d:
e9:66:50:39:ee:46:91:fa:3e:85:f7:9e:e8:c3:d3:
21:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:4F:2D:0C:BC:91:5F:AD:DE:21:CE:04:4E:B8:D5:DE:FF:82:F5:D9
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3233392e3230382e302f32332d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.208.0/23
Signature Algorithm: sha256WithRSAEncryption
66:44:f7:59:ec:20:f7:a2:b0:52:8f:64:c4:e3:c2:0f:da:7b:
a7:21:a2:61:c6:49:6e:21:ad:85:75:af:bb:33:11:40:f5:c6:
84:76:ea:a1:6a:b4:7d:e0:62:19:d0:2d:d7:4b:18:09:dd:20:
44:95:02:fe:8d:c2:0c:d4:5c:51:e3:f4:84:db:b6:56:78:40:
9e:f2:fa:75:51:2d:1f:25:ee:e4:52:dd:8c:56:42:75:af:fa:
a3:1d:8e:bc:81:ab:73:05:e2:0e:52:89:58:30:19:b5:a7:82:
94:09:11:96:e7:9d:cf:46:7e:7a:3a:f8:72:83:7c:14:df:50:
5b:b1:40:b6:de:f4:21:0a:0e:87:18:5e:5a:64:8f:18:c9:04:
09:66:29:32:91:97:62:d2:6e:2a:7d:f8:c0:e0:db:a5:cc:c0:
bf:38:ce:8e:2b:65:4b:0f:a8:99:4c:09:85:bc:13:90:36:0b:
81:fe:91:64:48:ef:89:0f:03:e6:e0:d6:6d:b4:64:63:14:73:
d7:2d:bf:b1:36:33:0a:20:e6:1e:0f:b0:bd:b9:88:80:9f:d1:
84:18:16:85:6e:d3:eb:53:a1:b4:d8:df:5d:f3:0f:2a:e5:1c:
f9:29:50:dd:63:e5:67:ef:62:65:57:f8:9c:2d:2a:d1:ed:33:
ba:4a:b2:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:52:05 2026 by rpki-client