Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232382e31362e302f32342d3234203d3e20313938373533.roa
File: 3138352e3232382e31362e302f32342d3234203d3e20313938373533.roa (raw, json)
Hash identifier: XFrlWWmw2G06OyhqJG3q/vmftU817hVbRPm4egvLZ9U=
Subject key identifier: C9:89:7D:0B:8A:7F:FC:FB:B2:CB:84:0F:68:94:7C:B2:40:B1:ED:C3
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 65541CA5444DBDEAACE55811214EECB6F28AFAA7
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232382e31362e302f32342d3234203d3e20313938373533.roa
Signing time: Fri 16 Oct 2026 18:54:50 +0000
ROA not before: Fri 16 Oct 2026 18:49:50 +0000
ROA not after: Fri 15 Oct 2027 18:54:50 +0000
asID: 198753
IP address blocks: 185.228.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:28:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:54:1c:a5:44:4d:bd:ea:ac:e5:58:11:21:4e:ec:b6:f2:8a:fa:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 16 18:49:50 2026 GMT
Not After : Oct 15 18:54:50 2027 GMT
Subject: CN=C9897D0B8A7FFCFBB2CB840F68947CB240B1EDC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f7:73:43:cb:ef:d0:01:4d:55:da:92:ad:13:
a9:f3:da:a8:b9:2b:a1:3d:49:d6:53:39:23:b4:7f:
32:4d:a5:d8:47:28:1b:13:bd:3e:40:aa:76:55:f2:
37:e2:4f:b1:58:ca:12:85:47:84:cf:68:19:4c:f1:
1d:53:7d:2b:f5:b4:84:a0:de:98:98:9c:7d:74:28:
c5:0d:e5:63:6f:00:5f:76:29:4d:8b:6f:e0:38:fc:
18:10:19:72:f6:16:53:a5:65:d8:c2:b5:d6:04:60:
9b:af:d5:70:bc:6c:fd:e3:9a:a9:dd:5c:e6:43:75:
7b:e6:6e:08:0b:74:4e:33:51:d2:6c:05:ce:21:60:
fe:10:77:ab:98:82:1d:b8:56:24:3a:65:f4:1a:67:
1a:ab:24:89:39:50:06:58:f3:7f:dc:9f:a1:6a:ee:
3b:5e:c3:4f:cc:56:cd:06:83:42:47:ee:53:6f:f7:
3d:46:98:ea:b4:49:84:48:45:82:18:72:2e:f7:36:
3a:c2:91:98:40:e9:79:bc:ac:45:29:21:99:b9:3c:
98:96:7a:4e:fe:dc:6d:9e:17:de:09:cd:a2:be:84:
b4:c0:20:68:7e:bc:60:2b:80:5f:7f:93:a6:a1:63:
17:b9:d3:1a:d1:31:45:f5:1a:7f:a3:2f:49:59:d5:
f4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:89:7D:0B:8A:7F:FC:FB:B2:CB:84:0F:68:94:7C:B2:40:B1:ED:C3
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232382e31362e302f32342d3234203d3e20313938373533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.16.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:ad:5f:04:b7:b7:03:a5:12:16:54:d7:28:44:67:ef:15:1c:
e8:eb:27:56:f1:05:a8:bc:b2:89:c0:28:ee:49:e8:07:20:b2:
2a:d0:03:9e:9d:3c:88:52:be:e4:86:4d:e9:1b:b5:89:54:90:
7c:b8:d4:bd:8c:17:16:dd:0d:f3:6b:fb:ef:c4:b3:10:c0:89:
1a:61:2e:b8:f4:d4:ed:35:9d:41:7a:3b:01:f7:27:e8:73:42:
0a:0a:04:74:cd:6c:18:c9:0a:7e:00:e7:e2:48:e9:6a:d9:3a:
4f:82:00:09:d4:de:52:a3:63:e0:be:59:ae:7c:ad:74:d0:ae:
a8:06:85:07:cb:63:67:76:27:12:49:8b:74:84:af:7a:ad:a0:
e7:e8:29:5a:be:d7:45:1a:9f:07:88:5c:2f:20:6e:d4:f6:0b:
08:6b:11:67:3d:0a:22:6b:b8:44:64:6a:73:fd:05:1b:c5:3e:
d0:f7:18:ac:fa:a3:df:58:61:59:1a:04:c2:64:26:7e:05:5b:
04:28:e0:b4:55:28:cf:c1:b6:37:27:6b:5a:b5:61:4a:96:9c:
bb:d1:b3:48:fb:13:d6:f9:b0:c8:12:3c:ac:15:11:7e:ea:a2:
30:b6:bc:84:c4:84:c8:12:1b:6a:15:1a:e9:32:b7:4f:f2:c8:
b6:62:6c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 19:35:12 2026 by rpki-client