Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231392e3134302e302f32342d3332203d3e20313336373837.roa
File: 3138352e3231392e3134302e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier: z5CpmxZFtYt5OutZm0Mm7Vi1x5ZrfovAMaRwHYoddxI=
Subject key identifier: 90:A7:CD:C0:2F:22:E7:E2:89:E8:DC:3C:86:01:8C:5A:A5:35:CD:45
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0364E23E4DDBAE14AFA55D65A1112980F931FA97
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231392e3134302e302f32342d3332203d3e20313336373837.roa
Signing time: Fri 24 Jul 2026 15:26:49 +0000
ROA not before: Fri 24 Jul 2026 15:21:49 +0000
ROA not after: Fri 23 Jul 2027 15:26:49 +0000
asID: 136787
IP address blocks: 185.219.140.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:64:e2:3e:4d:db:ae:14:af:a5:5d:65:a1:11:29:80:f9:31:fa:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 24 15:21:49 2026 GMT
Not After : Jul 23 15:26:49 2027 GMT
Subject: CN=90A7CDC02F22E7E289E8DC3C86018C5AA535CD45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d1:f8:d2:8a:02:ab:d4:56:a6:fc:a5:58:12:
e5:16:cc:7c:02:ce:e5:b0:81:c4:44:d7:e4:36:3e:
4e:9a:43:07:84:78:77:bb:57:69:5f:6c:e2:c8:9d:
66:a8:21:d4:63:7a:79:51:e8:54:58:e0:9e:99:31:
58:8b:93:78:64:75:45:c1:48:73:df:11:03:30:6c:
13:8a:cd:e1:7b:d0:2f:a6:2a:3c:7d:84:c2:17:10:
c1:d8:60:e4:39:fd:9a:98:f3:aa:2d:db:5a:7c:0c:
57:c1:dc:08:f6:10:7a:89:fb:0b:c9:1e:78:06:64:
14:37:e3:37:2c:32:2c:88:78:87:35:14:f0:e3:f4:
22:72:70:f5:cd:7d:84:ce:9c:f3:8b:53:a9:1c:fd:
fb:ba:6e:5f:57:17:a4:a2:38:7b:91:2f:0b:ed:0e:
80:40:8c:f0:ee:43:2d:ff:c2:54:f1:33:59:0f:2f:
ec:89:91:e4:0a:42:29:8f:ed:b1:be:d6:92:cc:94:
72:ab:9e:5e:a8:95:ad:0e:e4:f4:6a:78:75:18:94:
dd:4e:16:ca:b1:a2:c6:98:ad:f3:25:38:e2:58:cd:
8d:d9:96:3b:72:00:a9:5d:f3:77:24:1f:19:8f:3c:
25:30:6f:5f:1e:3b:3f:0e:3c:0e:75:81:6b:ed:eb:
35:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A7:CD:C0:2F:22:E7:E2:89:E8:DC:3C:86:01:8C:5A:A5:35:CD:45
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231392e3134302e302f32342d3332203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.219.140.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:a6:8f:64:87:ed:68:0a:93:c5:1e:56:5f:c2:7a:9a:3f:68:
69:f1:67:d2:32:27:4c:ad:77:54:e3:a2:b2:83:14:9e:99:4f:
e2:9f:3c:79:68:e0:94:80:a6:95:35:2b:b5:25:cf:11:c7:c2:
94:a7:06:92:ac:e3:19:e6:22:f7:ab:1f:4a:62:18:0e:ca:e6:
fd:79:8e:b7:d5:3d:43:58:bf:2b:9b:18:2c:08:d6:09:83:7b:
61:84:f6:21:3e:30:5c:56:3c:3b:48:79:f9:63:22:d3:46:ec:
93:36:f1:32:bb:66:d6:7f:e2:c8:34:ab:93:9e:0f:02:c7:10:
7c:d5:37:6b:49:f2:1c:54:ed:30:d1:7d:f8:7d:32:5c:36:ae:
65:ab:2c:57:40:16:46:b3:99:99:3e:5c:84:52:43:fc:b6:0a:
22:29:00:14:aa:a1:e4:18:ff:ee:c7:c4:14:28:cb:6c:a0:b8:
9e:bb:05:c6:37:38:7f:b1:ba:87:98:47:c9:8b:cf:4f:a5:64:
06:e5:98:93:a5:7c:59:01:b2:42:e6:e8:d7:c1:a5:18:ba:81:
e6:b1:30:4a:94:7e:25:b1:0f:40:f8:b9:95:78:ff:6d:5b:3a:
47:bf:2c:e7:e3:e8:dc:cf:30:58:bf:52:61:cf:24:95:0e:ce:
c9:d5:bd:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:14:33 2026 by rpki-client