Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232352e3133372e302f32342d3234203d3e20313336373837.roa
File: 3138352e3232352e3133372e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: JTPrHcAEs8otB605hsHM6AXw2hVVn8/KDA0AsmWeMOs=
Subject key identifier: C9:36:41:E6:85:AA:6E:36:B0:16:D6:7E:88:85:38:D7:41:B9:CD:82
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 09C7A38D254DCDEB90DB38B5B39EF4DED5DF2055
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232352e3133372e302f32342d3234203d3e20313336373837.roa
Signing time: Thu 16 Jul 2026 23:26:17 +0000
ROA not before: Thu 16 Jul 2026 23:21:17 +0000
ROA not after: Thu 15 Jul 2027 23:26:17 +0000
asID: 136787
IP address blocks: 185.225.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:c7:a3:8d:25:4d:cd:eb:90:db:38:b5:b3:9e:f4:de:d5:df:20:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 16 23:21:17 2026 GMT
Not After : Jul 15 23:26:17 2027 GMT
Subject: CN=C93641E685AA6E36B016D67E888538D741B9CD82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:92:50:b0:fb:be:4e:91:51:d0:dd:2c:5d:c7:
75:d2:7c:32:06:18:47:18:92:02:b0:67:57:29:e3:
7c:57:98:c5:24:33:de:80:76:5c:88:66:3b:13:8e:
3f:f8:1e:c1:76:d3:e4:a2:61:c4:f1:b3:68:89:7f:
8f:6c:5a:fb:65:7e:51:48:4d:7a:d1:8c:f9:92:6b:
2c:0f:4a:63:28:4e:d9:1b:24:b6:0f:99:27:5c:5a:
3a:93:1a:a0:f0:e3:a4:a4:b7:a8:da:3f:ff:0c:07:
fe:fb:62:6f:b5:bd:31:53:85:b5:95:c7:be:1b:05:
89:4b:87:fb:33:93:1c:bf:86:6d:8c:98:1b:98:5d:
2a:68:30:f5:7a:b2:04:e6:48:41:e9:6a:d5:10:51:
10:49:de:00:9f:57:a3:3e:b5:74:58:fb:1e:68:31:
0f:80:e0:bb:8e:cd:3f:2b:40:f3:7d:a7:64:6d:47:
b5:ab:94:c8:e7:67:59:9d:96:aa:80:5a:53:8b:2f:
88:99:20:ee:8e:ed:4e:5b:bd:aa:0f:16:ca:d5:ec:
22:c5:a7:27:db:aa:5c:6f:34:8b:17:c7:a0:00:ad:
e3:4c:51:42:4f:8d:28:da:c7:cf:48:88:d8:ff:d2:
da:34:7f:de:5f:32:05:43:8c:2e:bb:fd:bf:17:16:
ab:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:36:41:E6:85:AA:6E:36:B0:16:D6:7E:88:85:38:D7:41:B9:CD:82
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232352e3133372e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.137.0/24
Signature Algorithm: sha256WithRSAEncryption
96:50:d5:0f:7f:c6:43:8e:be:13:cc:4f:c0:d0:40:29:5f:00:
46:0c:9b:fa:52:7f:ee:8f:9f:6d:91:fd:0e:46:a4:50:b5:fa:
fb:08:bf:0f:5b:c8:63:eb:ed:2a:8d:7d:6c:1f:0d:45:31:de:
08:11:ca:10:77:8b:c5:95:73:df:c9:d6:f9:00:a8:86:e2:09:
b4:43:15:94:9a:a4:44:9e:32:12:0e:dc:4f:4f:58:66:2e:b2:
3d:c1:37:c5:52:f2:31:d6:92:76:7b:4b:0b:22:6b:e7:41:da:
71:e2:29:9e:e9:e6:84:f8:4a:41:a4:ec:c9:a2:ea:c7:cd:c6:
db:6a:6e:f1:9b:c5:26:c9:d8:64:0b:af:e7:15:d6:d3:a8:39:
75:97:9e:37:3e:7c:87:b4:21:ee:fc:a5:08:56:31:00:86:ce:
40:fb:1b:f7:a3:89:a9:11:aa:91:26:a8:47:5c:fa:08:23:87:
e2:83:f8:ff:57:03:82:d8:a6:a0:68:36:e3:e3:ab:df:86:6c:
ec:78:bd:8d:1f:59:b8:f6:ec:ca:25:57:b0:e1:60:0f:45:f7:
e3:12:be:99:2d:9b:9c:ea:fb:84:45:08:05:f5:74:cf:fa:93:
f8:6d:87:ab:2c:98:8c:96:b3:4f:53:1f:0a:cf:70:88:bb:bd:
66:a5:ee:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:56:45 2026 by rpki-client