Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3235302e33382e302f32342d3332203d3e20313431393935.roa
File: 3138352e3235302e33382e302f32342d3332203d3e20313431393935.roa (raw, json)
Hash identifier: uDrlCLGSbt5POWc7BDIB75G/qZ1/W3dCol1jKxGy2jk=
Subject key identifier: 37:20:24:70:BB:01:A0:EC:DA:EC:4E:28:80:1B:AF:25:4C:08:B5:93
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 442B5D50569C3BE1AFEB7B30B5E1ABDBD08A8CB6
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3235302e33382e302f32342d3332203d3e20313431393935.roa
Signing time: Fri 24 Jul 2026 15:26:38 +0000
ROA not before: Fri 24 Jul 2026 15:21:38 +0000
ROA not after: Fri 23 Jul 2027 15:26:38 +0000
asID: 141995
IP address blocks: 185.250.38.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:38:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:2b:5d:50:56:9c:3b:e1:af:eb:7b:30:b5:e1:ab:db:d0:8a:8c:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 24 15:21:38 2026 GMT
Not After : Jul 23 15:26:38 2027 GMT
Subject: CN=37202470BB01A0ECDAEC4E28801BAF254C08B593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:be:cd:d2:e3:ad:b3:e2:e7:7e:f6:06:52:c1:
d2:cc:28:0e:31:96:f5:59:99:62:83:6d:e1:ed:62:
12:14:a8:3b:f1:6e:5c:7d:63:17:b6:5e:67:21:90:
ec:ec:ea:b6:c1:c4:28:ec:50:32:9d:20:6d:7b:da:
3d:cd:38:05:e5:f8:50:65:c5:6d:98:69:fe:4d:bc:
70:65:01:72:d1:84:34:1c:df:83:4e:d4:81:ce:0e:
29:98:13:9c:05:a9:ea:1b:d0:cb:77:c8:e2:21:04:
fe:f7:1b:71:98:01:9b:d8:83:90:ef:f6:de:7c:92:
35:e1:0f:72:af:82:62:1d:06:b5:83:cf:0c:af:4f:
71:0d:2e:5d:60:9a:e7:d5:96:8e:f8:fa:fa:84:5c:
49:76:e4:83:61:b5:28:52:3c:3e:df:e2:18:e6:9b:
21:6d:64:e4:ed:9b:05:6c:ce:df:d1:8f:e4:51:71:
fc:cd:06:ee:37:dd:4f:30:8d:39:66:ab:8e:74:c1:
50:c7:7c:c9:ed:cf:ec:57:13:18:24:2d:6e:9c:be:
fe:86:e7:ab:fb:d3:ac:07:50:59:e3:52:2f:19:5f:
04:8d:43:54:26:06:aa:7a:a4:81:c7:3e:f0:49:d9:
a2:c7:08:c9:6b:2d:f7:1c:17:7c:9e:89:90:f7:16:
35:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:20:24:70:BB:01:A0:EC:DA:EC:4E:28:80:1B:AF:25:4C:08:B5:93
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3235302e33382e302f32342d3332203d3e20313431393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.38.0/24
Signature Algorithm: sha256WithRSAEncryption
17:ca:e5:ba:9f:2b:5a:bd:11:23:f0:8f:ab:ad:67:15:a0:a9:
a2:d7:e9:b1:31:e2:89:dd:7b:a5:40:af:0a:51:a0:52:19:22:
17:d1:81:e6:d0:e2:43:a5:f5:0d:a2:51:31:2f:3f:c6:fb:a2:
e7:28:49:8d:c6:d6:18:20:69:04:5d:e1:18:ef:1b:76:10:a6:
8e:f3:fe:bb:17:41:b5:08:68:6a:81:cf:7f:59:6c:5f:9c:7f:
b2:5a:87:1e:90:f8:b2:2a:c9:27:c6:1b:ad:65:8e:4c:8f:7d:
ff:74:99:32:6c:bd:84:93:b6:3c:49:ec:80:81:c2:bb:6b:25:
38:30:fb:56:d7:e7:f1:aa:23:fa:b4:11:a4:06:b9:3c:aa:dd:
8b:82:a2:f1:36:bc:6e:a4:f5:7a:df:f8:29:a4:69:ee:7d:b3:
f6:41:c0:8c:81:0b:34:69:35:b9:af:c6:de:e7:14:bf:31:56:
17:ee:ad:f3:03:fd:f4:1f:b4:65:d0:0c:9f:07:8d:03:0b:f1:
df:5b:34:00:7d:e9:4d:cc:df:98:db:e4:03:41:2b:9d:eb:f2:
58:0f:f7:48:d9:2e:a4:04:69:f8:5b:80:60:0b:e8:fa:d1:ae:
1e:76:1a:64:7c:c5:f2:08:fb:f2:a5:50:9c:53:59:19:18:4c:
f4:eb:14:5a
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIURCtdUFacO+Gv63swteGr29CKjLYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA3MjQxNTIxMzhaFw0yNzA3MjMxNTI2MzhaMDMxMTAvBgNV
BAMTKDM3MjAyNDcwQkIwMUEwRUNEQUVDNEUyODgwMUJBRjI1NEMwOEI1OTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDevs3S462z4ud+9gZSwdLMKA4x
lvVZmWKDbeHtYhIUqDvxblx9Yxe2XmchkOzs6rbBxCjsUDKdIG172j3NOAXl+FBl
xW2Yaf5NvHBlAXLRhDQc34NO1IHODimYE5wFqeob0Mt3yOIhBP73G3GYAZvYg5Dv
9t58kjXhD3KvgmIdBrWDzwyvT3ENLl1gmufVlo74+vqEXEl25INhtShSPD7f4hjm
myFtZOTtmwVszt/Rj+RRcfzNBu433U8wjTlmq450wVDHfMntz+xXExgkLW6cvv6G
56v706wHUFnjUi8ZXwSNQ1QmBqp6pIHHPvBJ2aLHCMlrLfccF3yeiZD3FjWVAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUNyAkcLsBoOza7E4ogBuvJUwItZMwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMjM1MzAyZTMz
MzgyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzMTM0MzEzOTM5MzUucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAC5+iYwDQYJKoZIhvcNAQELBQADggEBABfK5bqfK1q9ESPwj6utZxWgqaLX6bEx
4onde6VArwpRoFIZIhfRgebQ4kOl9Q2iUTEvP8b7oucoSY3G1hggaQRd4RjvG3YQ
po7z/rsXQbUIaGqBz39ZbF+cf7Jahx6Q+LIqySfGG61ljkyPff90mTJsvYSTtjxJ
7ICBwrtrJTgw+1bX5/GqI/q0EaQGuTyq3YuCovE2vG6k9Xrf+Cmkae59s/ZBwIyB
CzRpNbmvxt7nFL8xVhfurfMD/fQftGXQDJ8HjQML8d9bNAB96U3M35jb5ANBK53r
8lgP90jZLqQEafhbgGAL6PrRrh52GmR8xfII+/KlUJxTWRkYTPTrFFo=
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:15:28 2026 by rpki-client