Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3234312e3134382e302f32342d3234203d3e20383334.roa
File: 3138352e3234312e3134382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 7Bf/Oo2B2DAVaerE/U3X2hOwuGE2r/hq7yR0/eMBbmQ=
Subject key identifier: D2:6E:B3:E0:23:D6:96:61:6C:95:2A:AF:3F:77:E6:87:39:E0:7A:2E
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 69B092F09FF6733AB8DCA9EF71E1FF0179EDF7A4
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3234312e3134382e302f32342d3234203d3e20383334.roa
Signing time: Sun 16 Aug 2026 21:35:33 +0000
ROA not before: Sun 16 Aug 2026 21:30:33 +0000
ROA not after: Sun 15 Aug 2027 21:35:33 +0000
asID: 834
IP address blocks: 185.241.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:b0:92:f0:9f:f6:73:3a:b8:dc:a9:ef:71:e1:ff:01:79:ed:f7:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 16 21:30:33 2026 GMT
Not After : Aug 15 21:35:33 2027 GMT
Subject: CN=D26EB3E023D696616C952AAF3F77E68739E07A2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4c:9c:b2:16:47:89:97:d4:7e:e2:b3:d8:b4:
78:21:f1:08:11:51:cf:be:3c:99:83:f3:3f:de:c1:
40:e3:36:af:63:67:e6:57:4c:f1:cd:59:6f:a8:97:
f3:74:8f:11:44:96:54:5b:5b:75:6e:70:9a:7a:0e:
5d:db:e9:28:5e:c8:06:ea:22:d2:92:ed:fd:1e:85:
63:f0:f3:ce:06:d3:cf:86:ab:df:88:3a:49:b1:be:
12:47:a7:d9:5e:cb:88:1a:6e:91:0d:b2:95:0f:c9:
11:33:0c:7d:40:dd:df:1d:ba:58:1e:0f:40:9d:9f:
a8:dc:e3:48:97:17:a4:f3:e1:40:41:91:9a:cd:ea:
6c:c0:58:69:59:2e:65:31:fd:d3:69:91:7f:71:2c:
7d:bd:2f:f7:6f:fb:6d:14:0a:78:e7:9d:a5:aa:a9:
8e:e8:27:57:0a:16:e1:5c:6d:3b:d2:5a:32:e2:95:
33:12:1e:b7:fb:80:7b:15:38:dd:56:cb:11:e4:ba:
c8:e0:34:30:5e:1d:b5:50:28:71:8b:58:38:cc:59:
78:c4:dc:e2:ea:9d:18:15:a5:e7:bd:a0:1d:36:09:
bb:66:84:1d:79:2e:67:cb:49:7f:62:86:09:6a:9d:
c0:08:40:d0:75:b1:f2:e7:9e:fd:40:97:2e:20:29:
72:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:6E:B3:E0:23:D6:96:61:6C:95:2A:AF:3F:77:E6:87:39:E0:7A:2E
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3234312e3134382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.148.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:39:c4:e2:d4:2f:05:be:8c:74:59:9b:ea:ba:90:11:6e:31:
35:4f:a7:a8:97:fa:3c:a4:2a:5b:20:7d:75:d6:88:90:1d:d7:
f7:9a:fb:bf:3d:ef:e7:9f:a9:fc:1b:8e:32:ca:e0:03:3e:ad:
0d:b4:77:4e:e2:af:e7:c3:4b:5a:3a:e2:96:a7:b2:3a:8f:34:
fe:f9:21:10:3b:e6:89:29:88:6f:18:3c:4f:d6:49:1e:72:98:
59:8b:bf:15:8a:5b:eb:63:5a:f1:c5:5b:86:c3:aa:dd:1f:7b:
cc:f0:05:3e:67:df:a1:b0:35:40:db:94:15:df:f0:68:42:27:
57:10:69:87:63:0a:90:8c:45:28:88:a7:72:db:80:e3:45:2e:
2d:d2:74:53:77:02:d2:8f:7a:31:5f:c1:6c:fd:e5:88:bb:80:
f9:dc:44:8f:17:15:e7:31:ff:f8:2c:8b:1c:df:17:1b:88:10:
99:3c:55:3f:a8:ac:ed:c9:31:f7:47:7d:e3:bc:61:ca:1d:71:
6a:e8:2c:d3:4c:77:32:7d:a8:8e:93:ee:3a:97:b8:3e:f8:81:
da:ca:45:c0:55:2b:25:c3:8f:67:ee:4b:85:ab:d0:a5:03:2e:
50:6d:f6:26:75:45:2b:00:30:9b:a6:bc:88:81:ac:d7:73:6a:
29:ec:0d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:31:50 2026 by rpki-client