Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3137372e3131382e302f32342d3234203d3e20313336373837.roa
File: 3138352e3137372e3131382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: iG7T9A+ioL+9NiBFcuUbtIzs/3AXftaHMAELP/QPpLg=
Subject key identifier: 37:41:06:7B:DD:07:6D:24:9F:A8:8E:1D:E8:DD:5C:61:DD:F4:AA:7F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 677574F0C5673B3996290F679238D404BDDDEF08
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3137372e3131382e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 30 Aug 2026 21:28:12 +0000
ROA not before: Sun 30 Aug 2026 21:23:12 +0000
ROA not after: Sun 29 Aug 2027 21:28:12 +0000
asID: 136787
IP address blocks: 185.177.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 17:17:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:75:74:f0:c5:67:3b:39:96:29:0f:67:92:38:d4:04:bd:dd:ef:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 30 21:23:12 2026 GMT
Not After : Aug 29 21:28:12 2027 GMT
Subject: CN=3741067BDD076D249FA88E1DE8DD5C61DDF4AA7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:50:0d:ef:33:80:b6:35:0a:c2:2c:c0:68:31:
d9:09:25:f6:0b:ce:e2:12:41:6d:65:9c:1e:7a:1d:
d6:fd:a5:98:39:4a:55:b8:70:13:d2:90:c2:3d:30:
71:b5:a7:bb:d4:ad:9b:d6:93:b3:16:3e:f1:36:5e:
22:48:55:fc:c6:b3:fe:24:ad:be:72:ab:24:01:6b:
00:41:ae:07:3d:f8:2d:fa:94:20:43:ed:9e:2a:3c:
81:84:0e:e0:a8:9b:6a:01:a4:13:2f:ab:5c:c2:c2:
84:b6:24:42:01:8f:23:9a:1e:d7:9c:ed:d6:f1:59:
30:77:df:72:16:97:a6:d7:f0:ac:eb:eb:1e:c8:48:
29:44:e4:0f:0e:a7:ae:3a:1b:b7:6f:5d:0e:e4:aa:
9f:3c:64:8b:61:38:8f:39:84:48:55:bf:9c:f2:f8:
04:ba:ea:fb:55:7b:51:cb:65:5d:51:89:ba:3e:f1:
c6:37:b7:e3:01:41:cb:4e:ef:b0:81:d7:f8:5a:0c:
79:0d:d3:cf:27:2b:ec:5d:4d:25:50:a4:c1:f0:1e:
c3:25:5c:be:7c:3c:fd:38:ea:06:7e:ed:a7:ab:54:
c2:ef:e6:92:f0:2d:9c:fc:a4:47:e7:d3:b2:aa:97:
f3:55:56:79:92:a4:39:6e:1c:0f:6a:46:e1:86:3d:
15:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:41:06:7B:DD:07:6D:24:9F:A8:8E:1D:E8:DD:5C:61:DD:F4:AA:7F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3137372e3131382e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.118.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:b3:2d:87:4b:32:29:f6:cc:f3:8c:cb:3f:cb:0b:2c:9b:10:
96:61:bc:01:84:b1:0b:9b:06:90:b4:33:0e:32:e7:f5:f0:af:
98:61:5f:3b:e7:96:b6:c2:15:8b:89:d2:18:80:8a:40:4c:1a:
75:ff:12:1d:a9:64:d3:d8:0b:14:7d:7a:b9:e4:60:ce:82:07:
25:fb:1b:c6:56:15:d6:c1:a3:76:69:45:b1:51:a5:52:4d:04:
92:c5:c8:bf:1a:09:f7:5d:f6:bd:37:c0:72:29:93:e6:76:a5:
1f:cc:a8:10:96:12:51:2c:44:6c:6f:00:06:01:30:b2:85:8f:
94:ed:2d:77:4e:b4:44:e3:ef:b0:03:8b:2a:5b:40:0b:4c:2b:
11:24:18:33:90:6d:bc:a0:2e:b6:15:8b:73:77:40:a7:05:3d:
4d:42:3f:62:1f:56:41:86:dd:0c:8c:46:3e:8b:51:a7:96:a8:
d8:1d:11:fc:ef:4e:3f:87:68:a0:83:26:80:f3:a2:26:bb:40:
e2:bf:d9:70:33:a9:78:80:e3:2a:84:18:f2:6c:c3:7d:16:47:
3e:05:05:95:87:6e:45:d8:02:e2:a7:83:89:4a:ce:a2:1c:a7:
0c:c7:40:0d:bb:25:e9:6e:f5:66:32:a5:f8:d1:ab:e3:fe:70:
0f:84:03:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 08:56:41 2026 by rpki-client