Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3235302e33362e302f32332d3332203d3e203531313637.roa
File: 3138352e3235302e33362e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier: xQg9feBWhiGd2h1sHqjYROb4Msurbb2zYPx9N/QU6FA=
Subject key identifier: 1B:ED:86:D1:3D:23:B3:FD:CF:FC:F9:25:85:97:AD:E0:27:9D:D5:E6
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6CFC1D1933C10559AE4ECD4A4A40634530EBA8E0
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3235302e33362e302f32332d3332203d3e203531313637.roa
Signing time: Fri 24 Jul 2026 15:27:01 +0000
ROA not before: Fri 24 Jul 2026 15:22:01 +0000
ROA not after: Fri 23 Jul 2027 15:27:01 +0000
asID: 51167
IP address blocks: 185.250.36.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:12:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:fc:1d:19:33:c1:05:59:ae:4e:cd:4a:4a:40:63:45:30:eb:a8:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 24 15:22:01 2026 GMT
Not After : Jul 23 15:27:01 2027 GMT
Subject: CN=1BED86D13D23B3FDCFFCF9258597ADE0279DD5E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2d:54:18:99:bb:41:d8:c0:f7:2e:4a:98:87:
12:25:bb:39:80:15:b1:80:a8:ac:89:b5:fb:4e:be:
b8:88:8e:6b:c2:4c:94:8b:2c:fa:22:68:ee:c2:d7:
29:ad:e5:19:85:7d:6a:9e:25:3b:59:da:4b:b1:e8:
41:03:3e:d9:f7:24:f8:95:be:e9:47:03:1c:9a:b4:
6b:bb:05:4b:88:45:4a:b0:d8:52:b1:7f:fb:c8:aa:
74:e8:c1:69:d9:b6:82:ec:e0:44:ec:d1:c1:b2:29:
84:c6:95:57:55:d2:49:49:cc:77:35:f0:64:1d:f2:
72:31:09:18:3a:aa:5a:a2:f3:cf:cd:57:bf:aa:ea:
c0:db:bd:65:8c:b8:d4:a4:2f:55:62:24:9d:93:cc:
c9:ef:bb:b7:23:00:2a:df:66:e3:63:b1:23:da:5c:
91:92:46:1f:d5:a0:11:bc:62:94:c7:f9:82:47:dc:
17:4d:6d:29:d3:6b:9c:81:46:4b:eb:a9:45:0e:ae:
6f:bf:cf:29:1f:89:3e:9f:95:96:35:d5:a8:9c:27:
b3:ff:03:e4:3a:06:b4:22:50:fe:51:d7:0a:d8:fb:
62:30:ca:4f:a5:cd:fd:84:1c:ad:b9:69:eb:93:1c:
d6:8c:28:93:e6:f4:f2:23:52:08:4d:56:15:20:d6:
8e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:ED:86:D1:3D:23:B3:FD:CF:FC:F9:25:85:97:AD:E0:27:9D:D5:E6
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3235302e33362e302f32332d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.36.0/23
Signature Algorithm: sha256WithRSAEncryption
42:e8:68:d6:0a:50:72:f6:65:c4:89:53:94:18:58:eb:be:3c:
cc:b7:36:60:db:66:11:63:bb:8f:14:07:15:45:5c:78:ed:f5:
a1:7a:fd:56:59:42:45:55:06:93:29:0d:3b:78:ef:50:cc:98:
fb:76:ee:bf:65:68:a6:a7:13:14:d5:8b:ec:be:b3:f8:c5:5e:
3f:e5:e7:81:02:b2:32:06:18:6a:54:84:3f:31:35:7c:b6:9a:
7b:0c:0e:3a:3a:49:f6:51:f8:55:65:cb:69:b9:9f:78:b9:b7:
dc:03:38:28:ce:ba:13:fe:2d:89:6a:30:2f:20:a5:3f:81:cd:
8a:59:fb:4b:6b:85:6c:6d:b0:af:74:68:6e:a3:58:46:93:02:
ee:00:93:01:bb:c7:c8:a4:73:23:0c:70:f3:5b:47:0c:51:76:
dc:d1:e5:0e:bb:4c:e6:42:e4:fd:d1:b7:82:e7:8b:47:85:86:
19:72:d8:d7:00:48:7a:4f:2b:8b:0e:0a:ee:e0:26:22:21:5c:
ab:f4:06:b3:a1:f4:7d:1f:66:ec:c1:e1:37:e4:c3:74:48:dc:
5e:73:0d:87:72:02:70:7f:86:05:b4:d6:a9:59:5b:f6:36:bb:
16:a4:b5:92:e8:6e:40:9c:a0:be:9a:21:15:f6:ab:14:fa:85:
85:e0:5d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:36:20 2026 by rpki-client