Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3234312e3134382e302f32342d3234203d3e2039333034.roa
File: 3138352e3234312e3134382e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier: SfWDACGZOyuU+SGJmJT8e1QAasyhZTEehb89ERfnA08=
Subject key identifier: 72:36:26:21:ED:66:63:1E:C4:61:D0:C1:5C:C1:9B:42:35:36:A1:53
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 071E5BBE36335AD67E6CC2A6B98CCE65A3BA7012
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3234312e3134382e302f32342d3234203d3e2039333034.roa
Signing time: Fri 04 Sep 2026 10:34:27 +0000
ROA not before: Fri 04 Sep 2026 10:29:27 +0000
ROA not after: Fri 03 Sep 2027 10:34:27 +0000
asID: 9304
IP address blocks: 185.241.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 02:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:1e:5b:be:36:33:5a:d6:7e:6c:c2:a6:b9:8c:ce:65:a3:ba:70:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 4 10:29:27 2026 GMT
Not After : Sep 3 10:34:27 2027 GMT
Subject: CN=72362621ED66631EC461D0C15CC19B423536A153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2f:40:2a:e3:22:b6:73:89:c6:fe:1a:18:83:
fb:3a:b7:e6:b5:71:90:f4:01:cc:01:0d:f0:62:9d:
0b:73:d7:8f:97:0c:42:f6:00:e0:76:6b:0c:b9:cb:
f3:78:88:50:03:9c:3e:b7:a0:46:b6:dc:d8:05:72:
94:e0:70:c3:af:06:ff:e9:7e:fd:13:61:9f:5b:79:
0f:49:d2:ef:0e:bc:ac:6f:a2:e0:9e:13:41:0a:ac:
1f:5a:63:d5:5e:aa:cd:da:5c:20:82:0d:8a:e8:31:
c3:58:b5:b9:dc:72:1f:a4:87:5a:df:6d:b6:1c:de:
46:ce:f7:97:98:69:ef:29:77:ca:1e:71:2f:d6:81:
10:c3:6d:6a:84:3a:63:aa:47:43:77:03:73:78:80:
14:28:c0:ac:2c:e1:26:04:ee:18:b9:e2:42:d4:f4:
ff:40:48:89:09:05:48:3e:38:9c:4d:15:b6:d2:a6:
46:45:2d:d1:f8:60:21:d0:17:84:74:ec:c5:08:79:
80:0a:13:3c:f1:de:b6:dd:a4:9b:7b:51:dc:e2:ff:
c5:cb:59:5c:6b:3d:19:e8:1d:a9:73:96:c8:ef:21:
80:c2:c2:fb:c2:28:9e:46:12:2b:22:1b:2a:95:cd:
ac:d9:bd:72:e4:58:92:bb:15:0d:06:28:34:4a:70:
ae:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:36:26:21:ED:66:63:1E:C4:61:D0:C1:5C:C1:9B:42:35:36:A1:53
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3234312e3134382e302f32342d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.148.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:01:42:ae:f4:49:78:bf:fd:3b:ae:2a:16:c3:40:9b:34:28:
b4:24:dc:ac:0c:f7:2f:55:ce:74:3d:71:d2:14:0c:45:ba:6c:
31:d1:c9:7f:eb:04:48:00:c7:ae:f3:5e:43:22:b9:0e:17:b5:
ae:4b:b8:94:21:28:f9:2c:ea:37:19:a2:83:f9:60:0d:a6:78:
df:b2:53:c0:13:79:1e:88:47:71:9e:e7:ba:ad:5a:00:cf:64:
50:72:7a:30:e4:e9:7f:3f:f9:e3:f1:97:1e:c0:b1:2f:cd:f5:
95:ce:82:ab:e6:67:a2:a3:be:ea:0b:09:08:05:d9:b8:18:68:
47:b5:c0:a9:34:12:d3:00:9a:4b:04:85:f0:66:55:93:57:8b:
b5:79:5b:89:05:e0:cd:6e:2e:23:12:19:42:75:ad:ab:a9:49:
b2:03:be:14:80:6a:e3:6c:f2:46:95:09:28:b9:7d:80:7c:7c:
a4:ee:8f:fd:81:1c:5a:da:ca:fb:c3:f7:9f:9e:b9:1f:12:d8:
dd:30:a1:94:6f:9f:0b:22:96:29:66:1d:4f:0b:f4:03:94:5b:
e6:6d:d5:ba:08:65:d9:22:c7:57:da:f9:0e:57:94:f3:9c:0e:
ac:a6:4c:2c:fa:a3:9f:9e:1b:09:bf:3d:33:42:97:b1:76:d6:
50:87:5c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:36:59 2026 by rpki-client