Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230392e3232322e302f32342d3234203d3e20323033333830.roa
File: 3138352e3230392e3232322e302f32342d3234203d3e20323033333830.roa (raw, json)
Hash identifier: SXlyvGJU5E6F7LdZSqYN81utyEsxjwltAJ4GyHjcEII=
Subject key identifier: 94:1A:85:3C:22:57:D7:8E:FE:52:AA:1D:10:A8:77:4F:64:49:96:EB
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 31158F3CC395C1F087BDA5BB35F38235447589E9
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230392e3232322e302f32342d3234203d3e20323033333830.roa
Signing time: Wed 30 Sep 2026 13:15:29 +0000
ROA not before: Wed 30 Sep 2026 13:10:29 +0000
ROA not after: Wed 29 Sep 2027 13:15:29 +0000
asID: 203380
IP address blocks: 185.209.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 20:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:15:8f:3c:c3:95:c1:f0:87:bd:a5:bb:35:f3:82:35:44:75:89:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 30 13:10:29 2026 GMT
Not After : Sep 29 13:15:29 2027 GMT
Subject: CN=941A853C2257D78EFE52AA1D10A8774F644996EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:53:45:b5:2a:3e:c8:f1:47:dc:2d:38:c4:29:
1d:84:70:60:0a:cc:91:cb:2e:93:bf:a1:3a:17:d5:
4a:dd:3d:58:e2:7f:74:59:3b:ec:8e:de:69:3a:01:
bc:5c:da:5b:56:5b:4b:fb:71:15:57:61:ab:1b:7d:
68:bb:8e:f1:c8:8e:ab:7b:bf:67:b0:a0:8f:03:c7:
19:aa:d8:9a:a8:ef:67:ae:09:82:1f:d1:dc:81:01:
d1:5a:ee:5a:1d:d1:df:89:f0:a3:d0:d8:51:74:6c:
f9:a4:55:74:43:ba:5d:8b:d3:94:c9:ae:50:a9:ac:
60:03:11:eb:87:57:a1:a8:57:06:9b:c5:54:ef:66:
75:16:a6:ac:26:63:96:a5:c3:c0:f4:ff:a6:03:c5:
ca:09:88:fb:71:52:f0:31:24:26:77:f4:27:79:6a:
ad:05:89:ca:64:72:73:d5:78:d9:0d:00:09:8d:81:
56:30:24:6c:92:d3:be:d9:58:40:78:b6:a8:fb:5a:
b2:21:cf:48:2e:f2:de:a2:06:a3:a6:2f:be:44:55:
b9:8f:c8:ef:0a:8d:b7:74:29:1d:ae:ab:f0:c7:45:
47:5c:a6:5f:03:8c:cf:0f:66:5a:39:1c:a5:4f:2f:
e9:67:b6:6e:c7:e4:9d:2a:c3:8e:8a:f6:95:15:3b:
df:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:1A:85:3C:22:57:D7:8E:FE:52:AA:1D:10:A8:77:4F:64:49:96:EB
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230392e3232322e302f32342d3234203d3e20323033333830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.209.222.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:21:03:de:ec:2c:71:51:cb:d0:9d:26:26:6b:58:09:67:8b:
01:a2:05:46:a8:1a:7a:87:5f:e1:06:b3:a8:ac:6a:7e:59:29:
30:cd:1c:ec:aa:21:54:5b:c4:d6:2e:c0:3d:87:81:6e:4a:50:
d4:4a:41:65:6b:22:17:bd:4a:9d:58:f4:01:d7:68:18:26:76:
c8:87:b8:45:b0:cb:0b:88:fc:48:3a:93:6e:3b:78:59:d4:65:
97:c0:ae:c4:7d:90:2e:7a:e1:f6:77:b2:29:a7:1f:ed:df:94:
43:41:a5:76:d1:d4:c3:4a:5b:bb:a9:c8:36:de:21:77:01:2e:
72:fa:9f:7b:de:c1:81:9b:d5:82:fd:90:c2:ba:e6:43:f8:7f:
cc:42:38:e2:82:0d:e8:15:a6:ce:39:8f:01:0c:c7:b4:03:44:
98:09:d3:53:49:3b:42:78:4c:f5:e4:03:a2:b6:5e:2a:da:11:
b6:fb:6c:15:37:d1:d3:89:c4:f1:29:6c:1a:11:88:94:f1:f3:
13:d1:2b:6f:70:39:dd:00:bf:36:03:86:16:38:8d:d1:4c:51:
56:07:bc:79:05:36:1c:b8:3c:be:9d:f5:91:ee:71:1d:23:f4:
df:28:25:39:62:8e:bd:d5:d4:48:a1:c3:f8:45:53:82:3b:71:
ba:c2:0d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:51:18 2026 by rpki-client