Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e38312e3132362e302f32342d3234203d3e20313336373837.roa
File: 3138352e38312e3132362e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: FKf84FOkHYpwaWBDXZ7pN11NBPWoOn890CFST3Zc3pE=
Subject key identifier: 59:84:81:B0:6F:58:9A:72:51:7B:39:B7:6D:43:50:AE:3A:BE:8A:D5
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2EC7047C5A2554ACACECD3B6615EB572F145CB0B
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e38312e3132362e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 31 Aug 2026 10:28:28 +0000
ROA not before: Mon 31 Aug 2026 10:23:28 +0000
ROA not after: Mon 30 Aug 2027 10:28:28 +0000
asID: 136787
IP address blocks: 185.81.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 17:17:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:c7:04:7c:5a:25:54:ac:ac:ec:d3:b6:61:5e:b5:72:f1:45:cb:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 31 10:23:28 2026 GMT
Not After : Aug 30 10:28:28 2027 GMT
Subject: CN=598481B06F589A72517B39B76D4350AE3ABE8AD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:25:86:e8:80:dd:75:f4:9b:f4:5c:a3:c5:bf:
42:17:08:0d:ea:9e:f4:d4:ca:52:64:33:33:e2:04:
ce:31:49:05:d7:32:28:66:47:62:0d:dc:2c:29:62:
fd:75:40:58:b1:3a:4c:06:91:c1:81:02:4b:30:10:
9f:10:1d:e5:2f:48:27:8b:c0:f8:4a:70:be:90:ac:
0b:8e:a6:5d:b5:fa:35:4e:cc:a7:03:12:63:e5:3b:
c3:98:d6:89:ff:5d:cd:ce:7a:eb:3b:f2:c3:aa:9d:
35:7c:9c:dd:7e:4c:3d:9d:ac:c3:f4:c0:1e:cb:2b:
8d:21:5b:78:33:96:76:e9:90:b8:ce:41:66:f1:18:
1e:13:fb:81:e3:d0:32:fe:6b:92:ad:92:ac:ba:69:
a4:3c:8e:41:49:95:f7:d0:f7:4e:de:45:6c:b9:5d:
e3:d4:3b:81:21:c0:6a:ef:1b:22:85:14:43:ae:ce:
d6:11:1c:8b:ea:42:cf:2a:12:fb:00:e7:0f:15:42:
c9:59:df:a9:c6:78:ad:e9:7e:18:e4:76:1c:be:e8:
e7:a7:19:fa:33:b0:97:d2:2e:0a:21:85:b0:b6:7b:
e8:48:3b:5a:aa:36:43:55:fb:b0:c0:89:9a:d3:4a:
8d:ea:27:77:ca:58:09:1a:33:a2:3b:4a:b5:0f:81:
78:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:84:81:B0:6F:58:9A:72:51:7B:39:B7:6D:43:50:AE:3A:BE:8A:D5
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e38312e3132362e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.126.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:8d:2a:ad:1c:02:6d:50:19:1c:f5:a8:58:bf:95:de:e6:19:
bf:78:04:48:e0:3a:23:08:8f:52:70:e2:cb:c4:27:9f:7a:a1:
2d:c4:d6:51:ed:98:e3:00:a9:56:9f:8b:f1:54:2c:4c:77:04:
21:b2:a0:92:6b:93:5a:e5:6d:b2:ef:9f:e0:3f:af:8b:56:66:
2d:91:eb:9d:12:8a:b2:38:13:2a:cc:77:cd:3d:53:7b:14:be:
48:c8:8a:a7:3d:20:dc:37:d3:74:a1:83:47:95:aa:80:dd:96:
57:5c:db:7d:ad:4c:2a:a4:ae:7b:58:04:e9:04:be:e7:5f:36:
58:7a:49:e4:b8:7f:f4:d8:9e:98:c4:7d:0d:3d:f9:e0:5c:ae:
c0:29:33:4d:7d:72:67:72:8b:1b:ad:09:dc:ac:98:b6:de:81:
41:c5:ef:78:2a:2d:32:2f:41:e3:09:4d:21:71:94:90:96:53:
5e:52:90:d9:32:0c:74:30:7b:bf:c9:20:a4:4c:d7:95:c9:d9:
24:00:32:97:3b:21:77:fe:d1:03:03:8e:30:7c:17:aa:2d:73:
39:8c:f4:a7:a9:fc:19:a6:5f:8e:b1:75:7c:6a:b5:c0:38:b1:
c6:33:b1:0b:a2:f3:2a:bb:3f:69:65:5c:79:db:c3:84:24:2c:
85:e7:a2:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:33:18 2026 by rpki-client