Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3136342e35332e302f32342d3234203d3e20313337343130.roa
File: 3138352e3136342e35332e302f32342d3234203d3e20313337343130.roa (raw, json)
Hash identifier: 7dfXhesyUuKT8clop8AAyjBE1VC0N24jZzmwjSdCxq8=
Subject key identifier: 27:AB:54:3B:3A:D6:AA:22:78:09:76:90:FF:77:7D:F2:B1:0A:2C:5F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3D1E8ECFEB4AF4DD2387E8E2183BFEB73FA63973
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3136342e35332e302f32342d3234203d3e20313337343130.roa
Signing time: Thu 06 Aug 2026 11:36:01 +0000
ROA not before: Thu 06 Aug 2026 11:31:01 +0000
ROA not after: Thu 05 Aug 2027 11:36:01 +0000
asID: 137410
IP address blocks: 185.164.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 16:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:1e:8e:cf:eb:4a:f4:dd:23:87:e8:e2:18:3b:fe:b7:3f:a6:39:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 6 11:31:01 2026 GMT
Not After : Aug 5 11:36:01 2027 GMT
Subject: CN=27AB543B3AD6AA2278097690FF777DF2B10A2C5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:43:96:64:3b:87:8e:9c:26:9e:0d:7a:b2:48:
b6:ec:f7:45:ca:92:87:27:1e:1f:05:12:8e:f6:09:
d9:27:ef:48:83:7d:86:89:cf:38:dc:39:d9:9b:e7:
ce:10:ca:df:26:34:72:f2:c2:35:7a:29:7c:2b:f6:
46:34:37:b0:af:b8:32:bc:b8:45:e9:94:63:aa:3e:
18:82:02:bc:fb:15:2b:a8:6f:6f:a4:85:f5:d8:71:
07:83:2d:31:2b:1b:f2:dc:12:a6:d7:0c:bf:e6:c1:
5e:20:93:8b:52:c3:1d:eb:1f:69:61:c6:42:01:3d:
87:1f:f9:99:88:6c:30:38:af:de:e6:4b:05:b8:f0:
9f:e1:59:79:9b:36:d2:3e:6c:eb:fa:88:3c:9a:3d:
86:ec:d6:4d:14:c6:9c:a6:00:20:02:4f:bb:c4:51:
db:ab:18:8a:a4:3c:bb:b8:7d:9d:7e:80:8c:f1:95:
db:b2:01:d4:f3:e1:60:06:ad:ac:ff:02:1a:44:e6:
d7:00:7f:98:8b:31:fe:ba:0f:3c:1f:e8:5b:b9:0f:
e2:b8:55:81:f4:ef:5b:b3:4c:20:02:3a:bd:53:bc:
5c:b3:71:9c:fd:72:38:53:57:c6:a4:e6:b2:f6:50:
67:5d:76:8c:3b:05:63:bc:cb:16:64:ad:a5:be:7c:
16:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:AB:54:3B:3A:D6:AA:22:78:09:76:90:FF:77:7D:F2:B1:0A:2C:5F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3136342e35332e302f32342d3234203d3e20313337343130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.53.0/24
Signature Algorithm: sha256WithRSAEncryption
44:1a:b3:32:6c:da:cc:ad:d0:ec:e5:c0:02:14:88:72:6f:57:
a0:24:b0:b5:f0:f4:89:d1:6e:2b:24:76:ca:eb:64:de:9c:f9:
7c:94:50:aa:f1:16:72:52:ca:aa:27:a6:d6:ee:7c:9d:5e:13:
72:11:f9:c7:6d:84:10:b7:24:33:c8:b1:ee:b5:51:0f:b7:cc:
6a:a5:d4:73:28:e8:4b:7a:75:2d:b1:94:d2:23:d1:78:f7:9f:
d1:42:36:9b:c7:84:d7:18:76:f5:38:36:76:bc:e3:90:42:d9:
c7:c6:9c:66:3c:a7:eb:a2:bf:6a:ac:60:b4:81:f7:1a:f2:72:
e5:8d:ca:63:23:35:8b:48:91:98:1e:92:9c:b0:83:97:52:9e:
d0:9c:10:3d:29:75:f4:bd:ac:a5:c5:1b:38:2b:16:b7:22:c6:
91:4a:5d:e1:51:e3:04:6d:3b:93:88:e4:f0:72:9d:b6:24:a0:
f2:7d:f3:67:ee:51:ab:82:76:74:16:88:41:f1:8e:98:b1:a3:
7c:71:b6:27:0e:52:c1:87:37:69:42:3a:81:51:fc:36:25:47:
a2:0d:56:6c:9d:9b:2c:d4:cb:92:ef:40:d0:74:85:86:4a:e5:
e6:68:ac:0b:46:8e:e0:68:56:ac:cb:b0:5d:3f:35:46:91:73:
fc:a5:57:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:55:41 2026 by rpki-client