Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3233372e3235342e302f32342d3234203d3e20313336373837.roa
File: 3138352e3233372e3235342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: Psre2VCGY6PgA1b3gGL7OxT89eSpwt/fVofvLCqolC8=
Subject key identifier: E2:15:34:8F:9B:C5:83:B2:0A:B2:DC:8F:A4:8F:1F:08:97:EA:2C:2D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2ADEEA0A17A7E192275E467DE90BA2F86A204A87
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3233372e3235342e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 24 Jul 2026 15:27:05 +0000
ROA not before: Fri 24 Jul 2026 15:22:05 +0000
ROA not after: Fri 23 Jul 2027 15:27:05 +0000
asID: 136787
IP address blocks: 185.237.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 20:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:de:ea:0a:17:a7:e1:92:27:5e:46:7d:e9:0b:a2:f8:6a:20:4a:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 24 15:22:05 2026 GMT
Not After : Jul 23 15:27:05 2027 GMT
Subject: CN=E215348F9BC583B20AB2DC8FA48F1F0897EA2C2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f3:d9:89:9e:c7:72:9c:ef:f0:ee:e2:64:b4:
6f:17:58:ba:69:c2:82:7a:db:48:56:eb:99:3f:09:
cc:dd:57:f7:60:7d:98:75:f6:53:e7:da:4a:9c:4e:
4c:cc:1d:d3:0b:b7:10:27:63:df:d0:ec:07:0c:81:
61:49:7e:63:d5:b4:19:40:32:87:85:eb:97:dd:29:
94:fc:97:9e:a9:2a:18:1a:e9:22:3b:a7:10:34:c5:
c0:c2:46:2a:bb:40:90:a2:33:f0:c9:09:ce:ed:bb:
d9:cf:d6:fb:1d:91:6e:5f:85:f7:cc:c1:7d:a4:82:
0e:ed:5d:03:d5:80:70:3a:6a:41:58:fb:1b:45:ee:
ae:5f:dd:aa:ab:d1:fc:c4:ab:7a:20:95:9f:aa:dd:
d6:ad:c5:42:a1:4f:03:b2:39:e6:a9:10:80:e6:dc:
fd:9a:8f:4d:e6:cf:ff:1d:ae:eb:5c:98:52:2f:aa:
0f:2b:3d:6a:fb:81:f9:c4:2c:ab:6f:c4:38:08:b9:
70:b1:57:44:93:95:27:1e:d7:46:6c:cc:52:fc:a6:
b9:76:a2:ae:35:da:ed:65:10:f0:34:34:63:48:a4:
e2:7f:74:f2:81:c5:42:ce:cf:a2:62:52:56:90:fa:
09:75:1b:8f:9e:5a:94:12:1d:d1:6e:a0:ec:1e:0d:
b1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:15:34:8F:9B:C5:83:B2:0A:B2:DC:8F:A4:8F:1F:08:97:EA:2C:2D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3233372e3235342e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.237.254.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:e3:98:0d:3d:d5:b4:d0:ab:7b:df:72:e8:02:0c:4a:a2:25:
ad:e5:44:af:1c:6d:39:e9:de:be:79:7b:44:ab:df:42:95:2f:
3f:78:77:76:73:e2:cb:19:ec:89:0f:75:82:1c:6d:f9:e2:41:
fa:bd:5d:29:84:47:d6:24:28:2b:dd:2c:f8:26:8f:a4:f4:58:
31:59:d4:36:0b:60:cc:68:bb:b9:90:02:3a:f7:7d:dc:94:02:
f4:3d:7c:45:75:67:7f:cd:bc:85:07:43:2a:2a:e0:9b:6b:80:
d6:5b:f4:ea:df:84:1c:93:75:fd:ad:84:00:e7:3e:82:e8:57:
69:f3:65:a1:cc:a7:27:21:19:6a:dd:1c:57:ed:9b:9d:34:ac:
39:f3:0a:f2:8f:1c:74:e6:a4:2e:aa:a7:5d:01:5d:64:ae:2d:
3e:f6:97:03:18:b5:26:ad:d9:3e:de:9a:a6:de:30:1f:66:73:
86:a7:d3:d6:43:3c:02:e9:e0:53:90:2e:26:e1:c5:74:5c:71:
9b:96:0d:3e:0c:18:2a:87:e8:07:59:47:a9:63:b8:eb:d4:16:
53:6b:95:e0:c3:2d:e3:7b:72:0f:24:68:ef:9b:95:7e:67:c2:
82:8b:aa:ef:06:31:0e:b0:1f:d0:10:88:09:3b:80:d4:ad:c3:
3b:f8:27:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:06:04 2026 by rpki-client