Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3234352e3138332e302f32342d3332203d3e203531313637.roa
File: 3138352e3234352e3138332e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: Cyf5MWjJz8n9xGhXCUKDXyL2+naxhb4Ixh5jvxXgLvA=
Subject key identifier: B4:6C:F9:05:C0:91:D9:5E:A4:93:E4:8B:A4:54:2F:67:D1:FE:CA:3B
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4A190FD9A4D5CE25D7FD38FA4EA09E872E59398A
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3234352e3138332e302f32342d3332203d3e203531313637.roa
Signing time: Fri 24 Jul 2026 15:26:56 +0000
ROA not before: Fri 24 Jul 2026 15:21:56 +0000
ROA not after: Fri 23 Jul 2027 15:26:56 +0000
asID: 51167
IP address blocks: 185.245.183.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:19:0f:d9:a4:d5:ce:25:d7:fd:38:fa:4e:a0:9e:87:2e:59:39:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 24 15:21:56 2026 GMT
Not After : Jul 23 15:26:56 2027 GMT
Subject: CN=B46CF905C091D95EA493E48BA4542F67D1FECA3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b3:27:19:8a:3d:02:5a:a5:3f:74:05:e5:26:
61:53:24:98:e3:98:30:65:46:82:9a:cf:43:d9:3d:
e6:45:f3:7c:6a:01:03:35:5a:3f:b8:6d:10:9e:82:
49:f8:e7:7e:fc:a2:c7:30:cb:df:8f:a9:52:c4:b6:
5a:41:fb:d1:a1:dd:8d:57:34:ce:bd:64:12:d4:db:
22:a8:f5:ab:0f:7f:42:f7:93:52:47:77:d7:87:00:
90:fe:40:b3:31:99:81:7c:99:68:32:8e:22:b6:54:
01:60:62:28:20:98:f3:ea:da:5b:fc:e9:1a:f6:e2:
e9:d0:61:04:11:37:30:4b:eb:10:93:3a:89:fa:e6:
22:6b:38:ae:9b:4e:87:80:c7:55:7a:6b:42:41:5c:
b7:2d:2f:3f:ef:c0:17:14:63:fa:08:6a:1d:6c:83:
85:b9:a6:71:44:51:02:9a:d4:53:57:d9:1d:20:d3:
3a:18:1e:9a:b1:aa:fd:da:5a:c8:f6:ae:82:c3:b7:
f9:70:53:8b:cf:7e:d6:11:5f:ca:b0:ee:92:7e:a3:
c3:4f:9c:dd:73:23:4e:16:e0:af:ba:cd:8d:76:6e:
29:10:67:3c:c7:9e:a6:2b:3f:9e:28:07:14:55:8d:
d6:19:a3:de:b6:56:48:b0:87:42:d3:d8:cd:3a:4c:
cd:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:6C:F9:05:C0:91:D9:5E:A4:93:E4:8B:A4:54:2F:67:D1:FE:CA:3B
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3234352e3138332e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.183.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:86:12:2e:80:0e:f5:ec:fb:c4:b1:65:05:9c:d2:45:2e:8e:
99:76:6a:32:38:fc:dd:ca:c8:a5:73:a8:40:f6:1c:7e:42:46:
2d:7c:e5:31:e5:ec:70:0b:d0:a5:87:f8:28:83:08:42:80:5f:
34:0b:c5:1e:30:9c:91:91:62:e8:30:f9:87:db:c6:43:bf:8a:
d0:18:88:4b:7d:1a:40:e7:6c:c4:28:e8:7e:00:86:e1:13:38:
34:bf:58:25:3e:05:d6:37:d2:4b:3b:4e:b2:a3:fc:e0:db:b0:
ce:57:5b:06:58:12:eb:39:12:66:83:d7:8e:39:b1:aa:bf:8d:
47:96:06:6d:0a:73:f5:c7:1a:33:be:52:41:f7:42:4f:7c:5d:
a7:8a:f7:bd:2f:87:19:0e:29:d3:47:0f:df:35:bc:0f:99:b5:
3b:b8:0f:79:d4:09:23:2f:81:aa:02:b0:97:01:34:ea:ce:2b:
bb:cb:e6:d6:2b:3e:59:0d:f7:d9:b9:3e:96:61:65:ca:65:49:
16:58:61:d2:bb:92:fa:f2:8c:bc:59:55:9d:32:b6:b3:c4:47:
81:c5:3d:34:bf:c5:89:6c:38:11:c8:03:b8:b9:32:10:05:d4:
a2:ab:71:ec:e9:89:64:49:aa:3f:c2:b7:27:2e:c8:26:c2:b7:
56:62:ea:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:22:36 2026 by rpki-client