Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3136342e35332e302f32342d3234203d3e20313938383331.roa
File: 3138352e3136342e35332e302f32342d3234203d3e20313938383331.roa (raw, json)
Hash identifier: PLeU8mjTq9DeK5yxKXN9x9M/8YmdkCcu4r5RlUyHC94=
Subject key identifier: D8:2B:F0:31:20:97:18:5B:2C:79:AC:86:DD:F2:8C:9E:3F:26:05:51
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4B4DE41B350CDCF2DA2E8CACF0214B8D7F8BC81F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3136342e35332e302f32342d3234203d3e20313938383331.roa
Signing time: Wed 09 Sep 2026 18:19:37 +0000
ROA not before: Wed 09 Sep 2026 18:14:37 +0000
ROA not after: Wed 08 Sep 2027 18:19:37 +0000
asID: 198831
IP address blocks: 185.164.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Sep 2026 16:27:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:4d:e4:1b:35:0c:dc:f2:da:2e:8c:ac:f0:21:4b:8d:7f:8b:c8:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 9 18:14:37 2026 GMT
Not After : Sep 8 18:19:37 2027 GMT
Subject: CN=D82BF0312097185B2C79AC86DDF28C9E3F260551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5f:bf:da:d5:f3:23:e7:f8:01:9c:7f:75:43:
75:fa:6d:52:fd:a0:61:48:1b:d7:06:a7:65:fb:49:
42:d6:ad:6b:aa:6b:44:f9:b9:39:53:ee:7d:ef:55:
4b:cc:a7:e2:f9:b5:2a:88:23:e2:c2:ea:f4:c8:52:
da:92:8b:22:65:c2:84:25:aa:9a:70:f1:63:d3:4c:
22:12:56:01:3e:74:95:6b:31:d7:29:84:53:ac:7b:
cb:36:ab:38:c8:a2:22:10:7c:e7:8e:fb:c7:68:3d:
9e:6c:71:dd:ba:c5:0a:f2:9b:dc:85:9d:45:bb:c0:
3b:49:8f:62:f9:36:76:88:ba:14:74:85:30:24:a1:
43:e8:63:33:e7:dd:1f:d1:08:e1:57:2d:7a:e4:c0:
44:d3:d3:07:8c:fb:df:34:27:ba:93:45:dc:18:c8:
0c:d7:4d:cf:ac:f6:0a:83:4f:e1:e6:9f:4e:a0:e8:
5c:3e:85:c3:35:97:49:96:b1:76:70:55:c6:86:37:
d8:d8:ed:74:d8:7d:14:00:51:35:34:dc:8d:0b:f2:
5a:93:b9:bf:71:b1:73:ae:3b:da:97:55:bd:d1:25:
dd:dc:79:a6:fe:18:6f:62:29:d6:e6:0f:6d:78:df:
f3:02:90:84:89:5f:c7:f4:50:f8:27:64:32:19:e6:
c8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:2B:F0:31:20:97:18:5B:2C:79:AC:86:DD:F2:8C:9E:3F:26:05:51
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3136342e35332e302f32342d3234203d3e20313938383331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.53.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:59:fd:db:07:82:cc:b7:95:15:87:c4:c1:38:fa:c3:38:38:
c2:e9:a9:5f:20:50:ed:49:31:32:13:a5:83:ab:e7:7b:93:59:
80:d8:c7:c6:9e:8b:be:a0:7f:9f:a1:11:5f:f2:75:b6:cc:17:
28:c9:dd:b2:d3:bb:1c:fe:63:8a:98:24:38:fc:27:21:82:84:
40:d3:ea:7e:c9:92:e1:ba:b4:35:c1:98:94:13:28:bc:a2:24:
14:3f:b4:ec:e3:c8:6d:4b:cb:3d:2d:f9:fc:29:d1:b8:a5:69:
f9:3c:76:8e:3a:54:94:29:ff:92:6b:20:75:85:9e:a0:1a:15:
3d:5f:18:e5:e2:28:b8:62:38:6c:9d:45:9c:5b:ad:5f:90:90:
23:ec:0e:59:87:6e:11:e7:33:b3:33:bd:07:63:a0:65:47:4e:
b6:e1:17:ec:15:49:f1:bb:bc:de:9c:65:fd:4e:f4:b2:ee:ee:
e8:92:24:0a:d0:07:e7:7a:a1:91:5f:30:1c:1f:c6:6a:9f:6e:
1e:8d:30:cf:36:c4:43:c4:8a:af:b6:5d:ad:99:ca:62:7f:2e:
8a:ed:35:a0:0a:e2:45:cf:89:ce:91:eb:9a:1c:f1:54:6c:da:
76:d8:39:8d:97:51:ee:15:6e:b4:0f:34:03:7c:dc:b3:e5:f1:
2e:f5:ac:d7
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUS03kGzUM3PLaLoys8CFLjX+LyB8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA5MDkxODE0MzdaFw0yNzA5MDgxODE5MzdaMDMxMTAvBgNV
BAMTKEQ4MkJGMDMxMjA5NzE4NUIyQzc5QUM4NkRERjI4QzlFM0YyNjA1NTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWX7/a1fMj5/gBnH91Q3X6bVL9
oGFIG9cGp2X7SULWrWuqa0T5uTlT7n3vVUvMp+L5tSqII+LC6vTIUtqSiyJlwoQl
qppw8WPTTCISVgE+dJVrMdcphFOse8s2qzjIoiIQfOeO+8doPZ5scd26xQrym9yF
nUW7wDtJj2L5NnaIuhR0hTAkoUPoYzPn3R/RCOFXLXrkwETT0weM+980J7qTRdwY
yAzXTc+s9gqDT+Hmn06g6Fw+hcM1l0mWsXZwVcaGN9jY7XTYfRQAUTU03I0L8lqT
ub9xsXOuO9qXVb3RJd3ceab+GG9iKdbmD2143/MCkISJX8f0UPgnZDIZ5shLAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQU2CvwMSCXGFsseayG3fKMnj8mBVEwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMTM2MzQyZTM1
MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM5MzgzODMzMzEucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAC5pDUwDQYJKoZIhvcNAQELBQADggEBAI9Z/dsHgsy3lRWHxME4+sM4OMLpqV8g
UO1JMTITpYOr53uTWYDYx8aei76gf5+hEV/ydbbMFyjJ3bLTuxz+Y4qYJDj8JyGC
hEDT6n7JkuG6tDXBmJQTKLyiJBQ/tOzjyG1Lyz0t+fwp0bilafk8do46VJQp/5Jr
IHWFnqAaFT1fGOXiKLhiOGydRZxbrV+QkCPsDlmHbhHnM7MzvQdjoGVHTrbhF+wV
SfG7vN6cZf1O9LLu7uiSJArQB+d6oZFfMBwfxmqfbh6NMM82xEPEiq+2Xa2ZymJ/
LortNaAK4kXPic6R65oc8VRs2nbYOY2XUe4VbrQPNAN83LPl8S71rNc=
-----END CERTIFICATE-----
Generated at Thu Sep 17 03:03:25 2026 by rpki-client