Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3233392e3231302e302f32342d3234203d3e203437353833.roa
File: 3138352e3233392e3231302e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier: osExcwZEVqbOHXCCOAfmEr92ZIcn3tzjibK8fpYQu/c=
Subject key identifier: 26:54:C6:16:76:FF:86:B5:6A:0F:7D:1D:50:06:D2:96:F8:B5:D4:0E
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 43F39944847516B383ED4FDC47080CE8210E5646
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3233392e3231302e302f32342d3234203d3e203437353833.roa
Signing time: Fri 24 Jul 2026 15:26:46 +0000
ROA not before: Fri 24 Jul 2026 15:21:46 +0000
ROA not after: Fri 23 Jul 2027 15:26:46 +0000
asID: 47583
IP address blocks: 185.239.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:f3:99:44:84:75:16:b3:83:ed:4f:dc:47:08:0c:e8:21:0e:56:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 24 15:21:46 2026 GMT
Not After : Jul 23 15:26:46 2027 GMT
Subject: CN=2654C61676FF86B56A0F7D1D5006D296F8B5D40E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:94:8d:4a:3a:47:81:6e:39:4e:90:80:9c:a2:
61:61:fe:ea:52:91:6f:f9:f2:6b:1c:ef:d9:4e:7f:
cf:98:71:95:d5:0f:52:3f:81:6a:40:53:f4:48:dd:
bb:63:2b:7a:24:77:8f:f3:69:96:f9:57:ee:68:9d:
20:6e:ef:7d:bf:25:e7:a2:e4:33:0b:7b:13:57:e9:
6d:d9:37:6b:5a:9a:09:1f:95:b2:9f:92:4d:e1:08:
5c:fa:13:1d:67:44:cf:d6:43:19:62:8c:84:b8:56:
ab:6c:d4:49:3b:e9:1d:a7:49:5c:34:14:f4:4b:f6:
e4:ca:c4:ba:38:96:89:e0:92:e9:d0:91:66:6f:27:
18:39:77:fd:2f:e7:c0:26:8f:fe:2d:5a:61:3a:89:
3a:50:99:e9:6d:f3:51:90:9c:b7:6f:cb:b4:61:6f:
0f:57:78:36:17:c7:27:d7:d4:de:ee:ca:59:bd:2e:
1f:e9:f5:87:c1:0a:b4:29:57:26:a6:a8:87:06:f3:
04:82:d8:7f:9e:8a:dd:10:38:95:97:92:6c:34:b6:
a8:ee:3c:87:09:4c:82:3f:5f:c0:2a:c0:58:b0:01:
0e:70:8b:b6:81:8a:08:cd:2e:8b:4c:fd:d9:c2:4b:
d3:0f:72:98:eb:cd:52:71:6a:aa:a7:b6:6c:eb:c7:
64:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:54:C6:16:76:FF:86:B5:6A:0F:7D:1D:50:06:D2:96:F8:B5:D4:0E
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3233392e3231302e302f32342d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.210.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:8e:f6:e3:02:57:cb:f3:c1:a4:5a:f4:1d:11:b3:d5:d5:dc:
34:0c:14:26:f9:53:79:f1:94:53:11:fd:07:8c:4a:23:c9:bb:
30:dc:5a:41:21:eb:b0:69:79:80:fb:58:7c:cf:31:b0:ae:5f:
1f:b9:57:ef:71:d0:7b:34:64:c2:e4:cc:e2:9d:5b:18:77:9d:
71:a2:1d:1b:19:1a:98:46:cc:95:4b:77:79:87:d9:01:8b:72:
5c:5e:e5:b8:b5:07:70:c8:dc:fa:5a:53:e3:f3:4e:02:8a:e2:
e6:03:cd:4e:7e:64:89:2a:bd:82:be:e1:f3:84:c7:27:bf:1b:
5d:f8:62:fa:1c:e1:dd:7d:c0:e1:68:5a:a2:a8:42:60:e1:85:
15:89:e8:47:b6:15:e9:f4:87:bf:88:a5:a6:ac:80:c3:6a:c2:
0a:a9:ac:e4:91:b2:39:fe:3e:ff:90:c8:f3:33:66:ba:8e:00:
9e:c1:a8:1e:59:1c:64:44:78:7c:87:1b:b6:d5:e1:0f:b0:1d:
33:a0:74:32:71:4b:07:d3:30:ff:d3:ba:df:02:a3:e2:93:a6:
a3:dc:89:17:6b:13:ac:23:17:eb:27:48:9b:8d:11:d8:3f:fc:
a3:4d:54:f1:14:f8:70:55:1d:aa:d9:73:bb:19:27:cf:23:85:
cf:b4:f9:2c
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUQ/OZRIR1FrOD7U/cRwgM6CEOVkYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA3MjQxNTIxNDZaFw0yNzA3MjMxNTI2NDZaMDMxMTAvBgNV
BAMTKDI2NTRDNjE2NzZGRjg2QjU2QTBGN0QxRDUwMDZEMjk2RjhCNUQ0MEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDulI1KOkeBbjlOkICcomFh/upS
kW/58msc79lOf8+YcZXVD1I/gWpAU/RI3btjK3okd4/zaZb5V+5onSBu732/Jeei
5DMLexNX6W3ZN2tamgkflbKfkk3hCFz6Ex1nRM/WQxlijIS4Vqts1Ek76R2nSVw0
FPRL9uTKxLo4longkunQkWZvJxg5d/0v58Amj/4tWmE6iTpQmelt81GQnLdvy7Rh
bw9XeDYXxyfX1N7uylm9Lh/p9YfBCrQpVyamqIcG8wSC2H+eit0QOJWXkmw0tqju
PIcJTII/X8AqwFiwAQ5wi7aBigjNLotM/dnCS9MPcpjrzVJxaqqntmzrx2SjAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUJlTGFnb/hrVqD30dUAbSlvi11A4wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMjMzMzkyZTMy
MzEzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzczNTM4MzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAC579IwDQYJKoZIhvcNAQELBQADggEBABuO9uMCV8vzwaRa9B0Rs9XV3DQMFCb5
U3nxlFMR/QeMSiPJuzDcWkEh67BpeYD7WHzPMbCuXx+5V+9x0Hs0ZMLkzOKdWxh3
nXGiHRsZGphGzJVLd3mH2QGLclxe5bi1B3DI3PpaU+PzTgKK4uYDzU5+ZIkqvYK+
4fOExye/G134Yvoc4d19wOFoWqKoQmDhhRWJ6Ee2Fen0h7+IpaasgMNqwgqprOSR
sjn+Pv+QyPMzZrqOAJ7BqB5ZHGREeHyHG7bV4Q+wHTOgdDJxSwfTMP/Tut8Co+KT
pqPciRdrE6wjF+snSJuNEdg//KNNVPEU+HBVHarZc7sZJ88jhc+0+Sw=
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:55:52 2026 by rpki-client