Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232352e3133382e302f32342d3234203d3e20313336373837.roa
File: 3138352e3232352e3133382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: ncJ6mDOcWt7BD45+4abRFwPBpJlOBigpIEnfmj0PmnM=
Subject key identifier: 49:17:12:55:FB:70:93:4D:0C:2C:8E:24:0D:64:9D:9E:62:0D:BB:73
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3E3F14FAA520D663DA6EF61E724F5F37B293A487
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232352e3133382e302f32342d3234203d3e20313336373837.roa
Signing time: Thu 16 Jul 2026 23:26:17 +0000
ROA not before: Thu 16 Jul 2026 23:21:17 +0000
ROA not after: Thu 15 Jul 2027 23:26:17 +0000
asID: 136787
IP address blocks: 185.225.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:3f:14:fa:a5:20:d6:63:da:6e:f6:1e:72:4f:5f:37:b2:93:a4:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 16 23:21:17 2026 GMT
Not After : Jul 15 23:26:17 2027 GMT
Subject: CN=49171255FB70934D0C2C8E240D649D9E620DBB73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:64:9c:0b:79:85:4d:8d:2c:8f:ec:f0:92:ce:
48:5d:2b:f3:c0:aa:8a:f9:29:4f:37:db:c1:ae:37:
e2:0e:20:04:92:0b:fa:d8:e7:f8:de:b2:7b:4f:03:
c6:ea:fa:ae:69:18:74:a4:6d:75:f2:9c:f1:58:6d:
9f:f6:a1:c9:45:9b:15:c4:8d:3b:84:66:a1:14:21:
27:f3:11:a3:6b:24:13:35:f2:3b:63:e4:bf:12:f3:
2b:e0:0b:7c:54:e6:2d:5d:ae:81:17:e8:21:ac:22:
d7:06:cf:cf:df:83:ec:b0:e6:c8:dc:87:3f:35:0c:
cf:bd:e5:a1:7a:26:22:64:e3:86:70:c4:de:9c:93:
70:41:6b:9e:71:12:45:c1:01:89:e5:61:f3:56:a7:
7b:1e:b0:c6:89:8b:7c:a5:62:00:a6:3f:2a:01:ff:
5a:81:8b:ef:ea:17:3e:8c:68:c1:73:9f:00:77:67:
1a:ba:6f:39:8a:da:7e:b3:f2:41:72:4b:c9:0a:ce:
ed:15:33:8d:45:44:b0:ff:01:5b:5b:e5:3e:12:4c:
e8:30:04:c5:5e:06:15:4a:a1:83:0f:18:df:03:fb:
85:27:28:82:e4:c8:76:35:58:f9:cb:80:02:aa:69:
07:fe:82:06:c2:12:9a:ed:ca:5c:9f:9c:08:31:cc:
86:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:17:12:55:FB:70:93:4D:0C:2C:8E:24:0D:64:9D:9E:62:0D:BB:73
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232352e3133382e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.138.0/24
Signature Algorithm: sha256WithRSAEncryption
88:37:d5:d2:32:6a:b7:85:7b:0f:ad:5b:94:f9:5f:d6:cb:c3:
c8:18:2a:18:ca:f4:ac:89:3e:4e:05:82:8d:82:aa:1a:38:d7:
ae:cd:fe:0e:6d:41:a0:ea:df:42:d7:9d:95:bb:61:52:34:9c:
07:29:86:a5:b4:b8:b2:2d:4e:55:0f:9a:0e:9e:12:41:db:a1:
ad:42:25:83:90:57:91:4d:ef:43:0a:59:d5:19:ff:ca:01:fa:
6a:7d:43:60:18:22:40:b7:7b:f3:af:50:03:7c:36:8c:11:de:
9f:a0:d7:bb:93:35:fa:2d:b7:aa:54:ea:50:2e:19:32:ca:e9:
db:b0:bd:ef:d8:c6:e0:fd:6e:46:dd:64:fd:29:8e:ea:a6:df:
57:89:81:26:0c:91:63:1d:f6:14:7f:f9:ff:ac:f3:55:9d:a1:
0c:32:ca:bb:40:f8:e2:ac:bd:8e:2d:73:6f:f3:4d:08:81:df:
a9:91:cf:ec:3f:61:8f:c0:d7:9e:a0:35:ec:49:a1:72:47:14:
01:6a:df:93:f1:18:83:71:f0:35:f3:0e:78:d8:8b:6d:c1:e7:
b1:1c:82:3f:c6:a6:39:ba:e7:6a:0c:55:49:ef:9e:b5:c1:70:
44:30:85:72:42:6e:d6:be:2b:1b:08:c4:0e:d4:65:ba:93:fd:
bb:83:66:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:56:47 2026 by rpki-client