Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3233392e3134392e302f32342d3234203d3e20323132323338.roa
File: 3138352e3233392e3134392e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: WKX/de/rgZNMkfogqAG8gijuIa06P6TeR0WXxHQkHqI=
Subject key identifier: 37:2B:E9:89:FB:92:5B:2D:51:57:BB:62:9A:0E:9E:15:DC:07:63:1C
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3526748E76BD857E6D8589E44CAE89A77DD52A7D
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3233392e3134392e302f32342d3234203d3e20323132323338.roa
Signing time: Thu 30 Jul 2026 09:27:21 +0000
ROA not before: Thu 30 Jul 2026 09:22:21 +0000
ROA not after: Thu 29 Jul 2027 09:27:21 +0000
asID: 212238
IP address blocks: 185.239.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:26:74:8e:76:bd:85:7e:6d:85:89:e4:4c:ae:89:a7:7d:d5:2a:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 30 09:22:21 2026 GMT
Not After : Jul 29 09:27:21 2027 GMT
Subject: CN=372BE989FB925B2D5157BB629A0E9E15DC07631C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0a:c3:09:b6:db:c4:00:a8:29:68:91:a7:0f:
dd:e2:f8:eb:21:4a:f0:e8:8c:e0:61:bd:38:42:36:
68:e7:26:81:7c:90:f5:23:0d:12:12:00:b5:1f:88:
be:1a:01:0c:18:67:c6:a5:d9:86:f4:28:d3:17:3d:
bb:e3:e7:72:47:fa:c4:be:e0:fa:07:0f:c1:1e:46:
a9:47:e5:74:1e:90:53:2c:fd:14:b8:85:cc:0e:83:
3f:e8:57:42:2c:58:b0:af:9f:55:96:fb:44:1c:3f:
c2:5b:cb:15:be:bb:50:1b:30:5c:40:27:7b:bb:94:
c4:71:d7:28:80:ea:aa:1a:df:a8:90:b8:41:20:c4:
56:1f:d2:1a:b5:9c:cf:a4:1a:4e:1f:d8:95:dd:12:
1c:56:58:58:cd:da:41:df:b4:f8:6b:24:87:97:a9:
ce:c8:95:a3:29:27:09:77:23:83:cb:19:cd:8c:18:
61:1c:97:8a:96:93:2e:68:2f:4b:42:d0:68:fb:7a:
3e:2b:18:64:ee:af:8b:b7:f1:f6:59:a0:da:a1:f4:
30:4c:9a:36:a2:31:a2:57:3d:47:fd:42:ce:98:1d:
6a:e9:39:e6:06:09:3d:0c:55:5e:6b:fa:f8:fc:62:
31:e4:ae:69:63:d9:d6:49:28:58:8a:7d:40:bd:23:
0e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:2B:E9:89:FB:92:5B:2D:51:57:BB:62:9A:0E:9E:15:DC:07:63:1C
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3233392e3134392e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.149.0/24
Signature Algorithm: sha256WithRSAEncryption
87:b9:14:20:c6:14:39:26:78:43:23:98:84:f6:20:5d:43:97:
81:45:81:f2:31:78:eb:cb:3a:91:d5:2f:65:8f:c7:a5:1b:e6:
75:3c:3c:ea:9c:91:2a:78:49:a3:ec:0a:c8:4f:7c:e6:09:f9:
a5:4d:7a:38:ed:1c:90:01:3f:bb:c3:36:34:54:d5:02:9d:d4:
2a:00:71:47:69:a0:22:ef:c2:fb:47:e9:7f:e7:87:63:5f:2a:
0f:c1:40:f0:02:d0:8e:69:6a:83:87:75:77:26:76:ed:1b:e2:
1e:78:c4:34:2f:f5:67:19:aa:42:a3:78:63:b4:42:d8:4d:a1:
76:8b:c3:8b:32:5c:27:00:90:c1:39:dd:f5:cb:20:8b:03:14:
aa:57:6c:ec:42:19:fc:52:81:e4:27:21:10:89:c6:13:cd:e6:
7d:4b:46:e9:32:41:b4:c4:3b:de:fa:2f:95:3b:3a:6c:5b:8d:
4a:49:f4:a4:db:99:6d:db:c1:42:c3:29:cc:dc:76:f1:bc:96:
ac:b4:d8:70:24:b7:6f:c2:18:95:4b:a5:7e:77:f3:10:24:a3:
71:b6:d2:55:f5:fd:a0:ed:d4:46:1e:60:10:25:ef:aa:72:19:
77:ff:cd:60:23:a5:5d:e0:c5:79:b0:29:6d:50:19:b0:54:54:
1b:60:63:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 07:42:28 2026 by rpki-client