Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3234312e3134382e302f32342d3234203d3e20383334.roa
File: 3138352e3234312e3134382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: uesmDuyKBTUMVwjYBgi+WnBlHcDH5xQUr9VVj+Tubc8=
Subject key identifier: ED:8E:2F:E1:C9:20:A3:37:11:35:0B:8D:C0:C2:6E:CF:99:47:F0:BD
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 61C769796C946E9BDB5D217BE5C30FE61F36AE84
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3234312e3134382e302f32342d3234203d3e20383334.roa
Signing time: Thu 12 Nov 2026 14:21:53 +0000
ROA not before: Thu 12 Nov 2026 14:16:53 +0000
ROA not after: Thu 11 Nov 2027 14:21:53 +0000
asID: 834
IP address blocks: 185.241.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:c7:69:79:6c:94:6e:9b:db:5d:21:7b:e5:c3:0f:e6:1f:36:ae:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Nov 12 14:16:53 2026 GMT
Not After : Nov 11 14:21:53 2027 GMT
Subject: CN=ED8E2FE1C920A33711350B8DC0C26ECF9947F0BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:1c:65:77:c1:10:84:1d:88:66:d5:a9:d6:53:
a1:1b:67:4d:18:4b:68:a7:d4:8f:26:d2:e4:5e:dd:
6c:88:bd:12:b0:10:ed:53:cf:8d:83:15:ed:31:97:
30:69:ab:f2:b6:c0:10:df:80:88:53:f6:d9:56:de:
9c:ee:1b:f0:29:df:e7:be:68:12:97:ea:07:67:14:
31:f8:05:dd:71:74:e2:f3:50:c3:0a:bd:b5:b8:c5:
e9:b0:46:a7:fc:42:3d:77:1b:98:b6:34:6e:99:6b:
7c:53:ad:a4:32:c2:ee:6c:8f:f4:9d:45:4d:d2:8d:
a7:dc:84:6d:57:17:a1:d4:62:e0:da:18:6a:ba:03:
4f:31:46:64:43:8e:a3:4b:72:a2:5f:f5:5e:a1:29:
c9:83:d7:18:31:cb:c4:1a:a6:67:c6:29:25:cd:f0:
ff:1d:ea:61:bf:8b:aa:4c:5c:f4:83:eb:35:ae:71:
51:06:64:c0:e3:e6:f5:d8:06:d1:ca:3d:e3:17:c0:
03:4f:3a:4f:1b:c9:8f:e4:f4:29:99:c4:e8:7b:f1:
5c:1e:5c:b4:f0:29:8a:32:ca:83:51:7b:43:3a:0e:
49:d3:82:9c:3d:a7:0c:b2:e7:8b:af:ae:e9:bd:24:
d5:c2:12:42:95:2f:7a:c3:65:95:14:17:c0:d4:bc:
93:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:8E:2F:E1:C9:20:A3:37:11:35:0B:8D:C0:C2:6E:CF:99:47:F0:BD
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3234312e3134382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.148.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:5e:8a:41:f8:e4:2d:fa:5b:56:84:dc:20:a3:f2:e3:14:a7:
fa:7b:fe:41:3b:cf:87:cb:38:2a:5c:ba:59:53:92:f2:45:c6:
c7:bb:b7:f2:01:ec:3a:ea:fe:dc:66:a3:f3:77:3d:01:67:1d:
02:b8:55:35:24:c1:a5:99:c9:b6:cf:55:bd:6a:b7:17:55:0e:
6c:88:c3:00:9e:33:6f:c4:3e:ab:72:d1:ee:9b:94:73:83:65:
6b:c6:d5:48:04:bc:87:e8:92:74:3d:b2:5c:f6:b8:5e:bd:bb:
5f:2e:11:86:f3:c1:3d:e3:8a:49:91:ef:fb:7f:f3:9d:68:70:
58:6c:d0:3b:d7:60:83:63:96:f2:06:42:bf:a2:e1:31:3d:e2:
f6:30:53:71:9b:73:21:e2:c7:b7:49:2f:83:2a:da:31:58:d7:
eb:1d:54:39:b8:e9:ad:29:ee:06:c3:4c:7c:9b:33:13:a1:54:
3b:df:53:38:ee:cc:5d:58:f6:d8:62:a5:9b:c0:a8:4d:6b:cd:
55:86:dc:8b:e0:01:56:31:e8:b0:f3:75:4e:ce:47:dc:4b:f7:
ca:39:66:eb:85:9f:09:cf:2f:20:1b:ab:a1:7d:9b:22:85:28:
e1:f3:f5:ad:44:f6:68:6e:14:e7:fb:2c:40:19:8b:df:e2:24:
96:f1:14:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 06:22:51 2026 by rpki-client