Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230372e3234392e302f32342d3332203d3e20313336373837.roa
File: 3138352e3230372e3234392e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier: WFeSbSeczlUfZKURLZS2HzyiulAykDqUuvIYzBEc9K4=
Subject key identifier: 12:33:D9:1A:AC:AB:08:87:88:98:A7:09:79:86:51:07:07:27:7B:4F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0E416FB222FE1EDD8904CE9BFDD08DDC1456BCAA
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230372e3234392e302f32342d3332203d3e20313336373837.roa
Signing time: Fri 24 Jul 2026 15:26:54 +0000
ROA not before: Fri 24 Jul 2026 15:21:54 +0000
ROA not after: Fri 23 Jul 2027 15:26:54 +0000
asID: 136787
IP address blocks: 185.207.249.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 17:17:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:41:6f:b2:22:fe:1e:dd:89:04:ce:9b:fd:d0:8d:dc:14:56:bc:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 24 15:21:54 2026 GMT
Not After : Jul 23 15:26:54 2027 GMT
Subject: CN=1233D91AACAB08878898A7097986510707277B4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e1:b1:fd:b2:73:37:12:a8:29:65:13:3f:8b:
65:aa:7b:54:d1:5e:d4:f0:b7:61:e5:02:14:c4:8d:
f1:a0:c1:2a:1d:fc:15:7b:c7:eb:4c:97:8c:98:5e:
66:43:24:f4:d0:f1:70:2e:f6:8c:2c:f8:d3:32:8d:
88:7b:b5:7c:da:5a:37:93:e6:e1:33:42:4b:40:86:
87:b0:7b:5d:15:89:7c:73:71:17:2a:b3:0d:51:6a:
b6:b3:df:d9:62:81:4a:cf:eb:c7:e9:0e:7f:56:23:
ce:fe:2b:39:36:f7:dc:89:e1:c0:dd:8b:6e:94:40:
9f:38:f0:49:a6:71:a6:dc:76:81:d9:7e:1d:16:c5:
83:2d:d0:0c:e3:62:95:8c:72:c2:eb:15:25:c8:78:
cc:3c:6f:91:8e:90:7d:64:d5:4b:53:f8:98:42:5d:
78:35:1c:b6:06:47:ff:56:66:b8:38:ee:48:3b:f1:
25:94:a4:46:b7:7b:73:c7:c3:d2:a9:38:1a:7e:f6:
4e:a4:ab:4e:9e:fc:9d:00:95:19:1a:a8:16:47:9d:
ea:a2:57:2d:50:39:f2:c7:38:cc:bd:18:45:64:c2:
3c:d8:31:35:88:01:96:71:b2:2b:5e:71:de:1d:85:
a0:07:33:21:50:81:8c:1a:6f:4f:3b:af:be:bb:6d:
a2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:33:D9:1A:AC:AB:08:87:88:98:A7:09:79:86:51:07:07:27:7B:4F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230372e3234392e302f32342d3332203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.207.249.0/24
Signature Algorithm: sha256WithRSAEncryption
02:6d:3f:94:25:71:98:e6:0d:a1:aa:06:2a:eb:e5:6c:07:ad:
c0:a5:e8:4a:23:18:28:a0:94:38:9a:97:b6:22:52:a0:43:9d:
62:c7:b5:74:10:84:97:99:cf:89:7b:51:3b:aa:3b:88:8d:9d:
4e:fe:8d:44:e6:c1:b1:b7:be:a7:92:ca:f6:78:58:75:a3:56:
65:aa:41:b0:53:8a:5c:ad:c7:e7:25:a0:4b:0b:a4:33:36:83:
a4:9a:0e:71:3b:92:ea:7e:eb:88:b3:c7:a1:68:4c:c4:35:dc:
99:74:26:53:37:7c:0b:66:67:f4:5f:02:d3:50:2f:57:54:fa:
fc:64:f3:c7:66:80:13:dc:31:73:78:db:c1:da:ee:98:10:0b:
39:5c:e2:50:fc:48:10:ed:4f:ed:c4:87:b9:1c:1b:ff:53:99:
78:2c:6d:3e:2b:a8:46:9a:8f:b5:53:46:75:78:74:cc:35:59:
41:e0:c9:be:51:28:54:4e:5f:1a:21:c7:f1:94:e9:70:f1:37:
99:42:6c:98:29:f0:87:d1:b0:4d:12:dc:e5:5c:c8:40:04:84:
fb:ac:32:8e:7c:1b:72:77:81:1b:f4:15:4b:b9:fb:25:9c:30:
7b:63:84:f9:a1:be:0c:13:63:d1:a0:f5:21:6b:4d:27:96:cf:
c1:9b:cf:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:14:21 2026 by rpki-client