Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139342e3135302e302f32342d3234203d3e203432333636.roa
File: 3138352e3139342e3135302e302f32342d3234203d3e203432333636.roa (raw, json)
Hash identifier: pqPZh5VQyzGE5fHFfsUijON2eDa2Fny++bWDbSgIqmk=
Subject key identifier: 9F:67:C1:4A:82:4E:F9:47:16:FD:87:52:4F:7B:65:0E:14:31:E0:D0
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 07494B43CB414E66F3AE3AEA4373E72A8271E366
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139342e3135302e302f32342d3234203d3e203432333636.roa
Signing time: Fri 17 Jul 2026 16:26:19 +0000
ROA not before: Fri 17 Jul 2026 16:21:19 +0000
ROA not after: Fri 16 Jul 2027 16:26:19 +0000
asID: 42366
IP address blocks: 185.194.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:49:4b:43:cb:41:4e:66:f3:ae:3a:ea:43:73:e7:2a:82:71:e3:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 17 16:21:19 2026 GMT
Not After : Jul 16 16:26:19 2027 GMT
Subject: CN=9F67C14A824EF94716FD87524F7B650E1431E0D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:43:7c:d6:cc:03:61:c4:9f:87:f1:6c:a2:69:
cf:3a:19:96:06:c0:e0:5d:76:d8:50:86:eb:72:72:
19:1d:c3:6a:11:4c:c6:e7:32:21:16:5a:98:30:67:
57:d3:80:b6:65:7c:9d:f0:19:f9:3e:21:9c:f3:09:
2e:9d:24:38:a3:8f:64:12:70:b0:5e:e4:3c:25:5c:
88:37:47:52:c8:67:6e:39:a4:d4:0b:61:b9:34:ae:
ad:cc:6b:60:c2:7f:27:b7:f2:ca:e0:44:34:a3:af:
9a:69:be:f0:fe:a9:60:92:b9:ac:a3:0a:f3:77:3b:
44:60:63:9f:be:0a:e6:68:68:41:0b:bc:86:aa:98:
9d:75:71:d7:6b:d3:e5:a3:4a:0f:2d:e4:7d:25:ab:
02:7b:03:d2:4d:14:6f:6d:9b:8f:10:34:bf:e7:55:
94:62:c4:0f:45:28:ad:9f:89:12:33:01:2a:19:4e:
79:e1:ae:b5:c0:b8:9a:de:49:f9:67:25:0c:42:ad:
4e:5a:d5:56:ce:16:e8:fa:a7:be:b7:11:8c:b5:e2:
56:f6:67:45:33:58:42:28:d0:e4:4d:63:eb:83:ee:
d2:7c:f5:b9:e1:c7:a0:f2:b8:af:da:76:a3:b0:3b:
35:c6:da:d5:cd:3b:27:6a:86:32:4f:52:b9:f2:2f:
ae:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:67:C1:4A:82:4E:F9:47:16:FD:87:52:4F:7B:65:0E:14:31:E0:D0
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139342e3135302e302f32342d3234203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.150.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:b0:71:a4:6e:27:5d:c2:3f:02:d7:2e:a0:4c:62:a7:f1:78:
70:49:80:57:2d:8d:8f:c1:d7:36:83:13:ca:3d:f0:d6:88:ca:
3b:e7:f5:88:c4:c0:6a:7a:e2:f4:20:9e:97:e8:b5:3b:13:c8:
ce:0a:61:9f:34:de:61:2a:bc:3d:76:7e:2c:5c:14:45:6c:13:
ea:02:e3:5d:10:ef:e1:0c:7b:09:6c:0b:6c:63:65:e9:0c:e6:
24:35:f2:3a:f9:6d:2a:76:3c:0f:e7:62:84:8e:42:8d:97:0f:
c5:dd:80:e9:57:13:56:62:36:1a:f2:1f:f2:5d:fa:e4:e9:ac:
e3:20:0e:1c:1c:40:ec:79:54:4b:bb:00:41:15:5e:ae:a7:1c:
ce:da:a8:62:33:6c:91:fd:49:e8:ab:e1:5b:f2:75:0a:b1:4c:
6e:21:03:6d:39:aa:3b:e7:e5:32:b3:08:88:79:7b:18:45:42:
6a:81:19:de:48:00:38:74:50:92:80:f2:d0:e5:3d:43:fd:7c:
d8:1c:27:23:16:99:6c:35:c3:e3:59:3e:c5:8b:46:33:aa:dc:
06:8e:9e:de:a9:ff:4e:c1:2c:f0:b0:eb:02:55:32:aa:4a:a0:
6f:0c:cb:d0:f7:82:a7:a8:35:b8:89:74:79:b0:11:e8:70:68:
e2:f9:a1:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:56:54 2026 by rpki-client