Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3233322e302f32342d3234203d3e20343031333632.roa
File: 3138352e3138372e3233322e302f32342d3234203d3e20343031333632.roa (raw, json)
Hash identifier: yN/rngnT+7XReygHTunR2iz+8GSR9ie8he9Iie3H1C0=
Subject key identifier: 7D:DA:3B:11:7D:A3:09:DB:6E:0C:CF:63:B3:B1:80:84:C5:F8:A5:5C
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 155A9D987358C0A70E73CE52555C91B273CA966D
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3233322e302f32342d3234203d3e20343031333632.roa
Signing time: Fri 14 Aug 2026 07:13:15 +0000
ROA not before: Fri 14 Aug 2026 07:08:15 +0000
ROA not after: Fri 13 Aug 2027 07:13:15 +0000
asID: 401362
IP address blocks: 185.187.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:5a:9d:98:73:58:c0:a7:0e:73:ce:52:55:5c:91:b2:73:ca:96:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 14 07:08:15 2026 GMT
Not After : Aug 13 07:13:15 2027 GMT
Subject: CN=7DDA3B117DA309DB6E0CCF63B3B18084C5F8A55C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:49:96:95:af:da:64:20:72:a1:50:a3:e7:13:
08:32:2b:58:1c:2a:bc:16:0d:8f:e9:de:8b:6f:e3:
17:2b:04:87:01:91:dc:a3:d3:be:97:5a:d2:ab:63:
de:f7:4e:b3:a9:f3:ca:79:dd:82:10:01:c5:0e:65:
6c:13:6b:46:af:a4:53:db:e5:56:29:cc:69:62:91:
35:f6:c4:62:cc:59:14:89:20:e3:94:af:77:e9:01:
47:0f:08:6f:16:3f:45:31:a4:92:f8:7e:a7:d5:15:
b8:15:61:06:49:99:e6:0b:a5:da:10:86:fa:c1:de:
cb:89:fe:22:4a:13:f1:55:35:36:8a:96:4a:39:1e:
22:e2:6d:a4:d5:99:ca:f2:23:0f:55:c7:38:5e:cc:
5c:40:b6:20:25:d5:ee:ed:4d:bb:0c:0e:3b:cb:56:
73:a4:52:88:54:94:f1:03:18:7f:07:02:55:0f:eb:
5d:9f:83:c5:44:fb:44:8a:2d:98:cb:4e:83:b9:1d:
a3:41:0d:b9:09:b8:7b:f7:e6:ef:f0:89:70:61:ce:
fd:1a:09:e3:b6:8f:d2:9d:19:43:ee:aa:9a:76:6e:
bb:7a:a1:cc:d2:c1:d3:7d:92:e9:25:fb:b5:9c:12:
92:37:11:5a:3c:78:91:17:54:ce:50:a2:d9:e7:81:
b2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:DA:3B:11:7D:A3:09:DB:6E:0C:CF:63:B3:B1:80:84:C5:F8:A5:5C
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3233322e302f32342d3234203d3e20343031333632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.232.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:fc:71:fd:a6:59:b5:c2:0e:9b:c4:a3:42:c1:aa:a7:61:3e:
d2:1a:b3:a3:31:cd:00:83:71:bc:ac:85:01:d7:de:89:d4:a1:
1e:79:f8:21:2e:13:d0:ef:bb:54:f5:c7:a0:06:48:e6:ca:95:
04:af:fc:45:0a:ac:b0:18:37:0d:bf:9a:39:b3:86:49:0a:3f:
33:74:6f:59:ea:33:dd:72:31:e7:ec:30:b2:f9:71:16:ae:d4:
1c:56:a5:06:50:ed:2a:41:7a:c7:88:8c:de:c2:9f:6c:9f:17:
83:e5:b9:a7:16:a6:8b:19:97:7e:7b:9d:d8:83:56:b0:b8:f2:
ed:32:94:2f:1a:e8:b0:27:eb:e2:f3:3f:19:06:6a:53:e9:ba:
08:26:f6:95:39:dd:2a:ac:17:00:09:24:73:ff:8b:fb:cf:a6:
10:bd:99:83:81:c1:38:e0:d5:f5:0a:8a:a9:5f:90:69:fa:04:
68:87:47:af:ae:15:38:42:14:81:3f:b0:ce:79:9c:1b:5a:98:
4d:0f:45:8e:30:e8:d0:3a:84:75:f2:e2:ff:f3:e8:0f:cc:37:
fa:79:a0:74:db:3d:7b:9d:48:c9:da:a3:68:cd:9d:01:78:f4:
56:2b:9e:85:10:55:1f:6b:77:9a:ef:c4:d3:ce:75:34:54:65:
12:25:8b:85
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUFVqdmHNYwKcOc85SVVyRsnPKlm0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA4MTQwNzA4MTVaFw0yNzA4MTMwNzEzMTVaMDMxMTAvBgNV
BAMTKDdEREEzQjExN0RBMzA5REI2RTBDQ0Y2M0IzQjE4MDg0QzVGOEE1NUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdSZaVr9pkIHKhUKPnEwgyK1gc
KrwWDY/p3otv4xcrBIcBkdyj076XWtKrY973TrOp88p53YIQAcUOZWwTa0avpFPb
5VYpzGlikTX2xGLMWRSJIOOUr3fpAUcPCG8WP0UxpJL4fqfVFbgVYQZJmeYLpdoQ
hvrB3suJ/iJKE/FVNTaKlko5HiLibaTVmcryIw9VxzhezFxAtiAl1e7tTbsMDjvL
VnOkUohUlPEDGH8HAlUP612fg8VE+0SKLZjLToO5HaNBDbkJuHv35u/wiXBhzv0a
CeO2j9KdGUPuqpp2brt6oczSwdN9kukl+7WcEpI3EVo8eJEXVM5QotnngbJ/AgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUfdo7EX2jCdtuDM9js7GAhMX4pVwwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMTM4MzcyZTMy
MzMzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzAzMTMzMzYzMi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEALm76DANBgkqhkiG9w0BAQsFAAOCAQEAevxx/aZZtcIOm8SjQsGqp2E+0hqz
ozHNAINxvKyFAdfeidShHnn4IS4T0O+7VPXHoAZI5sqVBK/8RQqssBg3Db+aObOG
SQo/M3RvWeoz3XIx5+wwsvlxFq7UHFalBlDtKkF6x4iM3sKfbJ8Xg+W5pxamixmX
fnud2INWsLjy7TKULxrosCfr4vM/GQZqU+m6CCb2lTndKqwXAAkkc/+L+8+mEL2Z
g4HBOODV9QqKqV+QafoEaIdHr64VOEIUgT+wznmcG1qYTQ9FjjDo0DqEdfLi//Po
D8w3+nmgdNs9e51IydqjaM2dAXj0ViuehRBVH2t3mu/E0851NFRlEiWLhQ==
-----END CERTIFICATE-----
Generated at Thu Sep 3 17:56:26 2026 by rpki-client