Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3234312e3134392e302f32342d3234203d3e20333937343233.roa
File: 3138352e3234312e3134392e302f32342d3234203d3e20333937343233.roa (raw, json)
Hash identifier: l1sMxPtVlNo/K1ieaqVXLR5l1Oc8SCRBnhQqUc6dIWU=
Subject key identifier: AE:D0:FD:07:FF:35:DA:6D:02:0B:2D:B1:2E:82:91:62:CE:3D:38:4D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1CFC1E6DCC5D0084C8650E6D4D9C16FABB076D43
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3234312e3134392e302f32342d3234203d3e20333937343233.roa
Signing time: Fri 24 Jul 2026 15:27:02 +0000
ROA not before: Fri 24 Jul 2026 15:22:02 +0000
ROA not after: Fri 23 Jul 2027 15:27:02 +0000
asID: 397423
IP address blocks: 185.241.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:12:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:fc:1e:6d:cc:5d:00:84:c8:65:0e:6d:4d:9c:16:fa:bb:07:6d:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 24 15:22:02 2026 GMT
Not After : Jul 23 15:27:02 2027 GMT
Subject: CN=AED0FD07FF35DA6D020B2DB12E829162CE3D384D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:95:50:d7:82:69:40:77:b4:e4:58:c6:e5:10:
65:f9:8f:bb:12:ad:c1:01:8c:1a:aa:f5:bc:8f:ac:
de:c1:10:56:51:07:f0:3d:b9:c6:29:3e:a1:59:76:
57:23:7a:bb:e3:f8:25:a1:dd:e1:f7:b4:c8:ba:58:
23:e4:68:30:39:d6:f2:5a:a8:21:78:34:63:b0:bc:
28:26:6d:f1:7f:69:35:05:fa:44:8f:dc:d1:25:5d:
5b:94:98:19:d8:b0:94:d2:1f:49:e2:d1:c4:94:6f:
c2:1a:6e:e3:f4:b1:15:a7:18:86:93:2a:6b:f4:45:
ca:43:f8:f6:70:2a:b1:41:6f:33:e7:60:52:d1:a7:
5d:23:06:ff:e0:49:dd:7d:4e:46:31:33:09:9c:75:
34:f1:a0:12:0e:30:f5:0e:85:56:84:ca:3c:78:0a:
43:bd:96:16:aa:3e:9f:4f:69:8a:c6:4b:8d:72:14:
6c:ab:22:01:64:b4:1c:89:d8:a9:56:6e:f6:04:04:
8c:40:cd:42:cf:31:c8:5d:48:ee:b1:92:4d:59:b8:
04:9a:09:22:27:63:c7:55:ce:37:31:66:b6:87:80:
a3:83:6e:fd:8e:3a:10:b1:84:a1:ac:bb:7b:9f:91:
28:b1:d7:44:71:31:05:db:71:a7:23:5a:67:95:83:
8b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D0:FD:07:FF:35:DA:6D:02:0B:2D:B1:2E:82:91:62:CE:3D:38:4D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3234312e3134392e302f32342d3234203d3e20333937343233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.149.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:c6:84:be:09:9f:92:c5:53:ce:bc:d5:89:c9:af:4a:58:67:
33:a3:ef:ba:32:c7:25:a8:2d:de:36:b3:56:a9:14:ba:11:53:
af:65:7e:19:84:a5:56:2b:4e:99:dd:e6:22:98:e3:ce:e1:73:
bb:19:7d:19:d2:cf:51:d5:b3:d3:c6:42:9f:07:83:66:54:22:
90:45:a1:ce:16:3c:2f:33:80:91:c5:b9:a6:af:05:81:e4:bc:
42:e5:29:cd:8b:3d:dd:38:99:52:f9:91:d0:7b:41:f2:eb:6b:
21:bc:fd:cc:68:a9:5c:ea:c4:68:b5:41:84:00:4c:68:a1:bd:
ff:d8:a3:a9:5b:3b:d9:1b:63:33:61:42:25:a6:e9:24:6b:a0:
da:a1:ea:78:73:93:c9:11:e6:df:55:55:ed:4e:92:86:27:53:
9e:e3:f5:97:bf:58:18:b7:bb:4b:97:c3:18:da:f5:df:2a:fc:
0e:97:aa:83:c6:98:22:93:87:92:3d:80:60:f8:4e:fa:81:b8:
76:44:e6:81:24:94:36:bb:9d:01:dd:bf:b1:c4:a0:f8:5e:25:
5d:73:aa:74:02:a9:29:91:70:d5:da:0d:c3:23:ce:b9:09:b6:
dd:a2:07:88:41:7f:03:50:ee:98:51:78:63:72:74:bd:ca:57:
b9:76:5f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:23:14 2026 by rpki-client