Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3234332e302f32342d3332203d3e203632323430.roa
File: 3138352e3138372e3234332e302f32342d3332203d3e203632323430.roa (raw, json)
Hash identifier: yF7oUOItHmwwk4Jye+nL5e4A3kiLuPprKm8aYA7l/sg=
Subject key identifier: EB:EB:AF:B3:5A:BE:20:75:F7:80:EA:F1:4F:2A:84:B2:EC:55:4E:2C
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2FF2E2EB5B35DF04A85CA97BA06823DEF5F01B41
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3234332e302f32342d3332203d3e203632323430.roa
Signing time: Fri 24 Jul 2026 15:26:57 +0000
ROA not before: Fri 24 Jul 2026 15:21:57 +0000
ROA not after: Fri 23 Jul 2027 15:26:57 +0000
asID: 62240
IP address blocks: 185.187.243.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 17:13:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:f2:e2:eb:5b:35:df:04:a8:5c:a9:7b:a0:68:23:de:f5:f0:1b:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 24 15:21:57 2026 GMT
Not After : Jul 23 15:26:57 2027 GMT
Subject: CN=EBEBAFB35ABE2075F780EAF14F2A84B2EC554E2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a3:0d:da:b9:06:70:b5:b5:be:53:da:0a:3f:
02:bc:cc:6e:61:c9:f8:a4:55:35:de:15:d2:b5:6d:
6d:7c:94:7d:6f:dc:f9:b4:34:3a:2d:13:dc:eb:bc:
a8:65:3a:8e:27:13:d5:07:db:a3:06:86:f1:72:6e:
1a:20:9e:c6:9f:8b:66:e7:dc:45:1a:9e:5e:32:8c:
27:cc:c4:10:4d:78:12:5f:7f:ad:27:54:ba:3c:51:
2b:55:13:dc:94:e4:f1:2b:5a:8f:45:9e:13:ad:1c:
2b:0c:95:0f:d0:6d:81:61:9f:bf:f1:54:51:0b:ac:
88:48:46:f9:b8:81:93:9c:74:c7:23:c2:61:61:bd:
dc:e5:c0:77:46:c2:70:16:a4:80:74:62:8e:c6:1d:
0c:48:7a:33:f1:cb:67:07:7b:56:85:c3:1c:e9:48:
0c:55:9c:25:e2:e4:3e:85:c5:03:5c:fc:7d:40:5a:
1e:0a:a7:79:ef:cb:a0:c5:f6:fd:fe:0e:ed:8c:f4:
07:dd:74:9f:8d:2a:9e:5b:af:b3:82:a9:b4:34:8e:
9c:dd:fb:2f:6b:f7:69:f9:52:5a:62:a7:b6:ac:5b:
2a:a3:e6:27:47:2c:6a:ad:b5:61:f1:25:3f:d1:cd:
86:88:e6:16:76:c5:56:99:ad:0e:49:a3:4a:e2:71:
7c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:EB:AF:B3:5A:BE:20:75:F7:80:EA:F1:4F:2A:84:B2:EC:55:4E:2C
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3234332e302f32342d3332203d3e203632323430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.243.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:06:0f:20:21:08:24:37:de:49:ce:9c:d5:10:e0:11:c1:d0:
65:c4:db:c5:68:68:de:19:a8:28:f4:88:90:fc:f1:36:19:52:
d0:d4:39:fc:8e:1e:af:f0:f6:07:20:30:dd:e4:fc:3e:83:8f:
a1:5c:34:bd:1b:d4:9f:19:49:97:e3:b9:6f:fa:a7:2a:e3:6c:
d7:88:b9:02:b2:9f:6b:e8:42:cf:37:e7:f3:2e:48:d4:07:d2:
ad:17:ac:2b:d6:c6:27:31:7a:5d:75:9a:62:47:c5:3c:81:05:
60:7b:65:3e:bd:21:55:ef:98:06:53:9d:32:91:63:c2:17:fe:
33:15:27:8a:42:58:14:46:a4:91:d2:4c:f4:bf:67:1b:02:d9:
3d:0c:46:04:ff:76:3b:11:ea:dd:3f:df:82:65:1c:4b:3c:10:
fc:05:4b:0f:b8:b2:b7:0b:a7:30:32:8b:a9:9a:4a:5d:98:74:
b3:78:16:41:ea:07:9b:aa:b2:96:a1:7a:42:8f:19:a5:85:32:
84:90:ae:81:c7:55:10:5d:ba:83:7d:98:94:f0:a8:ab:fc:c4:
d9:4d:87:ee:6a:07:6b:9e:e2:c4:d4:6f:b2:1b:7c:d1:e0:ed:
f7:2c:14:fd:50:5c:69:ee:2a:39:b7:a1:47:27:08:12:80:22:
2e:37:59:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:59:41 2026 by rpki-client