Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232322e3133362e302f32342d3234203d3e20313336373837.roa
File: 3138352e3232322e3133362e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: qn4teEFSOobkH7d21cTSpSPfo/5kfa1DS7HnU4G0Oao=
Subject key identifier: C4:46:C7:4C:EC:27:3B:03:35:64:E0:70:4B:A9:1E:9B:43:44:97:22
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3DDAAEC48223855BC1ACBEE56ACC39F18736C04D
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232322e3133362e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 30 Aug 2026 21:28:21 +0000
ROA not before: Sun 30 Aug 2026 21:23:21 +0000
ROA not after: Sun 29 Aug 2027 21:28:21 +0000
asID: 136787
IP address blocks: 185.222.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 17:17:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:da:ae:c4:82:23:85:5b:c1:ac:be:e5:6a:cc:39:f1:87:36:c0:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 30 21:23:21 2026 GMT
Not After : Aug 29 21:28:21 2027 GMT
Subject: CN=C446C74CEC273B033564E0704BA91E9B43449722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f9:08:42:cb:ad:71:3b:a5:46:c2:a8:c8:69:
66:79:8d:7d:1a:21:d9:fc:88:e2:d8:c1:d4:07:19:
ef:aa:de:51:30:8d:7b:87:b4:0f:2a:c9:8e:3f:7d:
b7:da:38:dd:f4:9a:16:3e:43:c3:e8:e9:22:99:ca:
ef:e3:19:0f:9b:47:e2:87:1e:48:41:dc:b6:43:aa:
0e:a5:10:ad:03:7b:5d:6b:15:41:82:8e:c9:9a:fc:
31:63:d9:c6:67:2c:a3:98:e4:b6:03:fc:1e:24:a3:
bc:18:b9:6d:a2:25:63:23:1c:35:88:b0:ad:78:15:
97:9e:a0:39:e7:03:19:cf:1c:f1:c8:92:84:07:21:
5f:b2:50:f9:cc:83:1d:99:e0:b1:68:be:fa:c6:db:
db:03:f2:7d:b2:fb:f7:05:2e:e8:26:cf:25:3c:d3:
1d:dd:e1:77:94:69:2d:58:9a:43:6d:87:cf:56:5f:
8f:87:17:30:39:1d:f5:78:98:8b:82:95:f1:8b:bd:
93:b2:87:4e:6b:67:8f:e2:5c:d0:79:16:ab:f0:49:
54:b5:22:0e:66:38:8a:48:58:96:d2:fc:97:e4:e4:
61:2e:af:1d:2f:8b:5b:ae:21:7d:67:83:dc:b9:3f:
10:da:1b:7a:40:dd:4d:ab:d9:11:e7:12:22:ed:7a:
75:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:46:C7:4C:EC:27:3B:03:35:64:E0:70:4B:A9:1E:9B:43:44:97:22
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232322e3133362e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.136.0/24
Signature Algorithm: sha256WithRSAEncryption
88:80:03:e0:71:13:49:2d:e5:5e:a0:98:52:38:86:e3:35:ea:
d6:49:ef:5f:1c:76:34:b9:cd:d9:1c:b2:5d:24:25:7e:b7:5e:
0b:e7:b8:6e:be:a3:95:b4:95:c6:12:a4:b8:ad:85:63:8b:00:
f0:8f:6e:51:7c:e6:3c:a9:21:de:31:ca:bb:75:4c:50:f3:2e:
8c:a9:11:d5:fa:98:df:80:58:3c:ac:9c:93:3b:d6:15:6e:14:
42:cd:7d:8a:34:bd:66:e5:39:a2:8c:93:dd:d8:b5:1e:9d:05:
ed:a1:fd:28:2e:bc:b6:a8:0d:5b:bc:d3:09:7e:62:7b:10:36:
03:96:9e:c4:8d:90:67:97:ec:52:7c:0d:53:24:dd:93:20:63:
25:a9:6e:41:3d:69:3c:e0:be:fb:94:7b:3d:12:b9:c5:e5:ba:
ee:9c:ce:13:9f:32:30:4b:14:7f:c9:bf:92:fd:7b:c9:51:2e:
53:8b:14:1f:16:83:bf:15:ac:e5:78:0e:9f:cc:ca:1e:12:8a:
be:fe:51:4a:d5:66:61:01:c1:14:91:da:e9:4f:10:f7:a9:c8:
8b:b4:a7:7d:60:3f:e1:46:45:12:98:bd:51:d3:48:0a:33:0b:
7f:78:79:c1:01:4e:32:32:d8:41:e1:84:a4:1a:52:bf:e9:f8:
ed:da:e3:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 08:25:10 2026 by rpki-client