Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3234312e3134382e302f32342d3234203d3e203239303134.roa
File: 3138352e3234312e3134382e302f32342d3234203d3e203239303134.roa (raw, json)
Hash identifier: QEYo39matIBNdDgP/BiKuJiV6skVt0o78yVQ21S778M=
Subject key identifier: F3:66:D1:E2:49:1C:9F:DE:1D:F4:42:32:F5:67:E0:92:6F:74:B7:57
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 34FE77C7EFDF2FBF3A6331EA960170A655F5E8DA
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3234312e3134382e302f32342d3234203d3e203239303134.roa
Signing time: Mon 23 Feb 2026 14:23:21 +0000
ROA not before: Mon 23 Feb 2026 14:18:21 +0000
ROA not after: Mon 22 Feb 2027 14:23:21 +0000
asID: 29014
IP address blocks: 185.241.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:04:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:fe:77:c7:ef:df:2f:bf:3a:63:31:ea:96:01:70:a6:55:f5:e8:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 23 14:18:21 2026 GMT
Not After : Feb 22 14:23:21 2027 GMT
Subject: CN=F366D1E2491C9FDE1DF44232F567E0926F74B757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ce:ed:70:07:5a:15:0f:47:36:56:ad:46:b0:
35:f5:b1:04:f4:7b:a9:71:76:23:9c:20:ba:90:e5:
a3:88:6f:22:82:f2:9a:b3:74:4f:3d:83:c1:76:06:
e5:a1:d9:e4:3c:81:30:7d:60:cd:32:99:03:e5:4b:
14:9e:91:07:d4:71:6a:3f:04:ea:a4:18:38:98:78:
42:3c:cd:7a:97:dd:8b:c5:5d:a8:72:0c:ec:d6:96:
9f:ee:d2:e7:e9:45:70:b0:b5:63:28:e4:94:03:06:
bc:22:0a:06:12:20:21:35:bc:86:a6:a0:4a:0e:50:
4a:75:45:29:ae:95:de:d2:74:db:74:53:28:45:b6:
b2:e8:e6:fa:b7:1c:7d:93:61:a3:72:6a:3a:f5:04:
32:12:c5:10:4d:c8:a9:d4:e3:8c:fd:81:65:f7:7c:
0c:7d:8d:2f:8b:71:b4:49:e3:d8:76:7f:35:18:3a:
ca:7a:89:34:0b:0d:fc:82:c8:62:01:72:87:53:ae:
58:d0:9e:08:2f:6e:67:da:3f:4f:a2:36:ef:f8:19:
8a:6d:75:eb:e7:16:52:dd:66:c8:15:ba:7b:8e:8b:
5b:8b:6c:55:14:f2:0c:94:89:17:5e:b7:5f:f8:b1:
cd:2f:e2:cd:e3:30:63:86:5d:ad:fe:16:5a:e8:e4:
10:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:66:D1:E2:49:1C:9F:DE:1D:F4:42:32:F5:67:E0:92:6F:74:B7:57
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3234312e3134382e302f32342d3234203d3e203239303134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.148.0/24
Signature Algorithm: sha256WithRSAEncryption
00:9a:0e:18:17:f2:81:62:68:c2:1f:f7:b2:e8:ff:4b:b8:64:
8c:41:ca:0f:5a:d0:b9:86:97:af:9c:db:4f:98:e9:66:74:0e:
b2:1c:ab:28:3b:9b:92:90:5b:36:03:9a:33:02:b1:f3:87:42:
0a:4f:0b:6a:06:60:05:e1:d5:6f:ca:79:8b:9e:8f:00:bc:31:
90:89:a3:7c:b5:0c:3b:91:e5:4c:fb:65:ad:fb:bd:3f:c0:3b:
95:40:cd:20:52:e5:b4:ca:c2:46:02:ef:8e:52:92:76:07:81:
0c:5c:67:bb:49:32:8b:44:1c:27:9b:25:49:7a:34:93:5f:3a:
ce:c7:57:70:6d:7d:25:48:e6:53:32:6a:8a:da:35:7a:ab:c0:
6d:9d:9b:1b:a1:86:47:76:e6:5b:67:41:b0:da:38:52:b6:9b:
82:22:40:36:55:68:90:0f:d4:58:ee:92:c2:da:fc:e7:ef:6a:
a7:6b:dc:5f:35:c7:65:9c:cc:4d:0c:18:c0:4d:91:0a:d3:f9:
f5:9d:b7:88:b7:f3:49:84:4d:e4:a8:05:b9:c2:96:02:f5:26:
91:48:f2:b1:26:a0:a4:1f:ee:59:74:d7:c5:d8:ff:52:2d:f8:
3e:2d:d9:e0:7a:a1:7c:7d:07:6f:53:35:d7:fb:ce:9e:e9:44:
c8:75:0a:0b
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUNP53x+/fL786YzHqlgFwplX16NowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjAyMjMxNDE4MjFaFw0yNzAyMjIxNDIzMjFaMDMxMTAvBgNV
BAMTKEYzNjZEMUUyNDkxQzlGREUxREY0NDIzMkY1NjdFMDkyNkY3NEI3NTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtzu1wB1oVD0c2Vq1GsDX1sQT0
e6lxdiOcILqQ5aOIbyKC8pqzdE89g8F2BuWh2eQ8gTB9YM0ymQPlSxSekQfUcWo/
BOqkGDiYeEI8zXqX3YvFXahyDOzWlp/u0ufpRXCwtWMo5JQDBrwiCgYSICE1vIam
oEoOUEp1RSmuld7SdNt0UyhFtrLo5vq3HH2TYaNyajr1BDISxRBNyKnU44z9gWX3
fAx9jS+LcbRJ49h2fzUYOsp6iTQLDfyCyGIBcodTrljQnggvbmfaP0+iNu/4GYpt
devnFlLdZsgVunuOi1uLbFUU8gyUiRdet1/4sc0v4s3jMGOGXa3+Flro5BC5AgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQU82bR4kkcn94d9EIy9Wfgkm90t1cwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMjM0MzEyZTMx
MzQzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzkzMDMxMzQucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAC58ZQwDQYJKoZIhvcNAQELBQADggEBAACaDhgX8oFiaMIf97Lo/0u4ZIxByg9a
0LmGl6+c20+Y6WZ0DrIcqyg7m5KQWzYDmjMCsfOHQgpPC2oGYAXh1W/KeYuejwC8
MZCJo3y1DDuR5Uz7Za37vT/AO5VAzSBS5bTKwkYC745SknYHgQxcZ7tJMotEHCeb
JUl6NJNfOs7HV3BtfSVI5lMyaoraNXqrwG2dmxuhhkd25ltnQbDaOFK2m4IiQDZV
aJAP1FjuksLa/Ofvaqdr3F81x2WczE0MGMBNkQrT+fWdt4i380mETeSoBbnClgL1
JpFI8rEmoKQf7ll018XY/1It+D4t2eB6oXx9B29TNdf7zp7pRMh1Cgs=
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:07:58 2026 by rpki-client