Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230392e3232302e302f32342d3234203d3e203431393434.roa
File: 3138352e3230392e3232302e302f32342d3234203d3e203431393434.roa (raw, json)
Hash identifier: v2Vw6weyDPA37k6g1gvv/3ohoNTvgormn38SFj6+q6E=
Subject key identifier: 47:CD:B1:20:6A:F2:DF:9E:06:96:89:95:C6:18:7B:05:B2:44:94:6F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5A7C552932AA71CE703A4CE1E3BB75281D5DFF87
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230392e3232302e302f32342d3234203d3e203431393434.roa
Signing time: Fri 24 Jul 2026 15:27:03 +0000
ROA not before: Fri 24 Jul 2026 15:22:03 +0000
ROA not after: Fri 23 Jul 2027 15:27:03 +0000
asID: 41944
IP address blocks: 185.209.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:7c:55:29:32:aa:71:ce:70:3a:4c:e1:e3:bb:75:28:1d:5d:ff:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 24 15:22:03 2026 GMT
Not After : Jul 23 15:27:03 2027 GMT
Subject: CN=47CDB1206AF2DF9E06968995C6187B05B244946F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d8:c2:aa:c0:57:38:2d:a2:14:f4:76:76:80:
a3:73:d4:2b:34:b6:74:57:ca:16:2f:84:cb:4e:c3:
c7:47:b5:71:4e:82:cb:bd:b2:6d:d0:97:b3:a5:6c:
fe:18:40:7c:56:4b:f0:84:4a:94:d7:fb:1b:2e:dd:
de:af:94:ea:3e:63:91:29:1b:0a:ad:aa:be:ac:3b:
32:57:04:5b:ad:72:2d:1e:f5:09:0e:9d:51:eb:7e:
ca:04:82:7f:f3:ca:6a:2c:93:4a:a8:aa:d7:5a:02:
ec:10:7b:46:dd:fb:fb:ee:e1:e1:0a:49:18:35:d2:
70:e6:dc:c6:20:fe:61:43:dc:ce:07:b2:29:33:cd:
95:81:39:ac:50:3a:2e:cb:7d:cc:3c:e6:16:7d:78:
7b:3a:e9:b6:af:47:0d:a6:6a:65:47:bc:98:dc:96:
e5:ec:1d:7b:f8:10:ca:5d:b9:a2:a8:15:7e:16:00:
70:71:26:23:06:da:46:64:ce:54:17:53:d4:75:e5:
d6:f5:27:42:6c:f4:f9:e2:61:8b:0f:e3:69:27:01:
d8:0b:7f:2a:5e:37:ab:6b:7c:4e:dd:d4:fa:fb:af:
fc:55:39:b8:88:8e:a8:f7:bd:23:3a:4c:1e:eb:43:
87:7e:d1:3a:2c:a7:5a:55:07:a9:c6:fa:a4:1d:08:
e1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:CD:B1:20:6A:F2:DF:9E:06:96:89:95:C6:18:7B:05:B2:44:94:6F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230392e3232302e302f32342d3234203d3e203431393434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.209.220.0/24
Signature Algorithm: sha256WithRSAEncryption
76:d0:7c:9c:c7:3e:2e:0b:c8:2c:03:b1:91:a2:8f:70:3b:89:
35:3a:bf:d8:6a:e2:bb:dd:73:5f:5d:62:73:45:c7:a4:78:61:
42:6d:63:6e:ed:18:35:3b:6c:bd:7c:4e:b8:b3:f2:4d:8f:8e:
ee:5b:b3:65:10:24:1f:8a:f6:ae:d8:ad:70:4a:de:a9:1e:51:
ce:60:af:0d:81:ca:01:5b:8d:3c:8a:05:be:6e:98:fb:43:3e:
b5:25:0b:6f:f2:79:ec:fb:70:0d:14:31:d7:6e:03:4b:67:9d:
b5:89:a8:01:54:98:3c:e2:ff:a4:2e:ae:09:e5:77:f3:b3:cd:
f1:d4:1b:25:80:4d:1b:35:22:4b:f5:3f:ea:22:fd:9f:ec:c6:
fb:db:db:aa:85:97:66:52:72:e9:09:a0:17:46:9a:36:84:35:
fa:5b:ff:37:34:50:11:80:e2:f0:cd:6f:de:e1:27:3b:b3:63:
29:36:b5:7c:e4:a5:aa:ae:97:f8:08:c9:5e:50:44:c2:b0:ea:
30:4f:bb:34:ad:b8:24:31:d0:11:59:06:43:32:c3:c1:ea:f7:
e4:26:43:50:75:75:95:c5:28:19:9f:4a:20:15:15:06:7b:c9:
06:77:7e:23:b2:fb:03:3a:e8:fe:fb:74:8b:3d:23:95:7b:7c:
ac:0a:3a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:29:23 2026 by rpki-client