Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138332e35352e302f32342d3234203d3e20313336373837.roa
File: 3138352e3138332e35352e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: juGzsr9OTWPF65H65hzD/BOttJ76cFZU0Yoao21FEgM=
Subject key identifier: 2D:57:24:E1:88:B9:E3:0E:1E:76:45:44:54:44:18:59:68:74:35:77
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3468C8471E34993B69C721B2A8E4ADE2F5867B53
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138332e35352e302f32342d3234203d3e20313336373837.roa
Signing time: Sat 18 Apr 2026 08:23:48 +0000
ROA not before: Sat 18 Apr 2026 08:18:48 +0000
ROA not after: Sat 17 Apr 2027 08:23:48 +0000
asID: 136787
IP address blocks: 185.183.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 10:56:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:68:c8:47:1e:34:99:3b:69:c7:21:b2:a8:e4:ad:e2:f5:86:7b:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 18 08:18:48 2026 GMT
Not After : Apr 17 08:23:48 2027 GMT
Subject: CN=2D5724E188B9E30E1E7645445444185968743577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:67:89:cd:c2:fb:4f:cb:cb:6c:f3:17:53:db:
d2:f8:98:ae:a2:04:99:0d:b3:64:d6:2e:32:ea:d3:
f7:c7:99:b8:67:d9:71:ab:93:e2:57:ac:21:f4:78:
04:06:3c:90:e2:0a:68:97:fa:6e:23:32:84:65:97:
5b:88:f1:3b:f0:bb:1c:b4:3d:9c:d3:6f:86:1b:23:
0d:25:7e:11:0c:f6:fb:83:75:79:17:36:90:01:2e:
06:25:44:41:b8:76:41:6f:62:c5:13:00:5f:a5:1e:
e4:92:69:f3:8e:b6:6a:8f:60:5a:d6:25:83:bd:95:
71:89:39:63:0c:b5:29:00:b8:a1:b2:a0:45:77:43:
01:ed:71:ec:50:0c:aa:f6:42:de:24:21:00:5d:57:
e1:79:32:03:09:c9:fc:7d:d5:b6:82:57:df:24:7a:
c3:5d:43:2f:56:c8:b7:18:7a:c2:69:57:df:2f:22:
73:89:36:67:27:db:aa:c9:68:ce:aa:b2:86:2d:7f:
1f:15:07:3b:42:33:3c:24:03:ab:8f:3d:a4:96:c7:
09:e6:bf:86:cc:22:01:0f:61:f6:e8:bb:43:49:d2:
b2:61:08:fe:e5:18:54:8c:42:81:3d:2b:6b:b6:49:
e6:c3:bd:53:96:21:08:d0:4d:f0:0f:a6:3b:e0:45:
ab:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:57:24:E1:88:B9:E3:0E:1E:76:45:44:54:44:18:59:68:74:35:77
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138332e35352e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.183.55.0/24
Signature Algorithm: sha256WithRSAEncryption
57:8b:34:1a:e1:d6:57:89:62:73:73:a8:5d:c9:53:03:a1:50:
14:48:5c:eb:9e:62:c4:b9:ac:fb:68:d9:b7:94:31:6f:5c:b9:
be:d1:14:68:6f:e5:69:d5:e1:cb:66:28:58:f8:fe:b2:91:38:
11:78:74:43:8d:67:c2:7d:ef:30:84:ac:e6:e3:ff:05:ad:8e:
e6:af:25:e9:fd:ac:f7:bb:7c:04:0f:90:03:c0:20:0d:df:e5:
5a:29:c6:3a:19:c0:dd:34:c3:4f:79:4e:2c:ef:01:c2:02:d7:
c2:52:9a:18:19:ce:1e:d0:bc:a1:41:5e:45:e3:8a:77:49:d3:
2c:f4:02:a9:82:8f:1c:42:33:44:dd:12:12:05:6a:d1:47:53:
d0:e0:4d:a0:3e:6f:4e:b5:33:1a:3c:8e:52:e9:14:9d:2a:95:
1d:01:dd:1a:a1:0b:b9:00:0c:1d:f7:79:54:5c:d0:e4:63:b3:
36:3e:3d:4c:b4:b7:49:13:0e:71:0a:72:0d:86:d3:01:75:64:
4c:f9:f7:54:d2:67:5c:25:e4:fe:5f:26:41:0b:b0:50:d8:bd:
f1:d1:b0:56:25:d2:6e:94:2a:ea:be:31:44:f4:84:a7:0c:bb:
7b:da:3f:b2:e4:bb:bf:ca:e7:84:27:97:f7:0e:97:32:2d:a1:
3c:8b:29:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 23:06:42 2026 by rpki-client