Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138342e3138382e302f32342d3332203d3e203430303231.roa
File: 3138352e3138342e3138382e302f32342d3332203d3e203430303231.roa (raw, json)
Hash identifier: /92wLAAXF9J5xMe80VRb6jkps1+TqF+pVYA434qp6lc=
Subject key identifier: 71:45:15:9F:6F:1F:1A:60:96:BC:15:9F:A6:8E:D9:98:44:B7:E1:0B
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2D44C5E92448E8E5BA08E71908E59A0D0390B9B2
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138342e3138382e302f32342d3332203d3e203430303231.roa
Signing time: Thu 13 Aug 2026 11:27:56 +0000
ROA not before: Thu 13 Aug 2026 11:22:56 +0000
ROA not after: Thu 12 Aug 2027 11:27:56 +0000
asID: 40021
IP address blocks: 185.184.188.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 12:31:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:44:c5:e9:24:48:e8:e5:ba:08:e7:19:08:e5:9a:0d:03:90:b9:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 13 11:22:56 2026 GMT
Not After : Aug 12 11:27:56 2027 GMT
Subject: CN=7145159F6F1F1A6096BC159FA68ED99844B7E10B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:38:10:ac:8b:c4:c4:21:b9:49:dd:0b:d7:a8:
d8:36:47:a8:c2:b0:38:3a:13:62:e8:a7:c0:27:bf:
15:8c:4a:ac:c0:60:e1:1b:17:00:d4:73:4a:0d:74:
e5:5e:aa:13:de:3b:2c:ed:82:08:02:70:6a:6a:b8:
39:26:d2:a5:57:0f:ac:7a:a6:08:ce:3d:64:3f:99:
fc:4e:74:7b:ce:6c:6b:30:2c:46:41:2f:da:c3:da:
c2:f6:c0:da:9a:03:3b:ac:13:51:1a:e4:d4:47:16:
53:90:eb:64:be:4c:30:9f:8f:76:5e:ce:02:9e:54:
16:89:db:50:0d:68:ae:f5:cc:55:15:ed:b2:1a:f8:
5f:bc:49:26:7f:e3:32:ba:c0:0d:b9:2e:25:c8:31:
98:ed:f3:aa:a4:0b:0d:4b:ee:c5:df:63:5a:6e:bf:
b2:c1:b8:ff:f4:bb:44:6d:8d:35:dd:61:96:70:63:
c1:fc:f6:28:0e:17:c1:f8:95:31:75:26:dc:1e:3f:
cc:c5:62:91:48:d8:0a:aa:25:eb:5d:b6:d9:36:ac:
f2:b9:bc:bb:bc:06:a2:52:6e:a9:83:c2:ed:90:76:
3b:73:4a:5b:da:5c:8f:1f:f0:30:cd:6b:73:86:04:
0f:ea:d0:69:ee:62:09:81:28:68:a2:fd:21:37:e2:
9e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:45:15:9F:6F:1F:1A:60:96:BC:15:9F:A6:8E:D9:98:44:B7:E1:0B
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138342e3138382e302f32342d3332203d3e203430303231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.188.0/24
Signature Algorithm: sha256WithRSAEncryption
82:ba:42:85:75:f7:db:6b:12:fd:e1:ea:c0:37:81:d7:e1:51:
cd:c8:e2:ee:ed:36:e2:86:44:87:18:1e:69:22:09:82:2c:79:
72:56:dd:ee:93:41:0c:6c:ad:af:cd:c5:0b:4f:f2:83:0a:8a:
bf:f7:8f:40:58:df:69:c0:7b:68:f3:91:d0:30:11:c0:38:e9:
e0:13:4f:0d:cd:3e:c4:fa:35:a8:42:d1:99:56:26:b0:23:22:
07:e4:49:ba:87:3d:f9:ca:59:36:9a:7f:9b:3f:da:e3:b8:b5:
9b:24:ec:ef:20:36:d0:20:a4:b5:39:4e:d4:42:53:39:e0:d7:
c2:33:e8:e6:61:46:fc:95:ff:a6:cf:43:6f:a9:d8:10:d1:34:
c6:6a:9d:7f:14:36:dc:53:d6:64:26:c7:e6:b4:c9:93:33:c1:
4b:7c:f1:21:52:fa:3d:b9:9c:49:56:84:bb:80:11:39:95:4c:
c1:c8:8a:e9:6f:85:b9:3a:2c:45:11:84:9c:d6:01:04:a8:be:
17:af:fd:09:b8:c3:76:d8:a3:40:80:f2:74:68:2a:b1:16:44:
e3:0d:bb:bd:a4:4b:6f:af:fe:ce:44:46:b6:fe:39:04:39:3e:
94:1c:b6:a4:8e:e8:a3:04:05:de:e8:5a:48:d9:dd:16:d2:d4:
93:5c:5e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:19:27 2026 by rpki-client