Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3234312e3135302e302f32342d3234203d3e203631333137.roa
File: 3138352e3234312e3135302e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: OaP87M35sWkFD/KVA43U1FEMqPCV/4d6pBDQkWSuAiM=
Subject key identifier: 76:AB:AC:D3:AD:61:0E:9B:1A:5D:EB:9D:D5:9E:49:DE:00:49:80:69
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 191458F0D9CAA5893CACE20775222169B5E26E2D
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3234312e3135302e302f32342d3234203d3e203631333137.roa
Signing time: Fri 24 Jul 2026 15:26:54 +0000
ROA not before: Fri 24 Jul 2026 15:21:54 +0000
ROA not after: Fri 23 Jul 2027 15:26:54 +0000
asID: 61317
IP address blocks: 185.241.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:12:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:14:58:f0:d9:ca:a5:89:3c:ac:e2:07:75:22:21:69:b5:e2:6e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 24 15:21:54 2026 GMT
Not After : Jul 23 15:26:54 2027 GMT
Subject: CN=76ABACD3AD610E9B1A5DEB9DD59E49DE00498069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ac:22:35:e1:50:d9:3c:22:28:e7:12:ec:ad:
41:5e:9b:1a:ef:2c:15:88:01:40:ff:76:8f:15:f4:
f7:80:7f:5f:f5:0c:8c:42:8f:50:0f:16:a2:af:b1:
42:38:a3:4e:d1:5d:ea:68:7a:83:53:14:16:fe:ec:
7d:0d:6b:e2:24:ab:48:5b:5d:f3:ba:a0:9b:c9:e3:
e2:89:47:4e:6e:1d:07:85:07:2b:e9:f6:be:69:c3:
74:3d:6d:f6:6f:e0:a4:1a:c7:e7:84:da:a6:a9:bb:
a7:77:26:75:23:b4:bd:04:c0:d6:79:fd:e4:cf:5e:
7e:8e:cc:79:5d:a2:18:bb:c1:e7:ef:56:b1:88:db:
c4:00:9b:60:fc:10:1e:de:51:8d:98:33:bd:36:87:
e2:06:b0:fd:52:3b:19:81:92:cd:c8:60:04:71:a6:
72:cf:0e:29:e7:60:3f:d3:cb:ad:88:20:38:4e:ce:
7f:e4:c3:6c:c3:51:ee:22:41:f5:5d:98:76:7a:fb:
0f:7e:5f:23:b5:b0:61:3c:78:47:24:46:5a:c7:da:
33:c5:a9:cc:84:9c:d8:25:9e:c2:97:31:71:cf:fb:
ef:3c:93:27:81:12:be:25:19:d3:e2:c7:13:35:3b:
47:70:87:8f:78:b6:c6:e3:57:3a:69:2a:4b:f9:09:
c3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:AB:AC:D3:AD:61:0E:9B:1A:5D:EB:9D:D5:9E:49:DE:00:49:80:69
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3234312e3135302e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.150.0/24
Signature Algorithm: sha256WithRSAEncryption
88:89:b6:d6:12:bb:1e:3d:e4:0b:6b:ca:07:80:4c:91:ec:e7:
9b:4b:3a:a5:03:09:6d:c1:6c:48:c6:08:bf:17:42:2c:5f:3e:
34:5c:a9:67:d3:ab:3a:db:ad:f1:88:c6:11:f0:c4:a7:6b:b3:
50:a1:c5:34:68:c1:b9:f7:1c:e5:33:18:63:4d:b6:f4:66:65:
33:7a:29:f9:ec:ba:ec:d6:80:95:47:11:76:3a:9b:02:fa:72:
7e:99:d1:4a:45:f1:d3:e4:70:a3:63:db:a5:7a:24:30:d4:1c:
f1:22:07:ac:73:d9:39:de:a1:70:53:18:b3:71:49:cd:41:ed:
dc:82:3d:21:3d:60:4c:08:88:c4:9d:cf:eb:a3:2e:17:7b:19:
d6:e2:b5:88:cb:b9:1b:b3:43:bd:92:98:67:bc:2e:1a:75:49:
23:96:cb:ee:80:6e:d5:56:8b:e2:7d:f1:b6:17:79:10:e9:14:
e9:a7:09:d1:bf:fb:be:ac:4c:78:a6:79:bc:b3:b9:f3:b7:1d:
23:7e:07:b2:c4:cf:9e:17:78:fb:99:3f:8e:79:29:5d:e2:3d:
32:14:a3:f7:13:f3:2f:86:71:07:5c:f3:d1:0c:e0:e8:e3:fd:
23:f3:38:17:5f:8a:cc:54:c5:11:21:d4:11:1e:1c:d6:6b:b1:
99:04:f6:e4
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUGRRY8NnKpYk8rOIHdSIhabXibi0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA3MjQxNTIxNTRaFw0yNzA3MjMxNTI2NTRaMDMxMTAvBgNV
BAMTKDc2QUJBQ0QzQUQ2MTBFOUIxQTVERUI5REQ1OUU0OURFMDA0OTgwNjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDprCI14VDZPCIo5xLsrUFemxrv
LBWIAUD/do8V9PeAf1/1DIxCj1APFqKvsUI4o07RXepoeoNTFBb+7H0Na+Ikq0hb
XfO6oJvJ4+KJR05uHQeFByvp9r5pw3Q9bfZv4KQax+eE2qapu6d3JnUjtL0EwNZ5
/eTPXn6OzHldohi7wefvVrGI28QAm2D8EB7eUY2YM702h+IGsP1SOxmBks3IYARx
pnLPDinnYD/Ty62IIDhOzn/kw2zDUe4iQfVdmHZ6+w9+XyO1sGE8eEckRlrH2jPF
qcyEnNglnsKXMXHP++88kyeBEr4lGdPixxM1O0dwh494tsbjVzppKkv5CcMJAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUdqus061hDpsaXeud1Z5J3gBJgGkwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMjM0MzEyZTMx
MzUzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzEzMzMxMzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAC58ZYwDQYJKoZIhvcNAQELBQADggEBAIiJttYSux495AtrygeATJHs55tLOqUD
CW3BbEjGCL8XQixfPjRcqWfTqzrbrfGIxhHwxKdrs1ChxTRowbn3HOUzGGNNtvRm
ZTN6KfnsuuzWgJVHEXY6mwL6cn6Z0UpF8dPkcKNj26V6JDDUHPEiB6xz2TneoXBT
GLNxSc1B7dyCPSE9YEwIiMSdz+ujLhd7GdbitYjLuRuzQ72SmGe8Lhp1SSOWy+6A
btVWi+J98bYXeRDpFOmnCdG/+76sTHimebyzufO3HSN+B7LEz54XePuZP455KV3i
PTIUo/cT8y+GcQdc89EM4Ojj/SPzOBdfisxUxREh1BEeHNZrsZkE9uQ=
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:16:50 2026 by rpki-client