Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232392e35362e302f32342d3234203d3e20313336373837.roa
File: 3138352e3232392e35362e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: J7fh0ufp/cqTpV8nMLnI3YX2ucIC6aBvpgGPawUphfU=
Subject key identifier: E9:23:F9:3D:3C:56:FA:9C:F3:A2:A6:06:E7:00:23:51:75:4B:DA:EE
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 164E32DAFB85A11BC89C1E689D364DFD3E833257
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232392e35362e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 30 Aug 2026 21:28:22 +0000
ROA not before: Sun 30 Aug 2026 21:23:22 +0000
ROA not after: Sun 29 Aug 2027 21:28:22 +0000
asID: 136787
IP address blocks: 185.229.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:4e:32:da:fb:85:a1:1b:c8:9c:1e:68:9d:36:4d:fd:3e:83:32:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 30 21:23:22 2026 GMT
Not After : Aug 29 21:28:22 2027 GMT
Subject: CN=E923F93D3C56FA9CF3A2A606E7002351754BDAEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b1:5c:2c:0f:3b:0a:7b:2f:a6:83:c5:8b:ed:
0c:30:f4:b7:13:f6:83:9f:ef:50:36:62:93:93:a7:
a3:cb:b2:20:bf:a8:79:cd:46:98:cb:92:31:b1:0a:
17:ff:87:ab:97:e1:26:95:1d:36:f3:81:4b:20:00:
3d:b8:91:45:1f:16:33:89:25:08:84:5c:b4:2d:29:
c9:a8:29:9b:3f:02:ea:40:cd:da:b5:be:15:c8:e0:
a8:98:ee:00:84:50:26:62:8f:a3:fc:ac:51:00:fd:
5b:44:18:2f:ab:fc:e4:5e:c5:8f:2d:3b:19:fa:a5:
af:a8:23:e5:3d:18:dc:68:0a:4d:eb:4b:73:b5:79:
89:ec:48:c8:e1:0f:39:6f:0a:c1:ef:bb:c8:cc:72:
d4:99:79:0b:d1:bb:e7:9d:59:d8:f6:ad:da:95:47:
84:f9:17:e8:a4:76:65:3c:19:97:9e:5b:92:06:f1:
39:7d:0d:0d:a1:fd:00:8a:53:53:d2:c1:6d:13:94:
8f:6c:11:a1:f1:1a:4e:fd:15:3d:e8:b8:ad:73:0d:
b6:84:4c:21:1b:8d:76:60:d9:d6:b3:b1:9d:30:95:
30:5e:50:7b:a9:9b:2d:48:66:c3:5d:39:e1:a2:00:
90:f7:f0:f6:cb:9d:c9:08:34:49:69:2a:f1:20:cb:
f7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:23:F9:3D:3C:56:FA:9C:F3:A2:A6:06:E7:00:23:51:75:4B:DA:EE
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232392e35362e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.56.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:8a:a9:07:0f:fa:90:ee:3d:de:ed:ca:11:1a:f1:d6:a1:8b:
5b:74:26:2e:a1:c4:03:e6:99:29:7c:bf:d7:d6:de:01:0d:72:
0e:6c:cc:4b:15:01:7f:ff:96:40:0c:b1:9e:80:6e:0e:58:4b:
63:4c:d5:71:a8:a5:e3:5d:41:ae:b1:49:3f:a3:30:fb:ef:8c:
d5:a9:6f:26:5e:43:76:29:1c:bc:55:8d:18:60:c7:f1:0e:fd:
29:4b:97:ce:ba:96:5f:46:db:65:63:76:85:f5:98:df:3a:02:
23:7d:cc:9a:a0:71:74:1a:7f:01:4d:69:58:08:2f:db:1d:18:
ca:07:8d:38:76:3d:88:6b:8c:6d:0e:bf:c4:39:e9:f5:09:2a:
6c:a3:76:51:5c:76:7a:9f:f4:8d:70:74:8e:2b:8f:8f:4d:b9:
74:9b:25:73:6e:3a:1f:f0:50:02:8d:8d:2f:d6:cd:a6:36:d8:
4b:01:36:0a:c2:1b:58:65:e6:0b:86:11:37:51:3f:e8:cf:36:
59:3a:5f:f0:cd:92:ab:a8:fd:09:3d:f5:ec:ad:f9:ae:f6:d4:
23:ae:21:fd:58:c8:c4:6d:22:dd:b2:46:c0:70:3c:53:d6:b4:
ad:b5:b2:b3:89:d0:72:d9:bd:b9:97:a1:6f:ff:9e:de:a4:fd:
0a:b9:4a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 23:37:51 2026 by rpki-client