Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232382e31382e302f32342d3234203d3e20313938373533.roa
File: 3138352e3232382e31382e302f32342d3234203d3e20313938373533.roa (raw, json)
Hash identifier: fkfpqB/+qpj/Fi92ukznmIKyMaPH4X8zschrU+sl+cA=
Subject key identifier: 01:84:DC:29:46:69:DC:0B:5F:22:B1:11:76:5B:4C:1B:8C:ED:B7:DE
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1E0E7DEA0A563C2502F674CF4461A786CB430595
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232382e31382e302f32342d3234203d3e20313938373533.roa
Signing time: Fri 16 Oct 2026 18:54:52 +0000
ROA not before: Fri 16 Oct 2026 18:49:52 +0000
ROA not after: Fri 15 Oct 2027 18:54:52 +0000
asID: 198753
IP address blocks: 185.228.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:0e:7d:ea:0a:56:3c:25:02:f6:74:cf:44:61:a7:86:cb:43:05:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 16 18:49:52 2026 GMT
Not After : Oct 15 18:54:52 2027 GMT
Subject: CN=0184DC294669DC0B5F22B111765B4C1B8CEDB7DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:80:eb:04:1f:50:d2:5a:87:e5:0e:ca:73:2b:
8d:d3:b9:27:b4:e0:82:ee:54:66:6a:56:28:d4:6a:
bd:7d:72:f3:92:5e:3f:a0:9f:15:7d:6f:ce:ef:6f:
7d:6d:c0:8e:b7:2a:d2:17:2f:4a:6d:74:d9:bd:b1:
11:83:98:91:82:1e:4d:39:21:53:1a:71:9c:b2:13:
7a:38:d4:1a:26:3b:d0:b1:92:29:21:54:b9:a6:b8:
91:80:f4:ab:25:7c:27:17:3b:f8:da:d0:9d:9d:5b:
be:e7:af:56:7a:f5:a5:96:e4:41:45:d7:63:b3:7a:
08:d6:29:18:b7:08:ee:2a:b9:a8:a2:97:b2:12:37:
8e:2a:76:96:16:ca:c2:83:b8:55:1c:13:75:21:dd:
d4:80:cf:cc:88:8d:41:86:ad:3b:5f:88:67:18:24:
a0:bb:67:9d:95:0c:26:17:bf:67:ec:1f:6d:b2:1c:
8c:f1:28:e2:8e:cb:ff:9b:69:06:da:bc:9c:6f:c7:
87:13:f9:8e:76:d6:6f:b1:80:71:12:b4:34:12:54:
96:5a:7f:3e:94:07:22:3a:86:17:42:3d:29:5b:af:
7a:33:34:00:a0:9e:05:1c:25:df:b7:a4:36:fd:4b:
f9:71:92:5d:b8:e3:bf:9c:41:ce:30:90:a2:fb:cd:
88:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:84:DC:29:46:69:DC:0B:5F:22:B1:11:76:5B:4C:1B:8C:ED:B7:DE
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232382e31382e302f32342d3234203d3e20313938373533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.18.0/24
Signature Algorithm: sha256WithRSAEncryption
04:1a:51:42:07:17:9c:66:8b:29:f5:5b:8b:64:a4:2b:fd:bc:
9b:3d:f6:14:eb:05:a1:76:67:da:7c:71:1a:4d:4f:2c:1e:1e:
5b:76:ce:40:36:6c:af:fd:6a:08:18:3e:b3:8b:68:41:8f:79:
95:af:e0:e7:8d:92:1c:d9:53:36:c1:8e:fd:af:ea:aa:06:83:
23:e4:b0:ab:b6:bf:77:f0:f4:e6:cb:e9:fc:b6:83:35:66:06:
ee:55:db:20:03:8c:68:6a:92:94:5f:db:fe:a8:6c:3c:ff:1f:
b1:d6:12:2a:96:e0:e7:6f:f8:57:32:0b:8c:ae:c7:72:b3:9f:
72:60:d4:a7:d0:36:a6:f9:4f:3c:37:9e:b2:e3:07:94:de:f9:
9d:26:79:09:9d:0c:7d:ca:3c:f5:66:d4:f1:8c:7b:c1:38:65:
ec:da:b5:5b:9c:8a:3f:32:54:ba:cd:3b:48:3f:a7:06:8b:f2:
9d:ae:17:3a:b0:fc:1d:24:38:ad:9e:1b:12:6a:20:8c:2a:78:
0a:b6:60:a5:ef:64:0d:da:02:73:d5:fc:62:4b:cb:ca:f1:48:
24:5e:ba:24:e4:25:55:74:93:0c:5e:da:57:87:1b:f4:ff:14:
e6:35:c9:6c:a3:20:72:57:72:23:a5:f7:6d:ec:36:bb:65:5e:
f8:92:6a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 20:58:09 2026 by rpki-client