Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230332e3132322e302f32342d3234203d3e20323132323338.roa
File: 3138352e3230332e3132322e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: CL1oKK5h1QlI1OnE8qIG95NNCOveNgGp4y/166Z5kHo=
Subject key identifier: 4C:38:C3:50:BE:CB:C8:15:C3:32:CE:FC:1E:5E:02:DD:F9:59:16:7F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5FC3CFC9B12647DDDFE68E6AFB04C6CBEA7770C3
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230332e3132322e302f32342d3234203d3e20323132323338.roa
Signing time: Thu 30 Jul 2026 21:27:30 +0000
ROA not before: Thu 30 Jul 2026 21:22:30 +0000
ROA not after: Thu 29 Jul 2027 21:27:30 +0000
asID: 212238
IP address blocks: 185.203.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:c3:cf:c9:b1:26:47:dd:df:e6:8e:6a:fb:04:c6:cb:ea:77:70:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 30 21:22:30 2026 GMT
Not After : Jul 29 21:27:30 2027 GMT
Subject: CN=4C38C350BECBC815C332CEFC1E5E02DDF959167F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:15:e4:9c:80:18:80:b1:38:41:f6:a0:d1:bf:
58:d8:a5:8d:4c:5f:58:bc:45:a3:a5:77:5f:41:8f:
28:3d:32:28:60:b5:02:9d:45:c5:57:5f:48:94:2e:
1c:1b:c0:74:5a:33:95:22:43:74:45:f5:11:13:b6:
e3:76:14:1f:1a:7a:7b:61:0d:09:2f:32:a6:09:c8:
89:69:9a:09:52:8f:e8:b3:c2:4c:89:40:36:e0:67:
21:d0:59:32:b6:30:8a:ec:49:bd:1d:5b:8d:8b:84:
59:ae:c4:c0:d6:2e:c8:24:9a:4d:ef:81:ed:5a:13:
21:07:58:04:6e:77:cd:e0:30:82:95:15:cd:cc:2d:
91:34:61:03:ca:12:d8:0f:0b:38:a2:0a:63:5c:ae:
99:f9:b0:88:dd:d8:1a:03:38:5a:b3:fc:f0:ea:68:
fe:50:36:fb:ab:19:3a:ca:72:35:38:2c:1c:e4:35:
e4:8e:54:4f:4b:76:73:8a:05:e9:23:cc:6d:7b:98:
c9:79:10:44:67:e2:9e:ae:9c:ab:93:f6:25:bd:e9:
ec:8c:43:fd:08:5b:4e:cd:be:f8:16:62:da:57:1e:
54:68:33:91:8e:cb:54:0b:b8:8e:3f:75:2d:ea:8a:
d8:9b:57:b0:75:c2:06:97:88:1c:3d:a5:15:3e:b8:
70:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:38:C3:50:BE:CB:C8:15:C3:32:CE:FC:1E:5E:02:DD:F9:59:16:7F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230332e3132322e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.203.122.0/24
Signature Algorithm: sha256WithRSAEncryption
53:21:3b:04:d7:c5:5d:09:fa:b9:7d:dc:18:5d:2a:6d:08:7a:
94:c4:32:ce:d3:de:f9:73:30:79:b4:77:b8:20:d3:31:b5:10:
de:31:b8:39:ab:d2:06:a7:6d:19:a6:7d:1d:bc:41:f7:50:ea:
a9:89:29:56:80:93:64:32:01:e0:77:97:a2:21:50:c5:f6:53:
76:48:4a:cd:39:fa:dc:46:f3:a1:93:b3:d5:3b:25:dc:15:6e:
0f:c6:70:f6:cd:b3:06:5f:28:9f:1b:38:44:c4:20:40:81:96:
ef:de:ba:c8:fe:07:70:8e:07:85:68:c1:93:4e:07:9f:1f:56:
aa:a0:c5:6f:56:0d:93:db:c2:e1:c1:32:f5:cc:c4:df:76:85:
39:e8:c2:f4:d7:17:f4:1a:dc:c8:9c:a0:46:30:a7:58:89:03:
a9:14:33:73:db:b4:68:04:c2:de:16:05:c8:25:98:5b:f9:9d:
e4:d2:f8:56:50:86:65:48:07:6b:c8:8c:55:10:ab:90:2f:f6:
4e:0f:e6:2e:f5:43:83:c9:bf:c9:4a:87:78:9b:38:17:cc:79:
96:1f:2f:6a:a0:d5:c0:d5:4d:af:11:7f:e1:e2:6b:06:7d:04:
05:68:25:e2:1c:3d:08:75:e1:89:fe:85:f5:3d:f3:9c:7a:02:
30:3f:29:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 07:41:26 2026 by rpki-client