Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138322e31312e302f32342d3234203d3e20313336373837.roa
File: 3138352e3138322e31312e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: nliPHCBUKmI/1oscwfbig6Oc4W48fINp8PN6jyrGVLY=
Subject key identifier: C1:22:36:E1:69:86:6F:8A:A7:24:CC:7C:C9:3E:2E:E6:3A:44:25:CF
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7A022ED60E4F85A5745A954AEC4C6A4EA62751E8
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138322e31312e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 30 Aug 2026 21:28:13 +0000
ROA not before: Sun 30 Aug 2026 21:23:13 +0000
ROA not after: Sun 29 Aug 2027 21:28:13 +0000
asID: 136787
IP address blocks: 185.182.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:02:2e:d6:0e:4f:85:a5:74:5a:95:4a:ec:4c:6a:4e:a6:27:51:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 30 21:23:13 2026 GMT
Not After : Aug 29 21:28:13 2027 GMT
Subject: CN=C12236E169866F8AA724CC7CC93E2EE63A4425CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:23:47:2f:38:fd:b0:dc:86:ab:08:0b:af:d1:
1d:fd:a2:f8:71:6b:a1:36:36:c1:36:d5:e9:ea:77:
71:df:61:3e:c5:59:21:9e:5e:95:81:3e:74:d5:d1:
b4:3e:36:fb:bd:b7:38:27:a2:37:b9:0e:a1:66:f1:
42:f6:fd:80:bc:da:81:67:64:4d:f0:85:1d:98:35:
f2:c8:bf:15:53:ce:cd:26:46:5b:10:f8:c2:3f:fd:
3c:b1:bb:10:03:07:e3:9f:46:38:b1:19:37:b7:68:
48:fb:dd:dd:bf:42:1d:8b:11:15:07:80:1e:02:3e:
86:8d:a1:f4:c1:f9:00:59:b6:9a:04:3e:59:4b:92:
f1:89:87:4e:d6:b0:fa:4f:be:58:ab:9a:f2:74:bf:
19:01:42:de:d4:c0:0f:3d:7f:0f:d5:1f:9c:ee:51:
f4:99:9f:e1:01:e0:11:0c:89:4d:97:a6:32:ba:d4:
f6:f6:c1:e4:a8:92:63:c5:fa:1f:63:39:2b:57:d6:
46:ac:86:f1:77:9a:96:ee:46:26:58:00:f2:81:99:
af:14:a1:b4:30:eb:99:9f:9b:93:f8:ef:2a:2f:ea:
7f:47:4f:44:7b:95:c4:f3:48:5a:c1:61:53:e8:b4:
ce:9c:de:bd:65:7c:47:27:be:08:cf:c9:fb:54:90:
c4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:22:36:E1:69:86:6F:8A:A7:24:CC:7C:C9:3E:2E:E6:3A:44:25:CF
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138322e31312e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.182.11.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:81:c7:fb:4b:72:a5:4f:41:f7:f3:4d:b8:69:d3:e8:2e:11:
3b:e8:b6:41:79:e9:a5:d6:b0:72:35:81:a3:b1:82:41:7a:2f:
ae:65:c7:03:70:25:6e:74:6d:7f:9e:11:45:24:71:cb:f3:14:
a9:c4:d2:0f:bd:21:7f:c4:75:20:d6:f5:7d:94:db:c0:fd:d0:
1f:30:49:9e:78:9c:7b:96:a9:71:5f:ec:29:22:8e:d9:fe:44:
24:f6:cf:ba:c9:79:89:1e:6c:ea:ab:0b:1b:a7:a2:02:14:8b:
bc:17:08:60:c9:04:50:33:aa:b3:b2:35:aa:5a:23:40:0a:68:
a4:94:9e:99:d6:f1:65:19:06:df:3d:bc:8b:33:ba:0b:84:8c:
93:9c:82:4e:d7:04:7a:e6:e6:c4:b3:8c:98:ef:03:06:7c:d4:
77:b4:41:1f:79:7d:52:97:59:ed:05:36:5e:b0:9c:a3:cb:0d:
c2:a3:66:80:10:b9:3f:95:40:73:8b:9d:f8:25:e1:f0:f5:e8:
5c:8f:29:9f:1e:c4:ac:80:aa:d6:18:5f:0b:a0:92:c6:d9:4d:
ab:98:1f:f7:f5:9a:1f:39:b8:d5:0e:4b:a4:fe:f8:11:5c:c8:
7f:09:8e:42:0c:6c:03:9d:fa:57:ff:f8:47:c9:e0:77:87:81:
1d:97:8f:0d
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUegIu1g5PhaV0WpVK7ExqTqYnUegwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA4MzAyMTIzMTNaFw0yNzA4MjkyMTI4MTNaMDMxMTAvBgNV
BAMTKEMxMjIzNkUxNjk4NjZGOEFBNzI0Q0M3Q0M5M0UyRUU2M0E0NDI1Q0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+I0cvOP2w3IarCAuv0R39ovhx
a6E2NsE21enqd3HfYT7FWSGeXpWBPnTV0bQ+Nvu9tzgnoje5DqFm8UL2/YC82oFn
ZE3whR2YNfLIvxVTzs0mRlsQ+MI//TyxuxADB+OfRjixGTe3aEj73d2/Qh2LERUH
gB4CPoaNofTB+QBZtpoEPllLkvGJh07WsPpPvlirmvJ0vxkBQt7UwA89fw/VH5zu
UfSZn+EB4BEMiU2XpjK61Pb2weSokmPF+h9jOStX1kashvF3mpbuRiZYAPKBma8U
obQw65mfm5P47yov6n9HT0R7lcTzSFrBYVPotM6c3r1lfEcnvgjPyftUkMTVAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUwSI24WmGb4qnJMx8yT4u5jpEJc8wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMTM4MzIyZTMx
MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAC5tgswDQYJKoZIhvcNAQELBQADggEBAGuBx/tLcqVPQffzTbhp0+guETvotkF5
6aXWsHI1gaOxgkF6L65lxwNwJW50bX+eEUUkccvzFKnE0g+9IX/EdSDW9X2U28D9
0B8wSZ54nHuWqXFf7Ckijtn+RCT2z7rJeYkebOqrCxunogIUi7wXCGDJBFAzqrOy
NapaI0AKaKSUnpnW8WUZBt89vIszuguEjJOcgk7XBHrm5sSzjJjvAwZ81He0QR95
fVKXWe0FNl6wnKPLDcKjZoAQuT+VQHOLnfgl4fD16FyPKZ8exKyAqtYYXwugksbZ
TauYH/f1mh85uNUOS6T++BFcyH8JjkIMbAOd+lf/+EfJ4HeHgR2Xjw0=
-----END CERTIFICATE-----
Generated at Thu Sep 10 20:24:36 2026 by rpki-client