Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232322e3234332e302f32342d3234203d3e20313336373837.roa
File: 3138352e3232322e3234332e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: YwbLB1wGq8cEgd17s7vK4VwCdv0pk018Phv196r+xNk=
Subject key identifier: 79:1D:B4:FC:01:DA:0C:C4:08:27:A9:51:07:A6:D9:43:B9:22:1C:83
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 44FA9A776E79C2AAB77D12E5E19C6A0ED6F05636
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232322e3234332e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 24 Jul 2026 15:26:45 +0000
ROA not before: Fri 24 Jul 2026 15:21:45 +0000
ROA not after: Fri 23 Jul 2027 15:26:45 +0000
asID: 136787
IP address blocks: 185.222.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:fa:9a:77:6e:79:c2:aa:b7:7d:12:e5:e1:9c:6a:0e:d6:f0:56:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 24 15:21:45 2026 GMT
Not After : Jul 23 15:26:45 2027 GMT
Subject: CN=791DB4FC01DA0CC40827A95107A6D943B9221C83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8e:db:0d:4f:67:6f:e7:d9:ce:31:c5:f9:f9:
48:a3:e4:1c:f5:83:c8:09:69:de:04:be:18:89:9b:
69:75:0b:8b:7b:9c:57:79:9c:24:fa:f4:74:55:89:
80:69:fd:63:c4:f1:a8:40:87:1f:12:a5:13:20:59:
88:a8:91:67:74:c0:bf:3f:a9:f3:81:68:cb:ca:fa:
04:62:65:4d:c5:c4:07:5b:dc:9e:02:fa:84:27:9b:
60:e6:74:6b:62:5f:81:89:10:b6:70:a0:57:4d:d6:
e0:87:e0:f0:84:1a:e0:08:f3:77:50:c0:ce:87:78:
ae:35:e3:55:a7:46:d2:28:9a:e0:05:2d:69:94:3b:
69:1e:25:07:43:92:6a:2d:5d:fb:78:62:c5:8a:7d:
83:3e:db:bf:aa:a5:31:8a:b6:6c:83:aa:54:6f:5f:
0d:8b:84:f6:01:9b:ba:8d:73:28:ee:77:ab:65:65:
66:4d:48:80:0f:e8:a8:fc:be:7b:12:06:58:2d:85:
91:f2:06:12:b6:0a:09:bf:d7:a6:8f:81:ee:a1:54:
53:1c:a0:ce:ec:1d:7c:07:39:05:b1:ef:6b:d3:ad:
70:c5:bd:d7:95:08:0c:09:8d:cf:e3:77:4f:47:7b:
80:48:77:d2:c5:55:b9:16:6e:c7:39:e9:73:1f:38:
12:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:1D:B4:FC:01:DA:0C:C4:08:27:A9:51:07:A6:D9:43:B9:22:1C:83
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232322e3234332e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.243.0/24
Signature Algorithm: sha256WithRSAEncryption
68:82:fe:a0:f9:79:ef:f0:63:9a:01:2f:0b:b3:00:30:2d:da:
02:1d:24:38:2b:0f:d8:c9:21:f1:d7:8d:67:2e:44:46:22:e7:
93:57:9c:98:1b:5a:aa:7b:46:57:4f:fa:94:b9:94:a0:eb:8d:
eb:46:aa:a4:fa:e9:95:e8:9f:58:10:47:06:9b:1b:82:3b:62:
64:e8:43:a5:44:3d:8a:38:cb:e8:0e:07:0d:c4:1d:90:ee:08:
4b:63:e1:76:fb:47:03:64:26:23:76:dc:d5:2a:92:e0:a3:8a:
9b:cc:4c:72:dd:44:6d:6b:b1:42:0a:36:ad:9f:3a:d2:fd:07:
2b:6d:10:6c:2c:c3:48:27:0f:e5:3e:5d:4c:35:ac:1e:5d:38:
af:ab:e1:32:35:9b:28:3a:65:19:6a:d4:cd:4d:aa:0c:3a:69:
56:ab:58:55:98:99:0f:5b:05:de:90:05:fe:e3:0e:cc:3b:0d:
6d:59:7d:fc:fc:ed:3a:99:f2:a7:94:a8:58:a8:92:17:1d:81:
ac:a9:29:b0:82:e5:7b:a7:d1:45:7a:53:99:54:2b:ea:5e:41:
88:b1:a5:fe:49:1c:6e:99:b5:81:0f:86:7e:c8:6e:86:6f:c0:
5c:5a:50:2e:44:dc:d2:46:6c:fc:8c:21:b8:ba:a3:c9:51:85:
6e:5b:0e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:53:21 2026 by rpki-client