Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3235302e33392e302f32342d3234203d3e20323037313337.roa
File: 3138352e3235302e33392e302f32342d3234203d3e20323037313337.roa (raw, json)
Hash identifier: U4JO0vZKbPn8SEs9pdpaGKFcSC/6cOViZl8ZCQRVXfM=
Subject key identifier: 41:C9:19:03:28:DB:ED:5E:C0:7A:5F:5E:5B:56:6D:8D:00:71:5B:4A
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 17B2046C36B1AF69D0FE11A6B7CAF88129344C84
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3235302e33392e302f32342d3234203d3e20323037313337.roa
Signing time: Tue 02 Jun 2026 09:24:49 +0000
ROA not before: Tue 02 Jun 2026 09:19:49 +0000
ROA not after: Tue 01 Jun 2027 09:24:49 +0000
asID: 207137
IP address blocks: 185.250.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 15:52:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:b2:04:6c:36:b1:af:69:d0:fe:11:a6:b7:ca:f8:81:29:34:4c:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 2 09:19:49 2026 GMT
Not After : Jun 1 09:24:49 2027 GMT
Subject: CN=41C9190328DBED5EC07A5F5E5B566D8D00715B4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f6:6f:90:90:f7:e0:e6:cc:73:a7:0a:43:34:
19:14:c7:e1:25:04:d1:78:a6:cf:19:ef:cd:a5:69:
4f:8c:88:9e:dc:19:03:ae:41:33:5e:40:1d:d4:b8:
88:ac:27:57:ef:c8:d3:b6:c5:0d:4b:ec:0e:f5:a0:
bc:01:f5:94:40:98:1a:e1:ca:d1:9f:1b:04:83:26:
45:79:d4:26:49:50:72:15:0b:c2:23:15:87:9d:33:
b3:d8:4c:7f:38:4a:eb:00:17:a4:d3:b1:2e:bc:91:
e2:07:23:c2:5b:4d:b1:0a:8b:91:39:18:dd:a3:47:
35:7f:ef:09:cb:25:ad:ee:29:a5:71:0a:e8:a1:9a:
99:a3:86:7c:de:22:b5:8d:be:c9:18:ec:6d:e6:16:
2b:9a:f4:62:a2:32:cb:6e:c7:44:4e:4c:25:58:d7:
c1:8b:37:03:a9:e9:df:40:3b:b6:c0:11:6e:b1:00:
f5:b6:44:75:93:ba:33:05:6a:96:9e:42:e3:60:b0:
58:db:d7:6e:35:db:99:23:e6:2f:67:8d:35:20:b4:
71:ac:ac:f7:f3:37:f5:f7:bd:67:bf:a3:4a:36:16:
9b:12:1b:4a:f7:90:00:a3:31:77:b9:05:2b:a3:b9:
ff:f8:be:80:a4:05:df:16:2b:39:51:55:a2:a3:ef:
67:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C9:19:03:28:DB:ED:5E:C0:7A:5F:5E:5B:56:6D:8D:00:71:5B:4A
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3235302e33392e302f32342d3234203d3e20323037313337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.39.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:0c:cf:be:e7:b0:e5:44:95:2b:d5:81:0e:2b:3a:bc:e6:ad:
e8:4b:61:0a:d1:8f:1f:34:73:fd:c1:52:44:9d:d9:88:4b:58:
aa:78:02:c9:f8:bc:83:63:38:f4:8a:5f:ab:8b:a9:9e:8b:95:
84:bb:15:03:c1:b4:e7:91:0e:e4:52:bc:5a:41:95:34:4a:30:
b0:30:31:9a:be:eb:06:63:ea:25:65:8a:80:31:3d:b6:0a:65:
c4:c0:42:59:3a:e7:d9:1b:ad:a6:fb:99:ee:9c:59:bf:b9:0b:
c8:7c:67:e6:3b:20:66:06:75:84:81:21:e5:96:aa:05:59:cc:
c0:c9:ca:26:86:47:55:84:ff:38:ce:87:96:56:37:85:70:65:
a6:f9:e3:ce:1e:84:7c:79:7b:4b:8c:63:59:1c:65:ba:54:fc:
b8:8f:2b:8e:a0:e6:53:1d:9a:7c:c2:75:e9:42:a3:6a:a1:e9:
db:10:c9:c6:28:f5:ce:d3:04:c0:4d:29:2f:ae:28:1a:cb:0b:
e0:68:78:70:b3:ef:d0:d4:81:c9:f4:67:70:8a:c7:f9:0b:4a:
c8:71:e3:86:61:50:82:e9:4c:38:b5:fd:5e:9a:6b:bc:4e:1e:
f0:e0:fb:c0:83:d6:95:f8:e2:b3:0e:7b:be:0c:43:86:7e:c3:
ba:e1:be:a8
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUF7IEbDaxr2nQ/hGmt8r4gSk0TIQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA2MDIwOTE5NDlaFw0yNzA2MDEwOTI0NDlaMDMxMTAvBgNV
BAMTKDQxQzkxOTAzMjhEQkVENUVDMDdBNUY1RTVCNTY2RDhEMDA3MTVCNEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc9m+QkPfg5sxzpwpDNBkUx+El
BNF4ps8Z782laU+MiJ7cGQOuQTNeQB3UuIisJ1fvyNO2xQ1L7A71oLwB9ZRAmBrh
ytGfGwSDJkV51CZJUHIVC8IjFYedM7PYTH84SusAF6TTsS68keIHI8JbTbEKi5E5
GN2jRzV/7wnLJa3uKaVxCuihmpmjhnzeIrWNvskY7G3mFiua9GKiMstux0ROTCVY
18GLNwOp6d9AO7bAEW6xAPW2RHWTujMFapaeQuNgsFjb124125kj5i9njTUgtHGs
rPfzN/X3vWe/o0o2FpsSG0r3kACjMXe5BSujuf/4voCkBd8WKzlRVaKj72cHAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUQckZAyjb7V7Ael9eW1ZtjQBxW0owHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMjM1MzAyZTMz
MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzczMTMzMzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAC5+icwDQYJKoZIhvcNAQELBQADggEBACwMz77nsOVElSvVgQ4rOrzmrehLYQrR
jx80c/3BUkSd2YhLWKp4Asn4vINjOPSKX6uLqZ6LlYS7FQPBtOeRDuRSvFpBlTRK
MLAwMZq+6wZj6iVlioAxPbYKZcTAQlk659kbrab7me6cWb+5C8h8Z+Y7IGYGdYSB
IeWWqgVZzMDJyiaGR1WE/zjOh5ZWN4VwZab5484ehHx5e0uMY1kcZbpU/LiPK46g
5lMdmnzCdelCo2qh6dsQycYo9c7TBMBNKS+uKBrLC+BoeHCz79DUgcn0Z3CKx/kL
Sshx44ZhUILpTDi1/V6aa7xOHvDg+8CD1pX44rMOe74MQ4Z+w7rhvqg=
-----END CERTIFICATE-----
Generated at Thu Jun 4 06:24:38 2026 by rpki-client