Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138332e35342e302f32342d3234203d3e20313336373837.roa
File: 3138352e3138332e35342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: /UabZRl5b8RGNWe93LpfqwIc2DFIKXc3/hqV+A5/JwQ=
Subject key identifier: B7:11:6D:B6:EE:12:7C:45:DA:E9:17:3C:8B:D1:D1:24:CA:7D:C9:5A
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6D9EC8D36243A9F3BC62DA4299A56F647A92FB31
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138332e35342e302f32342d3234203d3e20313336373837.roa
Signing time: Sat 18 Apr 2026 08:23:48 +0000
ROA not before: Sat 18 Apr 2026 08:18:48 +0000
ROA not after: Sat 17 Apr 2027 08:23:48 +0000
asID: 136787
IP address blocks: 185.183.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 12:50:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:9e:c8:d3:62:43:a9:f3:bc:62:da:42:99:a5:6f:64:7a:92:fb:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 18 08:18:48 2026 GMT
Not After : Apr 17 08:23:48 2027 GMT
Subject: CN=B7116DB6EE127C45DAE9173C8BD1D124CA7DC95A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:47:db:ba:4c:ce:89:d9:b1:72:63:4d:66:14:
b8:22:23:98:bc:99:60:01:f1:5e:17:ed:64:5d:f8:
84:0b:3d:30:60:32:3d:24:fc:9f:67:26:87:f2:9e:
ca:c2:60:95:c6:03:c1:1f:d9:d9:e5:ce:67:c3:9e:
78:e0:84:10:20:28:30:4e:7a:78:9c:46:3e:15:3f:
6e:ca:cb:7d:ad:e7:bd:84:32:a4:cd:ec:f9:bb:23:
84:c6:65:e6:d4:06:c1:41:f1:1c:ee:d9:23:cb:29:
a5:8e:eb:1e:d6:70:48:48:57:98:f5:c4:51:b3:58:
f5:ec:cc:dc:15:98:5e:0b:ef:7c:34:c0:1b:db:06:
ed:4b:11:68:ea:52:48:fc:73:da:02:a5:ea:40:c6:
74:a8:81:07:ee:44:3e:7a:12:c9:61:5a:c1:21:f4:
d4:c2:05:bf:89:d4:39:dd:11:21:bc:57:e7:56:a9:
4b:10:b6:17:e7:69:2a:60:c4:ad:dc:cf:db:eb:19:
4b:58:6f:53:88:f3:79:a0:3c:7f:fe:48:a1:0b:33:
f7:c7:0d:29:d3:7f:3f:12:e5:30:63:d2:16:62:53:
9e:ae:8f:14:cb:a4:60:c4:54:94:e6:58:fa:5e:8a:
a7:5a:92:fd:6e:46:94:68:08:c1:c1:48:9a:65:42:
4e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:11:6D:B6:EE:12:7C:45:DA:E9:17:3C:8B:D1:D1:24:CA:7D:C9:5A
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138332e35342e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.183.54.0/24
Signature Algorithm: sha256WithRSAEncryption
66:61:27:f7:69:d2:a9:62:be:02:39:14:1e:66:b6:59:27:b6:
c4:6b:51:40:e0:18:da:74:64:79:25:cf:ca:6d:26:a1:82:a3:
04:a0:a2:f2:e1:4e:92:81:90:b7:d0:0e:bc:33:0e:83:f0:8e:
93:cf:be:9a:4a:c5:bc:91:f5:65:60:03:a0:24:db:ee:f3:5e:
94:cb:28:9a:4a:b6:c9:4e:b9:d1:31:47:8f:8a:ec:da:77:e9:
d8:a7:8f:c0:93:90:c6:de:fb:5b:33:01:15:06:ba:27:d5:72:
e0:44:57:5e:57:2e:e3:b6:f5:db:f7:30:b9:6f:ea:dc:e4:a5:
aa:fc:04:92:64:74:22:ad:7c:cd:da:ad:75:3d:e9:b1:b0:44:
06:70:01:ea:f4:83:50:0e:89:7d:c3:0b:14:87:a4:20:fe:fa:
0f:81:a5:a1:55:c5:e8:e9:bb:e2:24:8d:65:6a:13:7a:99:a9:
bc:19:c8:01:2c:63:13:f8:c6:1f:eb:b4:ce:a3:34:22:5b:5c:
4f:d0:e6:1e:86:db:9a:5d:7a:4f:55:e1:b2:9a:c4:78:43:6a:
d4:22:1c:b0:06:d2:24:cd:6f:1c:d3:4e:4a:ed:6c:38:0f:6e:
5a:c9:ea:3d:d4:ba:3e:e4:cc:83:ae:dc:f3:1a:f8:5e:cf:90:
66:6d:40:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 21:57:28 2026 by rpki-client