Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138342e3138392e302f32342d3234203d3e20313336373837.roa
File: 3138352e3138342e3138392e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: rJObOby8scNFd72kiUVB+VhNyMGHqk9Skw336YvvSC4=
Subject key identifier: 2E:A6:44:EB:3B:35:11:C4:84:95:E2:AB:C2:71:84:79:45:E1:FD:81
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 17A42C54803C39F08C07CB3C34FEF0EFA562AA60
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138342e3138392e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 18 Oct 2026 19:29:55 +0000
ROA not before: Sun 18 Oct 2026 19:24:55 +0000
ROA not after: Sun 17 Oct 2027 19:29:55 +0000
asID: 136787
IP address blocks: 185.184.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:a4:2c:54:80:3c:39:f0:8c:07:cb:3c:34:fe:f0:ef:a5:62:aa:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 18 19:24:55 2026 GMT
Not After : Oct 17 19:29:55 2027 GMT
Subject: CN=2EA644EB3B3511C48495E2ABC271847945E1FD81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ee:8b:fb:31:ea:67:d4:04:5f:83:17:94:22:
b3:ff:b1:d2:df:ae:67:49:b3:b9:a9:e1:e9:b3:e1:
5a:d5:a1:ad:48:b6:b1:2f:69:83:8f:d1:a8:bd:03:
c2:7f:66:1d:14:c3:73:51:57:3e:8d:4b:3f:6b:11:
45:9d:ab:7e:aa:f5:a0:43:a2:aa:89:b7:f5:9d:16:
a0:7b:34:2c:df:7d:68:26:3e:9f:b3:fa:0b:9b:23:
d2:8a:4d:89:4f:dd:ca:0e:d8:5d:46:66:da:80:bc:
4a:e8:a0:22:f4:45:67:11:f4:5f:90:15:ac:e6:0d:
e7:f4:04:93:81:de:21:18:75:f4:9b:68:72:ee:49:
d4:61:ed:f9:0d:11:4d:c2:b0:a6:2c:9d:98:5d:e7:
0b:d1:db:85:f3:e8:03:88:4f:35:97:ca:d1:f9:2c:
eb:e1:de:08:04:aa:66:1f:35:28:36:be:c7:d9:41:
ec:bc:37:eb:11:fe:da:a6:1b:56:0b:f9:05:69:b8:
69:51:e7:01:ba:0c:b4:cc:99:b0:d5:52:11:79:b6:
66:8d:4e:c5:05:68:61:21:c4:70:97:85:fb:54:e8:
14:1b:c5:8e:09:d2:fe:0b:a5:9d:01:71:2a:45:8e:
40:07:74:8a:2f:37:80:7a:b8:18:67:88:26:6e:fb:
0d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A6:44:EB:3B:35:11:C4:84:95:E2:AB:C2:71:84:79:45:E1:FD:81
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138342e3138392e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.189.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:0a:4c:ee:1a:5a:74:1a:2f:ca:58:40:28:45:3c:f6:0e:45:
71:1d:21:d4:af:1b:a4:77:8a:e9:dd:d7:b1:8b:65:90:6d:34:
ea:92:dc:74:c7:a3:5f:16:bd:2f:cf:60:66:26:ac:eb:cd:e7:
ac:d4:08:f0:91:fc:9b:6d:bf:dd:39:bd:28:d8:95:68:34:c6:
11:cd:67:bc:85:65:d5:32:01:66:35:25:c1:e9:88:a4:93:fd:
21:7a:01:37:64:56:8b:1c:4e:53:bd:27:2b:f6:86:32:fe:2b:
93:9d:dc:7b:dd:b7:2a:45:45:33:3e:10:6c:be:dd:dc:c5:fb:
c6:cf:14:aa:49:84:3d:1d:ee:02:7f:ff:0b:ee:66:8d:cf:89:
28:5c:9e:76:df:0f:b3:2c:56:97:3d:1f:e4:39:7f:51:32:ed:
44:e0:d2:73:ee:61:4b:69:d5:f2:f6:03:1b:44:64:64:f8:e0:
38:a9:ae:e9:9f:58:03:ef:99:e0:2a:47:46:07:d6:6d:8c:41:
30:5e:3e:8b:c0:c6:c2:26:bf:8a:0e:eb:e1:8d:88:bf:d2:b9:
ae:db:41:d6:7c:4d:04:79:1d:12:99:0c:a2:e9:58:ce:3e:cb:
aa:e0:c0:4b:77:2c:d9:0b:5e:4e:fb:ce:7e:9e:9f:96:22:17:
a4:12:d3:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:37:14 2026 by rpki-client