Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231362e37322e302f32342d3234203d3e20313532353836.roa
File: 3138352e3231362e37322e302f32342d3234203d3e20313532353836.roa (raw, json)
Hash identifier: aw2mrzRSYS2b+vwPAdEiDn8ugceU588m9ltANI0H/wM=
Subject key identifier: E6:C5:98:0F:11:2E:34:44:B0:C3:A8:D8:D0:95:D1:EE:6F:F7:34:2D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0E6E05A07EEFAC55A74C388365FA3517B6BB43AB
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231362e37322e302f32342d3234203d3e20313532353836.roa
Signing time: Fri 10 Jul 2026 14:26:11 +0000
ROA not before: Fri 10 Jul 2026 14:21:11 +0000
ROA not after: Fri 09 Jul 2027 14:26:11 +0000
asID: 152586
IP address blocks: 185.216.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:6e:05:a0:7e:ef:ac:55:a7:4c:38:83:65:fa:35:17:b6:bb:43:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 10 14:21:11 2026 GMT
Not After : Jul 9 14:26:11 2027 GMT
Subject: CN=E6C5980F112E3444B0C3A8D8D095D1EE6FF7342D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a7:b6:87:39:03:20:ef:99:da:82:55:c6:a2:
0a:53:9c:a4:d4:7a:74:51:fe:17:f8:17:1b:2e:31:
87:1f:5b:35:70:79:a7:c8:98:a6:b5:cc:92:10:e9:
97:fd:b4:30:bd:13:7f:04:9e:ce:8b:7d:93:a1:27:
ce:64:e7:c5:32:f3:89:18:19:e9:6f:b4:0e:50:b4:
3f:8a:5a:39:68:c9:76:5a:2b:17:8f:a1:30:6d:97:
aa:f8:7f:f4:26:e8:a5:45:30:5c:84:d4:f6:65:2c:
62:9c:18:06:51:c8:8e:72:1e:6d:39:ee:29:0f:11:
80:c1:48:ef:47:91:c2:be:f3:1f:46:71:7f:fa:a5:
44:5e:4f:dc:1b:3b:10:fa:a0:8f:19:ce:d5:81:5f:
ff:0d:d5:80:7b:b2:57:e8:0f:01:93:bc:64:9c:75:
08:59:5a:ae:81:af:f0:a0:4f:08:59:15:93:f1:64:
5c:e2:f6:bd:29:e3:d7:f5:96:0e:ce:15:d6:81:e3:
f3:0e:a3:0f:4e:d3:9c:93:e0:a6:1f:95:10:c8:dd:
5e:20:73:44:ff:6b:20:61:64:de:45:02:1e:c2:1e:
a6:71:f4:8f:27:ee:b8:35:ad:96:15:20:be:e7:bc:
1d:8c:d2:b5:2d:24:a3:8e:bd:1f:f1:5e:d2:2e:e9:
ff:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C5:98:0F:11:2E:34:44:B0:C3:A8:D8:D0:95:D1:EE:6F:F7:34:2D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231362e37322e302f32342d3234203d3e20313532353836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.216.72.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:bc:77:9d:40:45:78:9a:ea:de:be:4e:74:19:f9:11:cf:df:
3b:da:6d:86:1a:85:21:6d:cb:6d:b3:6c:ec:df:ad:67:b2:dc:
38:1a:a2:3e:e4:95:5b:6f:9a:fe:c2:8a:f6:e8:da:d7:bd:92:
a8:21:9b:48:c5:cd:d3:41:93:a6:b6:f2:70:13:7c:34:b1:c8:
fe:36:a1:8e:c4:4a:c8:a6:df:94:54:1f:56:d8:fe:46:e7:ab:
fd:fe:14:62:89:d6:bf:57:8f:4c:ab:6a:17:b7:61:80:bb:87:
11:bb:13:0d:4f:5a:fd:9a:20:75:72:cb:92:62:56:d2:7e:e6:
a8:29:be:1c:81:5e:61:d9:e6:c1:a0:b0:e5:11:ba:ad:9c:d4:
87:b5:7a:11:33:1c:f0:11:6d:c6:c0:34:97:99:df:e6:33:d1:
ef:10:26:62:6b:6a:ee:43:58:41:2a:df:63:7b:47:4a:9a:25:
b4:28:b0:ab:6b:f9:cd:f7:52:3b:dd:ed:00:0d:7a:3e:29:01:
6e:72:c2:ed:61:b2:5c:ed:69:02:03:55:d2:cb:2d:c2:55:6a:
00:42:97:de:72:5a:6b:75:47:30:ad:dc:1a:91:b8:68:de:f4:
32:79:44:03:b2:86:71:f4:7e:b3:f2:18:af:c4:b1:d3:0b:6c:
e2:c1:df:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:56:42 2026 by rpki-client