Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e38312e3132342e302f32342d3234203d3e20313336373837.roa
File: 3138352e38312e3132342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 94fdXQRLS397MLbw5gUSuIJtZzIYFJZCDFSG99pBoro=
Subject key identifier: F0:FF:B3:F8:38:62:9D:DE:9B:1D:20:D5:25:93:83:C8:C0:4E:BC:09
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4CE989786E1E75823A6B383F4AAB22A2170B00BD
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e38312e3132342e302f32342d3234203d3e20313336373837.roa
Signing time: Tue 18 Aug 2026 09:28:04 +0000
ROA not before: Tue 18 Aug 2026 09:23:04 +0000
ROA not after: Tue 17 Aug 2027 09:28:04 +0000
asID: 136787
IP address blocks: 185.81.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:e9:89:78:6e:1e:75:82:3a:6b:38:3f:4a:ab:22:a2:17:0b:00:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 18 09:23:04 2026 GMT
Not After : Aug 17 09:28:04 2027 GMT
Subject: CN=F0FFB3F838629DDE9B1D20D5259383C8C04EBC09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:04:08:53:41:7b:5f:07:eb:98:dd:bf:77:05:
17:73:3d:8e:cf:38:f6:d3:d4:bb:5e:4e:46:41:11:
f7:1e:53:1b:53:12:12:6f:83:07:58:09:b2:ae:03:
46:17:d6:bd:45:d5:02:35:19:d8:32:ac:1f:5a:ca:
33:37:b2:20:c2:f0:e2:00:d1:de:72:05:32:25:9e:
f5:23:fa:0f:1b:b6:aa:fd:50:56:c7:15:30:c7:92:
a4:ff:00:a2:93:99:5b:1e:a0:da:ec:a5:2e:97:93:
c7:2b:a2:5b:c3:5f:7b:5c:92:f9:48:f9:fd:9a:6f:
e8:c1:c4:43:a7:ce:bc:35:5f:80:1c:f5:74:9e:df:
50:a4:73:a1:4d:4e:0d:f2:ef:b2:29:17:22:b0:36:
4b:a3:da:e0:e3:8e:54:2a:cb:8f:25:a1:dd:e2:95:
e7:2b:ea:07:77:7a:c7:3e:45:76:cc:51:df:04:05:
56:b9:86:6b:ee:df:c1:af:cc:c7:81:11:88:04:3f:
bd:39:a7:82:db:12:66:cb:01:72:0b:c7:cf:aa:d1:
9c:42:16:98:c0:30:e6:18:b1:b0:2d:2e:b3:d2:58:
95:b9:29:57:d5:7f:65:4c:6a:9c:6d:ab:d9:a1:26:
03:7b:66:1b:91:3d:8d:3b:9d:39:f6:7b:c6:f4:8b:
79:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:FF:B3:F8:38:62:9D:DE:9B:1D:20:D5:25:93:83:C8:C0:4E:BC:09
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e38312e3132342e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.124.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:f9:8d:f1:06:b7:30:09:a7:93:2f:f2:b2:5f:fa:1e:ae:d8:
f4:a7:cf:25:8b:9d:6a:3e:a2:7c:48:aa:9c:fe:23:a8:b5:ef:
83:57:c2:c1:2e:6e:2a:d9:5e:11:c6:ca:1a:cc:23:e8:3a:e6:
ee:6b:32:0f:78:05:a9:19:0d:38:96:a2:3a:87:a5:32:7c:ae:
06:ab:e1:d6:77:68:9e:60:7d:4e:e7:20:b6:d4:d5:c0:fa:02:
4f:b4:96:c3:fe:1b:ff:4e:70:d2:40:6c:f8:77:26:ae:2f:ce:
6e:b9:ac:72:51:74:df:ae:27:4c:5d:f8:11:43:79:e0:ab:e4:
7e:1d:e5:0d:38:ed:9e:58:66:b8:f4:96:60:c1:86:63:54:fb:
22:58:44:22:fe:90:d8:e6:d6:f0:4d:6e:7b:8c:dc:a8:8d:11:
df:44:b5:9a:00:3e:14:9a:d6:ec:a4:5b:2b:0a:90:5f:9f:00:
8b:56:2a:bb:7e:0e:5a:82:8f:49:f2:20:05:b5:a5:52:69:56:
1d:89:cb:ef:e6:f7:aa:50:9e:a3:76:13:b0:b1:87:1b:e8:64:
a5:40:9d:d0:ee:37:b8:10:65:c9:c2:2c:c3:82:6c:61:0b:b9:
38:b8:0c:ba:a1:99:2f:ab:1e:f3:f2:08:1c:d2:69:33:bf:36:
5e:1c:49:29
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUTOmJeG4edYI6azg/SqsiohcLAL0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA4MTgwOTIzMDRaFw0yNzA4MTcwOTI4MDRaMDMxMTAvBgNV
BAMTKEYwRkZCM0Y4Mzg2MjlEREU5QjFEMjBENTI1OTM4M0M4QzA0RUJDMDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwBAhTQXtfB+uY3b93BRdzPY7P
OPbT1LteTkZBEfceUxtTEhJvgwdYCbKuA0YX1r1F1QI1GdgyrB9ayjM3siDC8OIA
0d5yBTIlnvUj+g8btqr9UFbHFTDHkqT/AKKTmVseoNrspS6Xk8crolvDX3tckvlI
+f2ab+jBxEOnzrw1X4Ac9XSe31Ckc6FNTg3y77IpFyKwNkuj2uDjjlQqy48lod3i
lecr6gd3esc+RXbMUd8EBVa5hmvu38GvzMeBEYgEP705p4LbEmbLAXILx8+q0ZxC
FpjAMOYYsbAtLrPSWJW5KVfVf2VMapxtq9mhJgN7ZhuRPY07nTn2e8b0i3lBAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQU8P+z+Dhind6bHSDVJZODyMBOvAkwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzODMxMmUzMTMy
MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAC5UXwwDQYJKoZIhvcNAQELBQADggEBAFz5jfEGtzAJp5Mv8rJf+h6u2PSnzyWL
nWo+onxIqpz+I6i174NXwsEubirZXhHGyhrMI+g65u5rMg94BakZDTiWojqHpTJ8
rgar4dZ3aJ5gfU7nILbU1cD6Ak+0lsP+G/9OcNJAbPh3Jq4vzm65rHJRdN+uJ0xd
+BFDeeCr5H4d5Q047Z5YZrj0lmDBhmNU+yJYRCL+kNjm1vBNbnuM3KiNEd9EtZoA
PhSa1uykWysKkF+fAItWKrt+DlqCj0nyIAW1pVJpVh2Jy+/m96pQnqN2E7Cxhxvo
ZKVAndDuN7gQZcnCLMOCbGELuTi4DLqhmS+rHvPyCBzSaTO/Nl4cSSk=
-----END CERTIFICATE-----
Generated at Thu Sep 10 19:09:11 2026 by rpki-client