Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3136342e35352e302f32342d3234203d3e20323134393134.roa
File: 3138352e3136342e35352e302f32342d3234203d3e20323134393134.roa (raw, json)
Hash identifier: XEqGBaSicqRMEE9L/lKMOIM2n7q3XE5RW0kIqiBIc+A=
Subject key identifier: 8F:96:9A:B0:CB:35:28:FC:5C:62:11:BD:89:9C:1E:66:54:0C:0B:D0
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 17699AF223A0D559BEC71C3779A548A40BF053E0
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3136342e35352e302f32342d3234203d3e20323134393134.roa
Signing time: Tue 21 Apr 2026 07:23:49 +0000
ROA not before: Tue 21 Apr 2026 07:18:49 +0000
ROA not after: Tue 20 Apr 2027 07:23:49 +0000
asID: 214914
IP address blocks: 185.164.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:69:9a:f2:23:a0:d5:59:be:c7:1c:37:79:a5:48:a4:0b:f0:53:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 21 07:18:49 2026 GMT
Not After : Apr 20 07:23:49 2027 GMT
Subject: CN=8F969AB0CB3528FC5C6211BD899C1E66540C0BD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:aa:b5:22:fc:ad:02:c6:c7:d1:53:d2:11:3d:
06:af:05:7d:c4:7d:8f:8c:76:c6:28:57:bb:cd:0e:
6d:2b:48:19:b9:e7:de:29:e3:6c:6f:5c:69:3f:bb:
c3:ce:09:d2:ee:be:93:90:b0:3c:b7:b1:af:f1:b8:
0c:48:3d:50:ca:69:d6:a9:80:56:07:0b:61:09:b0:
3d:74:f6:16:7e:92:7d:92:b5:3a:6c:fe:f5:9e:fc:
b1:ae:dc:08:fa:12:78:cf:9b:5b:82:0b:f3:68:24:
3d:1c:b5:af:bf:72:68:ed:b6:e3:e8:7a:6e:c0:44:
2c:7d:aa:2d:4d:db:86:4b:b8:37:10:0b:74:f6:65:
d2:bd:c3:d7:75:82:ae:99:4b:6c:08:97:d5:03:c8:
e3:94:65:57:d9:7a:45:aa:b1:b6:8b:40:7a:ed:2e:
e5:0c:db:9a:82:1a:b6:54:16:9a:7f:83:15:ea:f9:
19:6c:aa:07:7d:be:f8:6b:f0:ce:f4:2f:3c:5f:75:
b9:20:ab:4d:fd:12:99:44:6e:81:a3:2f:dd:57:28:
91:e8:83:de:4e:b8:8e:32:82:c1:27:52:99:96:41:
34:f7:4c:8b:3b:c7:85:ce:4d:17:73:ff:11:fe:3a:
14:94:37:64:b9:af:70:fd:52:8a:ae:e6:29:13:6e:
c4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:96:9A:B0:CB:35:28:FC:5C:62:11:BD:89:9C:1E:66:54:0C:0B:D0
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3136342e35352e302f32342d3234203d3e20323134393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.55.0/24
Signature Algorithm: sha256WithRSAEncryption
58:fc:e6:87:df:42:08:bb:02:bf:bf:68:f6:f6:e3:dc:60:db:
d6:d2:d0:33:e9:e3:e0:3e:99:a3:f2:57:ff:45:60:c4:76:1f:
74:b9:a4:b7:01:47:4f:62:f4:b1:f5:ea:16:e1:f4:6e:c2:7a:
0b:37:30:f2:40:ff:4f:61:4a:cc:b8:1c:03:fc:6b:a2:f7:78:
04:20:fe:09:41:8c:9c:b5:79:7f:82:d3:d1:33:97:20:61:c7:
a9:67:1a:63:f9:fe:89:38:7e:bf:35:a0:5d:23:b8:98:f0:25:
a1:8a:14:b5:0e:0a:ac:11:3a:5a:38:fa:3d:03:41:20:bf:9b:
93:97:94:26:fe:b0:c0:02:0c:46:39:01:ae:ff:b8:72:d2:79:
70:3f:8a:e5:27:2e:89:a6:71:f2:70:02:05:2b:c3:40:e4:4f:
66:d7:1e:fa:74:54:92:30:03:e9:80:ec:7f:6e:0a:82:6d:9b:
fb:1a:eb:a5:e0:fb:aa:81:a3:11:4f:a3:9e:23:4b:40:b4:d9:
1e:76:44:6b:32:26:2b:97:b0:99:94:cf:d7:5a:61:0d:58:aa:
fb:18:69:57:3e:e3:eb:42:4a:0e:a2:e2:b3:b5:64:94:2a:17:
bb:8c:72:e1:54:e6:5e:5f:00:28:af:2e:f0:ec:5d:3d:e1:b1:
64:6e:cc:63
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUF2ma8iOg1Vm+xxw3eaVIpAvwU+AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA0MjEwNzE4NDlaFw0yNzA0MjAwNzIzNDlaMDMxMTAvBgNV
BAMTKDhGOTY5QUIwQ0IzNTI4RkM1QzYyMTFCRDg5OUMxRTY2NTQwQzBCRDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiqrUi/K0CxsfRU9IRPQavBX3E
fY+MdsYoV7vNDm0rSBm5594p42xvXGk/u8POCdLuvpOQsDy3sa/xuAxIPVDKadap
gFYHC2EJsD109hZ+kn2StTps/vWe/LGu3Aj6EnjPm1uCC/NoJD0cta+/cmjttuPo
em7ARCx9qi1N24ZLuDcQC3T2ZdK9w9d1gq6ZS2wIl9UDyOOUZVfZekWqsbaLQHrt
LuUM25qCGrZUFpp/gxXq+Rlsqgd9vvhr8M70Lzxfdbkgq039EplEboGjL91XKJHo
g95OuI4ygsEnUpmWQTT3TIs7x4XOTRdz/xH+OhSUN2S5r3D9Uoqu5ikTbsQvAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUj5aasMs1KPxcYhG9iZweZlQMC9AwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMTM2MzQyZTM1
MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzQzOTMxMzQucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAC5pDcwDQYJKoZIhvcNAQELBQADggEBAFj85offQgi7Ar+/aPb249xg29bS0DPp
4+A+maPyV/9FYMR2H3S5pLcBR09i9LH16hbh9G7Cegs3MPJA/09hSsy4HAP8a6L3
eAQg/glBjJy1eX+C09EzlyBhx6lnGmP5/ok4fr81oF0juJjwJaGKFLUOCqwROlo4
+j0DQSC/m5OXlCb+sMACDEY5Aa7/uHLSeXA/iuUnLommcfJwAgUrw0DkT2bXHvp0
VJIwA+mA7H9uCoJtm/sa66Xg+6qBoxFPo54jS0C02R52RGsyJiuXsJmUz9daYQ1Y
qvsYaVc+4+tCSg6i4rO1ZJQqF7uMcuFU5l5fACivLvDsXT3hsWRuzGM=
-----END CERTIFICATE-----
Generated at Wed May 13 10:42:39 2026 by rpki-client