Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3234312e3134382e302f32342d3234203d3e203436353539.roa
File: 3138352e3234312e3134382e302f32342d3234203d3e203436353539.roa (raw, json)
Hash identifier: R2l+xTG8qWT7WWlel/ZaYfD2oQ0ZXQsf0OOHsIQhtjg=
Subject key identifier: DA:4A:5B:F1:C1:7D:9A:C0:0E:49:81:0D:30:6D:DF:99:3E:F6:9C:56
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6337AE9E7909202B81F08A6DA3CE712F696B4DC5
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3234312e3134382e302f32342d3234203d3e203436353539.roa
Signing time: Sun 01 Feb 2026 12:43:44 +0000
ROA not before: Sun 01 Feb 2026 12:38:44 +0000
ROA not after: Sun 31 Jan 2027 12:43:44 +0000
asID: 46559
IP address blocks: 185.241.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:37:ae:9e:79:09:20:2b:81:f0:8a:6d:a3:ce:71:2f:69:6b:4d:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 1 12:38:44 2026 GMT
Not After : Jan 31 12:43:44 2027 GMT
Subject: CN=DA4A5BF1C17D9AC00E49810D306DDF993EF69C56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:83:1e:26:56:db:18:11:74:23:02:cd:15:86:
1f:b7:76:f5:84:58:8c:ca:a7:8d:12:d8:4f:8c:23:
52:90:ad:95:55:fa:a3:af:27:3d:26:1e:d5:2f:f9:
a8:f7:a0:c0:31:03:7e:d0:3a:c4:1f:97:39:44:0f:
fd:f5:b4:d4:fd:db:a0:93:99:ad:3d:76:24:62:ee:
2e:db:53:bb:c1:0a:3e:f2:7f:d5:37:29:0d:0a:9e:
11:2a:17:f8:9c:45:23:06:20:71:79:61:1e:5d:23:
79:dc:11:86:ba:b1:1a:b7:50:11:f5:87:43:ff:5e:
ff:82:09:49:86:5a:7b:3a:3a:4b:2e:50:47:82:82:
06:10:3e:e5:b2:c5:e7:76:a8:75:ff:2d:83:5a:d4:
ed:c7:58:11:6a:09:c4:cf:fc:a5:eb:fe:93:f0:02:
5e:f3:2c:42:c3:30:e1:54:61:91:c0:65:ae:cc:81:
69:e3:63:37:98:fc:e5:73:51:03:cf:e7:02:90:67:
6f:7f:96:cf:09:b4:4d:aa:c9:86:45:76:2a:a7:84:
de:ad:25:82:4c:8c:db:45:84:a6:c8:eb:0d:e1:ef:
81:11:ec:5e:3f:9b:ea:72:39:d5:fe:f0:db:e9:1e:
33:b9:98:05:7c:b1:7e:21:2f:36:ef:6e:48:6a:85:
a9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:4A:5B:F1:C1:7D:9A:C0:0E:49:81:0D:30:6D:DF:99:3E:F6:9C:56
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3234312e3134382e302f32342d3234203d3e203436353539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.148.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:5c:dc:ca:cd:f3:ac:ae:f3:d5:7d:62:e6:69:a4:81:c9:d2:
0d:e9:3f:2f:dd:ee:cf:d7:60:28:d9:11:0b:11:52:be:37:05:
84:9c:c0:fe:4f:8d:a9:24:60:2f:91:34:dd:41:10:d9:0c:7b:
3c:ad:24:51:37:8b:19:8c:87:b1:a9:24:30:ba:63:54:97:0c:
b7:79:df:08:09:79:22:e1:7b:b5:21:1b:7a:d3:ed:08:f4:9b:
ee:7c:b5:ba:b3:9b:3f:20:6a:60:95:be:f2:70:31:d9:0e:7d:
4f:05:20:64:5d:30:49:70:77:38:4a:62:b4:4a:43:dd:0e:28:
ab:a1:f5:b1:01:46:c6:e6:42:6a:f9:96:19:ee:4d:94:d4:d9:
8d:34:15:67:bc:8e:b5:85:d0:b1:06:3a:c1:e6:d2:dc:3a:b9:
5d:7a:ed:b7:d2:23:e3:09:f8:00:f6:3a:07:b9:48:7b:f6:79:
8b:4a:07:2d:e1:c0:79:34:49:60:cd:93:a5:14:9c:a1:6f:f1:
76:22:05:78:28:3a:ea:be:ed:78:00:c7:03:d0:9b:3f:35:9d:
e6:73:d7:5b:da:65:fb:a1:7e:d9:41:ab:30:41:54:96:80:f3:
97:c3:10:3a:e7:27:48:34:c0:ad:c3:8d:9d:68:95:6f:d6:7a:
eb:ef:0d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:57:09 2026 by rpki-client