Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139392e3130332e302f32342d3332203d3e20313336373837.roa
File: 3138352e3139392e3130332e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier: YW3aGZmpXxDieQhGRWz2D/d6RGfgJU/SSG24Ooy9BKE=
Subject key identifier: 77:DB:C9:E1:89:9C:77:E8:A1:18:8B:22:19:4A:92:03:9A:8A:66:D4
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 35A43144A7681A3D27FFD0E29929DB41C0B44CAD
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139392e3130332e302f32342d3332203d3e20313336373837.roa
Signing time: Fri 24 Jul 2026 15:26:54 +0000
ROA not before: Fri 24 Jul 2026 15:21:54 +0000
ROA not after: Fri 23 Jul 2027 15:26:54 +0000
asID: 136787
IP address blocks: 185.199.103.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:a4:31:44:a7:68:1a:3d:27:ff:d0:e2:99:29:db:41:c0:b4:4c:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 24 15:21:54 2026 GMT
Not After : Jul 23 15:26:54 2027 GMT
Subject: CN=77DBC9E1899C77E8A1188B22194A92039A8A66D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cc:53:10:b0:cd:49:dc:1a:75:ef:b0:c7:12:
bd:fc:8d:01:0d:c5:ba:2c:1e:bc:a8:e8:d4:78:45:
64:96:a6:16:17:be:a2:e2:c6:12:4f:50:69:ad:ec:
19:48:28:78:f0:22:3e:fd:0c:13:7e:9d:82:d2:dd:
2a:fa:0d:f6:84:b4:b6:65:0a:24:0b:b5:3a:fe:90:
01:0c:1f:56:65:85:d8:a4:6e:a3:86:3c:b8:74:97:
93:5b:dd:d5:8b:b5:e5:46:7b:e4:6b:f5:68:37:7f:
83:c1:52:5a:22:ec:40:23:a6:92:24:44:e6:ff:0b:
01:a1:90:37:73:c8:fa:61:61:fa:86:51:cf:5c:0f:
1e:dd:e2:49:80:0b:71:15:0d:7b:1b:48:db:f0:4b:
fb:e8:a4:cb:db:3e:f3:f5:d8:70:06:a2:3f:69:44:
39:c2:bc:96:72:3e:66:39:f7:00:64:18:cb:52:72:
f3:15:f8:8c:42:e3:69:59:1c:69:f1:82:92:76:64:
59:a4:67:2c:df:23:e7:df:2e:ab:ac:a1:cd:ef:c0:
9a:24:e8:6e:af:8a:3d:85:20:4b:f7:8b:c3:e4:7f:
c7:5c:c3:6a:c6:ec:c7:d0:0e:da:00:46:9e:89:22:
3e:3a:21:3f:36:96:1e:1a:0f:b1:60:aa:c9:9f:ba:
ff:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:DB:C9:E1:89:9C:77:E8:A1:18:8B:22:19:4A:92:03:9A:8A:66:D4
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139392e3130332e302f32342d3332203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.103.0/24
Signature Algorithm: sha256WithRSAEncryption
75:7d:52:be:7d:f5:35:c7:df:47:32:c7:6b:87:34:c7:e9:15:
6d:8b:f2:a1:5d:c0:6b:7f:bf:50:4b:29:89:97:1d:fb:16:25:
64:ab:20:1a:9f:f0:b9:5b:48:ca:b3:ed:29:0e:13:b5:f7:ee:
d3:0a:97:ba:3c:10:a0:14:d5:1a:9e:97:7c:11:f1:a1:4b:2f:
23:43:00:f3:be:91:b0:1b:84:dd:16:a1:0d:b0:9a:3b:10:6e:
40:67:f5:40:64:d9:47:49:9b:ef:a6:22:9c:1e:3c:ed:14:0a:
9a:78:51:8f:46:85:e3:47:67:23:97:55:82:5c:ed:83:65:bb:
fa:a4:77:b9:7d:bb:91:14:9d:f5:55:42:67:50:6f:c1:d0:e7:
95:a9:65:4d:88:6a:f9:ba:78:fa:fc:fc:8d:c4:54:6a:53:55:
c4:7b:3b:d2:e3:c2:0a:73:a4:00:69:d0:1b:93:67:16:a3:81:
76:7f:92:83:c9:c3:d9:dd:1f:84:ab:63:40:54:5a:32:39:b9:
68:93:18:cb:ae:89:c4:18:0c:f0:a9:ac:2b:b0:b5:c6:4c:9a:
3b:5f:ea:3b:7d:e8:f4:cf:6c:47:a5:e3:46:27:6e:7b:14:69:
24:e1:49:c0:1a:07:3c:81:74:47:5d:50:dd:73:d0:5a:cb:6f:
d5:ec:f2:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 23:39:04 2026 by rpki-client