Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3234312e3134382e302f32342d3234203d3e20313532373236.roa
File: 3138352e3234312e3134382e302f32342d3234203d3e20313532373236.roa (raw, json)
Hash identifier: 816QLlfqfv9qqDrtMQNtO2JdkLAhvJEBWcmq2bJJH/Y=
Subject key identifier: A8:44:33:ED:0A:25:C3:57:BA:47:F5:1B:08:FD:C2:E7:75:FA:4D:9C
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 29C9CF7CA4E6D9354E51039744E2E8AB4A80400B
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3234312e3134382e302f32342d3234203d3e20313532373236.roa
Signing time: Mon 12 Oct 2026 09:45:57 +0000
ROA not before: Mon 12 Oct 2026 09:40:57 +0000
ROA not after: Mon 11 Oct 2027 09:45:57 +0000
asID: 152726
IP address blocks: 185.241.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 14:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:c9:cf:7c:a4:e6:d9:35:4e:51:03:97:44:e2:e8:ab:4a:80:40:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 12 09:40:57 2026 GMT
Not After : Oct 11 09:45:57 2027 GMT
Subject: CN=A84433ED0A25C357BA47F51B08FDC2E775FA4D9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:3f:ba:c8:d4:3d:37:b8:e7:7f:3b:c1:4e:82:
a3:15:32:f4:44:ad:12:5d:c3:28:18:f6:e0:c1:22:
99:18:9b:db:3b:7f:5a:9c:8c:35:6b:54:04:be:7d:
d1:a1:e5:cd:95:5e:12:bf:44:c5:e2:97:4e:6b:26:
68:14:dd:b7:0d:4c:0d:33:2d:cb:94:8f:1c:32:ca:
46:e8:41:ec:38:61:4a:03:8e:13:2d:b3:8b:c4:7b:
c3:bf:78:48:65:b2:e5:55:75:2f:d5:82:e5:93:d5:
b5:3d:fe:67:23:9b:19:55:4e:4c:4f:15:26:ad:8d:
c5:ef:89:0a:4b:c7:20:eb:d3:68:f3:c1:98:39:6b:
ff:70:87:99:dd:87:5a:95:db:ee:46:51:ef:fd:4a:
66:17:39:ca:49:02:9d:6e:29:6e:59:e6:a2:90:e1:
0f:5c:67:ee:c1:fe:4c:43:3b:f7:47:43:c9:d1:3c:
3e:7b:77:d0:05:fb:61:48:3b:df:11:7b:c0:19:e7:
97:b0:67:75:cc:cd:69:c7:17:b6:85:03:4f:78:ca:
b2:4f:8b:58:f8:f2:18:d8:aa:25:71:69:a3:62:36:
66:5c:af:eb:3e:a6:d0:92:11:0e:98:20:94:1f:27:
05:53:97:b4:62:8f:cf:a0:02:a6:3b:70:3e:4f:eb:
ed:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:44:33:ED:0A:25:C3:57:BA:47:F5:1B:08:FD:C2:E7:75:FA:4D:9C
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3234312e3134382e302f32342d3234203d3e20313532373236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.148.0/24
Signature Algorithm: sha256WithRSAEncryption
91:cd:6e:d3:4a:79:06:78:22:77:b9:95:90:65:84:a2:46:65:
6c:37:83:a3:b3:0a:06:e1:72:f5:27:76:5c:df:1c:20:4f:24:
13:85:31:f7:dd:71:9c:a4:f7:81:8b:9a:62:9c:d6:a4:4a:9f:
b5:c4:da:a9:12:f5:f7:0c:29:4e:f4:4a:f8:1d:c1:4d:50:d3:
51:3f:d1:3c:3a:de:2b:7c:4e:96:43:94:e7:4f:fa:f7:ba:fc:
60:ea:f9:4c:91:38:2e:d9:91:1f:e5:75:97:01:53:0a:b7:ca:
8f:6b:ec:7f:26:9f:d0:67:23:89:c8:5c:37:97:76:8f:64:19:
e8:0d:14:cd:dd:1d:6b:3c:bf:5a:9d:44:d8:2c:9f:bf:0f:3d:
1a:8b:d4:15:a9:2f:f5:1d:eb:56:5d:9c:55:23:d7:9a:06:d0:
7c:4a:94:71:f9:e8:45:45:bc:eb:07:13:cd:e8:3a:0b:b4:16:
12:6b:5f:65:ae:28:68:a5:8e:1b:6a:00:01:6e:25:ba:03:eb:
5c:2f:b4:64:a1:8f:bb:76:82:37:eb:fb:d7:69:91:20:c2:46:
06:2d:c8:89:72:ce:6a:9a:46:56:10:70:b4:2f:cf:5d:8c:d0:
c0:8f:de:21:3f:4a:f7:36:ac:65:46:3e:d1:b2:b3:4e:3e:b0:
96:c4:dc:90
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUKcnPfKTm2TVOUQOXROLoq0qAQAswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjEwMTIwOTQwNTdaFw0yNzEwMTEwOTQ1NTdaMDMxMTAvBgNV
BAMTKEE4NDQzM0VEMEEyNUMzNTdCQTQ3RjUxQjA4RkRDMkU3NzVGQTREOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmP7rI1D03uOd/O8FOgqMVMvRE
rRJdwygY9uDBIpkYm9s7f1qcjDVrVAS+fdGh5c2VXhK/RMXil05rJmgU3bcNTA0z
LcuUjxwyykboQew4YUoDjhMts4vEe8O/eEhlsuVVdS/VguWT1bU9/mcjmxlVTkxP
FSatjcXviQpLxyDr02jzwZg5a/9wh5ndh1qV2+5GUe/9SmYXOcpJAp1uKW5Z5qKQ
4Q9cZ+7B/kxDO/dHQ8nRPD57d9AF+2FIO98Re8AZ55ewZ3XMzWnHF7aFA094yrJP
i1j48hjYqiVxaaNiNmZcr+s+ptCSEQ6YIJQfJwVTl7Rij8+gAqY7cD5P6+0HAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUqEQz7Qolw1e6R/UbCP3C53X6TZwwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMjM0MzEyZTMx
MzQzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMjM3MzIzNi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEALnxlDANBgkqhkiG9w0BAQsFAAOCAQEAkc1u00p5Bngid7mVkGWEokZlbDeD
o7MKBuFy9Sd2XN8cIE8kE4Ux991xnKT3gYuaYpzWpEqftcTaqRL19wwpTvRK+B3B
TVDTUT/RPDreK3xOlkOU50/697r8YOr5TJE4LtmRH+V1lwFTCrfKj2vsfyaf0Gcj
ichcN5d2j2QZ6A0Uzd0dazy/Wp1E2Cyfvw89GovUFakv9R3rVl2cVSPXmgbQfEqU
cfnoRUW86wcTzeg6C7QWEmtfZa4oaKWOG2oAAW4lugPrXC+0ZKGPu3aCN+v712mR
IMJGBi3IiXLOappGVhBwtC/PXYzQwI/eIT9K9zasZUY+0bKzTj6wlsTckA==
-----END CERTIFICATE-----
Generated at Wed Oct 21 03:55:31 2026 by rpki-client