Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3133352e3133362e302f32342d3234203d3e20313336373837.roa
File: 3138352e3133352e3133362e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: eBmqddC6wBeRt4dZlEr98fpktQzlJt8a3BLkcHWJDXs=
Subject key identifier: 5B:80:0F:DA:D2:49:83:E5:2F:8B:2B:5E:57:3B:F7:AE:BE:13:BC:9B
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6E0FC36BC9AB1601303BA47A6F31D6022F510EC4
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3133352e3133362e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 30 Aug 2026 21:28:16 +0000
ROA not before: Sun 30 Aug 2026 21:23:16 +0000
ROA not after: Sun 29 Aug 2027 21:28:16 +0000
asID: 136787
IP address blocks: 185.135.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:0f:c3:6b:c9:ab:16:01:30:3b:a4:7a:6f:31:d6:02:2f:51:0e:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 30 21:23:16 2026 GMT
Not After : Aug 29 21:28:16 2027 GMT
Subject: CN=5B800FDAD24983E52F8B2B5E573BF7AEBE13BC9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:31:be:8e:44:43:d0:4c:a2:cf:a8:d7:f1:e3:
d0:ce:ae:10:c2:96:8c:88:16:7b:f2:f1:3a:b4:fa:
12:50:7c:8b:72:8e:33:c6:22:e0:7b:82:32:2d:fe:
06:0a:80:2f:ad:88:04:90:d4:40:f3:d3:c9:32:1a:
ae:6f:0e:00:e2:3e:df:55:7d:df:29:5e:97:02:3a:
82:40:fa:ad:e0:6d:a2:6e:a9:2b:0a:78:91:7b:10:
dc:3a:d6:57:30:4d:8a:2f:e2:f7:e5:6f:de:d9:b0:
3f:89:5b:81:e6:af:b6:92:f8:15:1b:c7:bb:24:fe:
00:af:71:ff:d7:f1:e4:02:4d:7b:d8:d2:44:31:91:
53:5c:08:f7:7a:93:cc:6c:c7:d5:5e:e3:15:4e:ab:
f0:8e:1c:d3:92:c0:fc:4c:05:d5:c4:5f:b8:8b:08:
ac:89:03:df:65:60:10:40:65:69:5d:e1:59:30:4c:
a6:12:c9:9c:4a:4a:2c:f1:4a:04:c5:e5:7c:40:5f:
e1:6c:c9:e6:7b:96:67:93:65:0c:99:da:4e:2d:33:
87:99:7d:3c:0a:9e:93:6e:57:22:d0:a5:c2:74:8b:
0d:81:e1:1b:b3:53:60:03:4b:c0:6c:a7:ee:5a:05:
da:cc:a6:df:7c:1f:69:7a:93:26:33:bb:26:f7:46:
4f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:80:0F:DA:D2:49:83:E5:2F:8B:2B:5E:57:3B:F7:AE:BE:13:BC:9B
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3133352e3133362e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.136.0/24
Signature Algorithm: sha256WithRSAEncryption
07:83:4f:62:b4:b5:8c:c1:d1:e7:b3:6f:e1:82:1b:7c:00:53:
36:8b:1c:b5:09:03:e2:3e:10:67:88:05:52:f0:00:62:39:83:
84:ec:e6:67:4c:98:ac:9e:0a:4c:45:c8:de:27:71:55:4a:31:
1c:8e:61:fc:32:df:39:00:4b:7b:b7:c2:37:5c:24:25:56:d6:
85:ec:cb:e7:4c:37:a3:c7:8e:91:3f:20:aa:6f:52:d1:b7:99:
b7:59:f6:81:f4:7d:08:7d:88:44:01:96:59:20:cc:c6:b4:4c:
1d:3d:db:83:41:8d:b5:64:2b:98:2e:14:d2:ce:df:26:c3:b7:
0d:a9:ab:36:5f:08:ce:07:26:59:38:e9:b7:2b:fc:99:b7:39:
78:e6:ab:96:8d:91:2a:e1:cc:dd:9e:d5:19:b7:17:16:7a:6b:
dc:fd:dc:c8:e3:95:c0:ff:e8:f8:e7:80:d2:6c:98:81:76:00:
6f:17:f5:21:74:db:b5:19:3d:38:4d:97:4e:36:1e:23:85:8f:
86:9c:c1:6b:29:53:ba:40:30:1a:ef:77:e7:3d:07:f8:86:d1:
d3:15:16:85:d1:14:e3:85:ae:86:76:14:56:81:fd:04:9b:11:
6a:61:31:89:20:98:30:42:67:f1:42:31:0e:bf:90:07:f6:59:
e5:01:b0:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:13:00 2026 by rpki-client