Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3136342e35332e302f32342d3234203d3e20383334.roa
File: 3138352e3136342e35332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: pgga7yml8B0s0mzP0hziYKNbmbLG/csE7sxyvoLqDhE=
Subject key identifier: 67:BA:82:9D:F5:E9:03:74:A0:4B:AC:21:98:83:45:62:C8:2B:B2:47
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 60800BCF9C6FE3D6D2B9CB580CB7BFAC9C1E9ACF
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3136342e35332e302f32342d3234203d3e20383334.roa
Signing time: Mon 15 Jun 2026 07:02:07 +0000
ROA not before: Mon 15 Jun 2026 06:57:07 +0000
ROA not after: Mon 14 Jun 2027 07:02:07 +0000
asID: 834
IP address blocks: 185.164.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:80:0b:cf:9c:6f:e3:d6:d2:b9:cb:58:0c:b7:bf:ac:9c:1e:9a:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 15 06:57:07 2026 GMT
Not After : Jun 14 07:02:07 2027 GMT
Subject: CN=67BA829DF5E90374A04BAC2198834562C82BB247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:35:85:a0:9d:27:16:91:84:05:84:04:22:c3:
15:6d:94:9b:23:78:e8:2e:71:0c:3b:07:ab:22:7c:
e1:4f:f1:e7:30:3d:79:db:15:aa:7c:16:01:f8:b7:
a6:24:fb:a4:ba:9a:d3:94:e0:63:fa:f9:56:ce:21:
50:e3:d3:fb:b9:e1:88:30:84:35:25:2d:87:f7:f4:
38:93:10:2d:49:31:e0:ea:00:9e:7b:91:ba:3d:d8:
79:aa:ac:51:9d:77:56:fe:51:d2:5d:3a:a8:60:6a:
de:4f:c6:db:96:58:70:34:d5:20:b1:0d:1c:f9:6b:
b0:43:1b:09:f1:6a:42:47:21:cd:72:26:01:ee:2e:
aa:b5:53:6f:d0:ce:fe:8f:73:2a:55:d4:d7:bd:42:
08:79:5e:45:25:87:0a:01:67:5e:6a:e4:e9:f0:d1:
18:37:cf:76:71:26:74:77:e7:95:fa:61:f5:97:06:
35:18:1d:cf:83:03:76:37:f7:20:6a:92:37:11:00:
50:1b:76:28:35:93:f1:9d:f6:82:41:ec:85:cc:be:
b2:fd:c5:6c:9a:b0:b0:17:e0:28:b7:2e:eb:05:25:
e0:8c:b8:2d:67:82:80:1e:e7:ff:13:d3:06:90:bd:
cc:c9:7f:b2:fb:8b:fb:38:6a:a3:0a:c6:18:e1:73:
df:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:BA:82:9D:F5:E9:03:74:A0:4B:AC:21:98:83:45:62:C8:2B:B2:47
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3136342e35332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.53.0/24
Signature Algorithm: sha256WithRSAEncryption
42:86:49:ad:f6:2d:7e:cb:95:76:4f:30:8c:aa:41:13:ba:b6:
fe:2b:97:9b:08:ba:9e:37:c6:f8:92:b4:18:84:a8:f2:e3:21:
2a:16:ba:14:88:ef:8c:39:cc:62:88:2f:5a:41:03:8c:f8:57:
ff:4a:54:95:b2:ed:13:19:87:3e:40:01:e9:85:e1:37:e7:96:
0c:71:14:f4:62:1f:35:60:f7:81:a5:09:66:b7:1b:cf:a8:43:
72:c2:41:da:c9:57:c1:c7:a7:d5:56:5d:03:f0:4d:4f:1f:b2:
9a:6c:6e:89:c0:28:d1:88:8a:63:f8:f5:2c:f3:a9:4e:61:fc:
23:6b:83:9b:8f:b0:19:70:ce:8e:4c:44:03:e2:d3:72:3b:fa:
83:b9:16:5f:61:42:7d:65:e2:a4:9b:36:c6:46:a5:85:48:57:
b6:6b:b8:83:62:2e:25:53:00:ae:c0:14:c1:5a:6e:6a:e3:74:
8f:67:8e:67:bd:26:d4:3d:21:dd:b1:55:7b:96:0b:63:f3:b8:
7b:c9:d2:94:1e:b0:b5:41:50:49:0c:5a:b6:3b:5a:c1:7c:86:
0f:4e:28:44:9a:58:94:ed:7e:04:91:e7:fc:ce:01:4c:12:30:
92:65:9b:24:ee:33:ec:62:6e:27:40:ef:0d:86:8c:5d:13:66:
37:25:05:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:01:19 2026 by rpki-client