Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139372e3139332e302f32342d3234203d3e20323033333830.roa
File: 3138352e3139372e3139332e302f32342d3234203d3e20323033333830.roa (raw, json)
Hash identifier: i/98YCTfEg0obuVqTqBrHj1CyrA32ZXOOQ0XZBWehsM=
Subject key identifier: DB:96:12:1C:8D:A3:FE:9F:67:30:E3:0C:9F:DE:AD:FF:C6:41:BD:8D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4E8D3F8ECE06BAC492CBCD38E226DA0687E21550
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139372e3139332e302f32342d3234203d3e20323033333830.roa
Signing time: Wed 30 Sep 2026 13:15:37 +0000
ROA not before: Wed 30 Sep 2026 13:10:37 +0000
ROA not after: Wed 29 Sep 2027 13:15:37 +0000
asID: 203380
IP address blocks: 185.197.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:8d:3f:8e:ce:06:ba:c4:92:cb:cd:38:e2:26:da:06:87:e2:15:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 30 13:10:37 2026 GMT
Not After : Sep 29 13:15:37 2027 GMT
Subject: CN=DB96121C8DA3FE9F6730E30C9FDEADFFC641BD8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8e:34:9f:43:8a:95:9d:8b:19:e6:47:c6:5b:
e3:c6:05:ec:d0:eb:a7:f5:c9:06:79:ac:98:6e:b7:
8f:88:a5:03:f1:d5:4c:6b:97:6c:85:a9:21:00:88:
24:95:29:c9:5e:41:7e:9c:b5:d3:c6:07:fa:d8:51:
39:f7:13:2b:ed:1f:df:20:94:e9:e5:31:dd:01:fc:
9e:40:7e:c8:14:f6:41:93:d1:aa:69:ab:fd:fe:40:
1d:4f:ee:7f:65:cf:d1:80:6b:df:34:d9:75:8e:7b:
f5:89:76:fd:08:4e:80:b4:fa:59:ae:e9:f2:37:c6:
d0:98:a9:63:84:2d:24:a3:32:89:9b:65:e3:97:85:
31:3b:57:2c:63:8b:27:25:41:cf:4c:8c:36:fe:85:
f8:6e:4d:8f:12:5f:a3:15:3e:3e:6c:11:86:6b:ad:
da:36:e8:87:c5:04:1f:a5:94:63:4f:e2:7e:62:30:
f2:c5:33:6e:b9:54:8e:36:7a:03:fe:97:ad:49:ff:
33:07:dc:bd:97:f1:4f:5a:2b:21:a6:0c:72:e2:97:
2c:b7:f4:11:87:99:13:23:fe:bc:a5:e9:91:b1:34:
25:7e:03:72:6f:de:c6:b4:7d:c2:f3:3e:44:51:86:
88:3f:56:e7:fb:97:dd:40:a9:c7:02:b6:38:e4:c1:
56:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:96:12:1C:8D:A3:FE:9F:67:30:E3:0C:9F:DE:AD:FF:C6:41:BD:8D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139372e3139332e302f32342d3234203d3e20323033333830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.193.0/24
Signature Algorithm: sha256WithRSAEncryption
47:bf:3a:52:93:97:ca:18:c9:ed:3d:bb:10:b2:5c:78:52:06:
75:19:e2:a6:fb:13:5f:9e:25:63:0f:36:16:2e:5e:dd:38:91:
91:07:f7:e8:6d:31:bf:af:ad:f2:ce:d7:7f:f4:d1:cf:60:f3:
38:95:81:76:39:b3:80:e8:a8:37:91:15:7c:f4:6d:9d:d3:30:
58:cb:77:fa:1a:91:30:3b:0f:db:6f:66:26:08:20:80:8e:fd:
bb:0d:4b:31:af:82:a0:09:57:c2:7b:06:ff:7a:2e:3d:92:f5:
2e:8e:2d:c3:91:37:54:52:2a:7c:79:e2:06:4f:0a:55:15:f5:
0e:da:bd:cd:ec:38:90:e0:f8:d4:4c:fd:2c:4b:6e:4a:0a:39:
6a:09:29:f0:d6:e7:17:06:17:96:e1:eb:08:9d:d3:4d:05:31:
95:72:35:b7:db:fa:90:6e:47:64:aa:62:50:05:ce:1f:d8:64:
32:30:f3:ab:98:b3:ff:38:c9:36:02:a0:b3:ac:35:1e:87:f7:
2f:c2:09:52:a6:92:d6:c1:27:d1:89:ec:a3:01:61:36:48:03:
1a:8f:8b:f7:f6:f1:a7:4a:30:28:03:47:d2:64:49:bc:cc:9d:
e2:af:cc:5f:cc:d2:18:14:2b:3f:36:ed:4c:b5:56:e1:01:43:
ac:c2:8c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 06:49:03 2026 by rpki-client