Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138332e38372e302f32342d3234203d3e20313336373837.roa
File: 3138352e3138332e38372e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: TxK4mtVAd5WovtVrnd15M3qTlFXMGKicLfXQCdwCIuA=
Subject key identifier: E9:31:94:AF:9C:23:54:7E:EE:89:1A:C8:E0:48:B7:3D:80:21:01:AA
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 37D4738CE71B95F1B1AA4A4046CAB7B7FC870D45
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138332e38372e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 15 Mar 2026 12:23:26 +0000
ROA not before: Sun 15 Mar 2026 12:18:26 +0000
ROA not after: Sun 14 Mar 2027 12:23:26 +0000
asID: 136787
IP address blocks: 185.183.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:d4:73:8c:e7:1b:95:f1:b1:aa:4a:40:46:ca:b7:b7:fc:87:0d:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 15 12:18:26 2026 GMT
Not After : Mar 14 12:23:26 2027 GMT
Subject: CN=E93194AF9C23547EEE891AC8E048B73D802101AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ba:0d:52:f0:c8:45:02:0b:cf:1e:ac:0f:7a:
7a:52:a0:c4:9a:1d:e3:04:35:70:85:21:2f:87:ed:
61:49:60:b3:06:3f:a4:40:5e:e9:07:65:01:a4:69:
d8:b0:57:c2:e7:af:49:b5:03:bd:ff:51:ff:fe:8e:
af:22:49:9f:79:f2:58:5a:ce:21:23:52:4e:65:98:
70:30:2d:84:00:12:88:98:4e:2e:c7:6f:d5:c1:f9:
3f:61:37:71:c3:32:e1:82:20:e4:16:99:20:aa:e8:
69:8a:2d:2c:64:53:f9:47:2e:be:9e:06:cc:d7:aa:
6a:3b:28:95:84:c5:8b:25:67:ab:46:f8:73:03:fb:
e8:b2:2a:b0:35:bc:40:b0:08:e6:c9:3b:f9:94:52:
03:7c:e5:07:f1:75:5f:1d:2e:bd:ee:6e:74:6c:7a:
ed:41:11:50:5f:9e:63:f5:09:7a:7e:a8:7d:39:58:
a8:f5:d0:de:2c:9e:11:03:55:63:2f:63:46:ec:48:
02:15:35:be:1a:a2:24:12:34:de:91:2f:43:22:be:
7b:0e:f7:99:78:05:b2:44:f9:b7:1c:2a:c8:9a:c1:
9e:84:2e:26:28:a0:9f:9e:86:24:a5:c1:51:a4:56:
72:0d:a2:98:00:07:0e:93:3c:64:6a:a1:ad:10:06:
8b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:31:94:AF:9C:23:54:7E:EE:89:1A:C8:E0:48:B7:3D:80:21:01:AA
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138332e38372e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.183.87.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:82:e0:eb:97:4e:8b:b3:ce:d4:3e:c7:40:5d:17:be:9e:a9:
20:09:9e:72:d0:4a:02:b7:48:ac:ce:48:d2:7e:2f:a3:77:b3:
0f:83:9b:8b:dd:97:47:a9:1b:de:e0:49:43:61:b4:8c:5b:9a:
d6:ff:e8:bf:a0:ff:f7:e7:10:a8:4f:8e:71:40:7e:93:24:ff:
dc:e3:d9:7b:60:2f:f0:20:2d:2b:ed:40:70:0c:70:0d:53:07:
4c:56:f8:5f:8d:d1:b1:fd:b9:87:e6:47:ee:39:cd:a8:44:26:
1f:87:64:04:07:78:c6:80:67:98:d6:11:be:64:8d:82:bc:1b:
87:7b:0a:32:e8:b2:1f:49:7b:ec:49:04:f0:66:4a:38:23:f2:
f8:3a:c2:f1:fd:04:3c:ff:5c:35:29:eb:e3:71:43:c7:53:25:
84:74:c7:d4:6d:fb:f9:5d:f5:ae:69:2d:7c:25:61:19:4a:ec:
8f:19:bf:db:81:36:24:d5:12:c0:15:e5:44:fa:f5:9a:81:15:
3d:9a:56:ba:03:6f:9c:d7:03:cd:a9:bc:fe:06:88:38:26:e5:
50:f4:76:9e:fe:5f:5a:99:b3:10:23:82:78:7a:70:e2:f5:05:
f2:74:6b:b3:80:af:68:ab:89:c0:e0:5b:95:52:61:98:2a:f8:
78:d0:65:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:34:28 2026 by rpki-client