Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3234352e3138322e302f32342d3332203d3e203531313637.roa
File: 3138352e3234352e3138322e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: tq44mzMFS+/qru8fxPlQzf/nrddUPBYnKKQotzwYkjg=
Subject key identifier: 92:8D:72:A3:75:62:24:E8:67:21:DF:4D:8D:22:4B:DD:96:9D:71:76
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 29D3FE9732E982AC1C6B5118145AE8CD755C1940
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3234352e3138322e302f32342d3332203d3e203531313637.roa
Signing time: Fri 24 Jul 2026 15:26:39 +0000
ROA not before: Fri 24 Jul 2026 15:21:39 +0000
ROA not after: Fri 23 Jul 2027 15:26:39 +0000
asID: 51167
IP address blocks: 185.245.182.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:d3:fe:97:32:e9:82:ac:1c:6b:51:18:14:5a:e8:cd:75:5c:19:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 24 15:21:39 2026 GMT
Not After : Jul 23 15:26:39 2027 GMT
Subject: CN=928D72A3756224E86721DF4D8D224BDD969D7176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6f:1d:99:30:e6:90:3f:b3:de:55:0c:9a:e8:
9f:16:d5:a0:9d:95:79:c8:fd:20:f0:cb:8d:35:f7:
2f:24:bc:b7:c8:53:ad:29:89:8c:ee:73:08:af:ca:
f9:ee:78:fc:80:75:41:d1:7d:73:b0:b0:76:9e:2f:
37:e8:4e:fc:b1:f9:cd:44:92:a4:ab:2b:bb:10:6b:
4b:01:3b:57:ac:c0:ab:a2:bf:fc:63:ea:7e:ea:76:
fd:16:a6:a8:73:bf:48:03:15:08:0a:d1:bd:69:6b:
bd:d0:7f:8f:d7:a9:a1:a0:af:13:d7:45:c5:bd:bf:
21:66:b8:f4:1e:95:92:39:c1:cb:fa:83:b2:d8:16:
05:36:49:bb:41:66:f6:67:4e:af:e6:4a:b6:48:17:
56:ab:cd:e0:60:53:42:90:ca:1d:68:92:57:18:4f:
31:ec:fe:39:2f:99:3e:6f:b9:e0:a3:35:f4:42:36:
f5:91:fe:28:ad:0f:58:fd:45:01:a2:4a:0b:e7:92:
66:1c:6e:ba:e8:82:d5:a2:56:1a:ac:9e:57:3f:4b:
db:67:0b:a2:6b:4b:f9:b8:a9:20:37:b5:16:c7:e8:
01:e9:cb:75:f4:3a:58:9b:08:bd:8b:9b:c7:b1:bc:
7f:0c:24:ed:bb:90:e1:89:f7:cc:4a:e6:e9:a7:b2:
d9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:8D:72:A3:75:62:24:E8:67:21:DF:4D:8D:22:4B:DD:96:9D:71:76
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3234352e3138322e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.182.0/24
Signature Algorithm: sha256WithRSAEncryption
46:3c:5c:c1:9a:aa:3b:ed:95:99:4a:60:41:fb:76:24:40:67:
08:15:a5:ea:9a:f1:40:35:9c:89:e5:fe:2f:2c:14:33:4d:4a:
da:18:52:07:b7:8f:78:f1:b4:91:35:30:7c:d6:fe:58:5b:30:
16:c0:8d:df:2c:b4:88:1e:c9:56:d4:57:5d:78:94:8b:9f:10:
c4:3b:44:78:11:7b:25:d4:77:51:a1:78:9c:8d:4b:74:21:5e:
76:79:fd:79:1d:47:a9:01:27:1e:72:51:8a:81:9b:0b:17:83:
3c:9d:7b:ab:6d:fa:ad:4b:fe:46:08:1c:34:2f:b9:3e:61:b3:
d4:aa:68:86:b0:1d:9f:d4:f9:83:ab:57:ec:50:6c:3c:79:a0:
03:96:46:d7:3f:10:03:f4:6a:11:16:20:f8:bc:19:fd:13:6f:
23:d3:98:6b:5f:d8:89:74:27:2c:c9:25:35:55:38:0e:32:0b:
97:2f:d1:d0:a5:ce:86:7b:94:1d:a9:9d:27:d9:98:4a:fd:eb:
5d:76:5c:04:ce:96:9f:8e:5e:05:48:a4:6e:93:23:d4:57:ff:
d6:06:72:fe:64:cd:76:03:23:88:74:ad:b4:13:90:dc:88:0f:
26:3a:7e:9b:11:b8:cf:95:f5:e5:89:49:c5:f2:9e:b8:9a:f7:
bb:40:cc:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:32:28 2026 by rpki-client