Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230392e3233312e302f32342d3234203d3e20313336373837.roa
File: 3138352e3230392e3233312e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 8UgnWOuXHUyU2aqYQJOFHSW26Poj+y8umxMz71/dMsw=
Subject key identifier: 24:9C:3A:C4:4F:61:55:A8:DA:B0:3F:7C:28:E9:C3:02:2E:23:EE:CD
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 736EF196A00437D92317FC8D5DBB16B4DE3F4AAF
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230392e3233312e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 30 Aug 2026 21:28:18 +0000
ROA not before: Sun 30 Aug 2026 21:23:18 +0000
ROA not after: Sun 29 Aug 2027 21:28:18 +0000
asID: 136787
IP address blocks: 185.209.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:6e:f1:96:a0:04:37:d9:23:17:fc:8d:5d:bb:16:b4:de:3f:4a:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 30 21:23:18 2026 GMT
Not After : Aug 29 21:28:18 2027 GMT
Subject: CN=249C3AC44F6155A8DAB03F7C28E9C3022E23EECD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3b:ad:71:cc:f1:f5:d5:c2:19:ab:bb:f7:29:
8e:cd:2d:9c:f6:cb:73:89:4f:8d:e6:c7:61:27:19:
53:26:5d:fe:9c:45:e9:64:17:28:ea:f0:b9:80:9e:
16:0a:ff:40:3b:5c:ce:31:18:a0:4f:db:0c:4f:5c:
40:a0:27:3d:d1:3d:40:4c:66:0f:42:bd:c0:76:d4:
e4:53:96:b8:0b:2e:9a:69:5f:f3:19:fc:ae:ce:d8:
cf:6d:d5:a0:f3:a0:22:64:9d:fd:90:66:e0:7e:ea:
eb:53:a8:20:c1:fc:f0:83:20:8e:94:da:55:7e:91:
35:23:8e:6f:ff:4a:30:ca:dc:27:2d:4d:f9:a4:19:
5a:cb:79:6d:ff:9c:f1:c9:ad:69:ba:10:3c:35:3b:
65:00:6a:bc:8f:56:7d:e6:b6:92:c6:50:91:3b:4b:
f4:9a:4a:44:c9:f8:f6:4d:04:c6:12:f3:7e:7a:d1:
fe:5e:b7:1a:b4:48:74:28:79:64:7f:47:85:28:a5:
4b:e0:9d:2a:63:43:86:51:ac:b3:fe:20:5f:b3:e9:
3e:60:91:1a:80:77:5c:c8:e8:c8:13:7e:7b:81:c8:
cd:a8:d4:de:24:a0:85:83:ea:f8:4b:3c:ee:ab:4a:
79:54:f8:10:06:3a:29:ba:c5:87:ed:df:d5:46:bb:
b1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:9C:3A:C4:4F:61:55:A8:DA:B0:3F:7C:28:E9:C3:02:2E:23:EE:CD
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230392e3233312e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.209.231.0/24
Signature Algorithm: sha256WithRSAEncryption
09:75:ae:c1:8a:72:f1:10:c8:41:77:b0:70:5e:6b:11:e7:e1:
ac:a4:07:69:d1:aa:43:40:44:04:b3:9c:b9:70:0d:1a:b8:ef:
6a:66:73:f3:fa:71:c5:41:47:0e:17:e5:68:3c:4f:d0:2a:6c:
39:c3:37:dd:bb:ea:a4:77:f9:ac:60:52:ec:ca:bb:8c:d7:30:
8b:31:d8:ff:0e:d3:d1:b4:ef:7a:fd:b9:0d:39:3f:d2:c7:1c:
9b:06:98:32:84:81:ce:be:a0:f1:89:2c:39:18:65:3f:e2:38:
a5:7b:de:08:af:a8:ed:d4:6c:4c:56:3b:48:a9:be:5f:63:69:
6b:51:7c:91:f3:cd:43:69:b0:ad:53:6a:d0:76:87:46:eb:60:
d3:e2:5b:b5:0b:67:c0:e0:2d:f3:0c:6f:4c:9e:20:18:11:ba:
69:5e:1d:a5:80:71:6d:3d:e2:9f:9d:14:0b:e2:c6:1f:d1:20:
ee:3f:ed:ca:f7:e5:57:02:4a:92:3a:e2:35:3b:ed:7b:d3:46:
70:79:76:b3:6a:4d:eb:b1:59:be:7c:7f:8c:91:32:08:24:56:
8e:41:d1:e5:3b:d8:23:93:b8:60:49:10:87:e6:11:94:e7:00:
26:5a:18:a5:84:8f:a1:60:80:a3:2d:e8:bb:64:58:8c:8d:ba:
b5:45:68:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:58:51 2026 by rpki-client