Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231372e3132342e302f32342d3234203d3e20323033333830.roa
File: 3138352e3231372e3132342e302f32342d3234203d3e20323033333830.roa (raw, json)
Hash identifier: bueQdsNBRo+Y6CDyE4awjIO7n+Nv53cjA2bgic7mlEc=
Subject key identifier: 06:DC:6A:D3:2A:AA:49:31:86:72:FB:74:3E:8E:55:99:83:4D:40:8B
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 537E9172B5A5B0B5881FBA80E2FDA8FDBAB18FCB
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231372e3132342e302f32342d3234203d3e20323033333830.roa
Signing time: Wed 30 Sep 2026 13:15:12 +0000
ROA not before: Wed 30 Sep 2026 13:10:12 +0000
ROA not after: Wed 29 Sep 2027 13:15:12 +0000
asID: 203380
IP address blocks: 185.217.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 20:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:7e:91:72:b5:a5:b0:b5:88:1f:ba:80:e2:fd:a8:fd:ba:b1:8f:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 30 13:10:12 2026 GMT
Not After : Sep 29 13:15:12 2027 GMT
Subject: CN=06DC6AD32AAA49318672FB743E8E5599834D408B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ca:b9:cd:56:18:d6:92:e1:60:81:9d:b9:3d:
e7:d4:ee:73:59:56:6f:37:05:71:59:92:be:93:6e:
fa:92:5f:36:4f:25:1b:67:e0:57:97:ec:6e:a2:f1:
99:99:f6:f3:18:2d:ba:16:b6:11:48:3d:84:21:79:
f2:53:b0:db:36:37:ad:3a:d5:50:d3:d7:15:3e:59:
9e:78:8c:bb:22:6a:28:d9:da:ad:44:86:aa:7d:70:
41:90:82:fe:c1:3f:84:bb:19:b0:fe:85:8f:8b:a1:
8f:99:9b:ef:b4:7c:a1:a1:06:de:11:06:bc:1d:b3:
6b:ac:b5:c6:a7:3e:cc:6b:00:11:0d:bd:f2:de:b3:
46:27:19:6c:9c:a8:a3:cb:dd:3b:e2:f1:66:ad:f4:
38:a7:5a:ac:a3:1b:52:88:e5:a4:f5:95:ae:0e:dd:
33:e3:71:93:ca:55:0d:af:7f:d5:94:92:e5:c9:58:
5c:cf:aa:69:d1:f2:d8:4a:82:28:a2:ed:ef:6f:e8:
35:38:c2:57:c1:be:47:85:42:8e:bf:ff:69:b5:a7:
ce:94:76:ab:a5:29:e0:6a:7d:55:5b:2b:a6:2b:df:
84:17:25:b5:71:76:2a:9e:26:67:f2:f0:97:5b:82:
b8:be:be:fe:1f:8d:bb:d7:4b:4b:d7:07:02:08:9a:
9d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:DC:6A:D3:2A:AA:49:31:86:72:FB:74:3E:8E:55:99:83:4D:40:8B
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231372e3132342e302f32342d3234203d3e20323033333830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.124.0/24
Signature Algorithm: sha256WithRSAEncryption
55:2f:a3:e2:71:0c:83:c5:8c:81:8e:b0:af:14:7d:10:2d:11:
01:a3:9f:14:d3:1f:0b:16:30:cc:fd:17:80:82:11:51:ae:ab:
74:ee:a4:5d:2c:c7:bc:16:b4:d2:2e:fa:0d:51:b5:31:e2:f5:
86:00:e8:21:bb:d2:7b:b0:da:8a:e9:a7:29:a3:9f:36:14:07:
ac:16:6d:35:36:4b:a9:ed:a0:5e:8f:ff:cb:84:c6:ee:37:ca:
63:ac:c8:e2:b8:08:d1:db:30:fc:c4:50:94:95:bd:45:c0:d4:
ec:c8:34:7f:25:21:d2:3b:5f:c3:37:4d:e9:eb:64:10:eb:86:
bd:02:72:42:d1:9b:3f:a4:43:59:b5:b5:53:9c:6d:c4:cd:69:
47:de:45:7a:59:5a:80:dc:76:21:56:29:a4:88:93:fa:95:e0:
70:49:e4:1f:ec:f1:1c:81:a9:7d:a7:07:2b:fe:d1:dd:ff:c2:
80:65:30:2d:0d:9b:88:d5:1f:9a:53:f3:1a:47:4d:13:a5:e0:
d8:66:94:f6:18:14:43:be:3f:c7:93:3a:ec:ad:a4:10:c7:de:
d7:e3:3f:8b:0a:c1:64:26:29:44:a9:94:03:e5:fb:b1:75:fa:
ab:44:48:5f:d4:86:4c:8d:6e:c0:55:c6:91:f8:40:3f:19:e4:
3c:cb:6d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:51:11 2026 by rpki-client