Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231382e3132372e302f32342d3234203d3e20323132323338.roa
File: 3138352e3231382e3132372e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: GIywvM+0hOjIlIXLWLoldWbCucRNL9zbiY3PNkvI9rk=
Subject key identifier: 75:71:29:21:57:B6:0B:73:E9:D5:22:F9:0D:C1:3B:FF:C5:07:AC:DF
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 397AA5258A04B492980E16089A96A3B8EBA5C637
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231382e3132372e302f32342d3234203d3e20323132323338.roa
Signing time: Tue 22 Sep 2026 13:29:09 +0000
ROA not before: Tue 22 Sep 2026 13:24:09 +0000
ROA not after: Tue 21 Sep 2027 13:29:09 +0000
asID: 212238
IP address blocks: 185.218.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 10:26:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:7a:a5:25:8a:04:b4:92:98:0e:16:08:9a:96:a3:b8:eb:a5:c6:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 22 13:24:09 2026 GMT
Not After : Sep 21 13:29:09 2027 GMT
Subject: CN=7571292157B60B73E9D522F90DC13BFFC507ACDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9e:bd:23:a7:35:0f:24:f4:50:37:3e:3d:d3:
17:6c:d5:22:8f:61:82:4d:e2:96:b6:31:7f:b8:85:
2a:69:6b:d9:73:99:ac:97:b8:08:64:ad:c5:24:67:
b6:02:6c:63:ad:fe:da:49:96:db:af:a8:88:40:69:
09:9b:15:b7:bb:57:9a:37:61:62:c7:6a:b2:1e:68:
74:ae:1d:53:16:1f:73:6c:69:52:d2:34:d0:94:5a:
9a:11:66:7a:fd:9e:64:f4:86:30:3d:e2:e4:6f:bd:
a3:fc:cb:ca:17:d7:f1:b4:dc:b9:ae:89:68:65:1d:
2c:14:0e:5e:ea:2d:e6:51:92:b7:8f:61:2d:68:ae:
f3:13:d5:ed:3c:91:ee:11:89:0e:cc:36:fe:0b:53:
d9:4f:6d:66:b3:c9:01:b9:90:23:9a:63:bd:3e:73:
04:1b:9d:23:15:2d:00:00:22:7c:45:d0:20:6c:10:
3f:66:68:dc:1b:c8:d9:a1:22:c6:41:23:a2:bb:58:
26:77:c3:ed:35:02:27:2e:65:43:33:f6:2a:c8:df:
da:6b:42:02:2b:be:94:78:a1:d1:cb:58:25:73:76:
c2:b7:0d:44:b5:8f:2c:dc:b2:11:5f:2d:5f:5f:88:
05:81:96:84:ab:92:b3:80:e3:b7:b9:ec:d3:9a:20:
78:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:71:29:21:57:B6:0B:73:E9:D5:22:F9:0D:C1:3B:FF:C5:07:AC:DF
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231382e3132372e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.127.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:20:2c:94:62:22:df:ae:3f:ff:39:1f:c4:67:de:d4:be:fc:
16:99:ce:3f:bc:a2:94:19:b1:92:56:cf:d3:ae:18:4e:31:d6:
32:f4:84:7e:a9:38:13:b7:4a:b6:19:52:01:10:49:14:e7:ba:
d7:47:fb:81:46:65:0c:bd:21:07:2b:48:ce:2b:56:ba:9e:bb:
81:f6:81:3b:3f:20:22:20:3b:6b:27:d8:aa:e5:fe:09:0f:15:
28:dc:ed:7a:01:a4:1f:f7:a6:da:33:46:3f:bb:00:a9:2a:35:
52:8b:b1:9d:36:83:4c:9f:de:a9:73:01:05:20:b4:8b:d6:93:
a4:a5:e9:7e:b3:69:f1:48:e5:de:42:45:78:38:eb:c1:02:6b:
c4:73:bf:e5:b8:54:b2:0a:ab:7a:8d:42:51:33:1b:f8:65:4a:
4c:1d:e5:47:9b:53:05:fa:cb:4f:13:ae:09:06:7e:93:ca:34:
87:ff:bd:28:77:56:05:73:19:7e:3d:7e:0f:14:7d:46:79:12:
36:00:52:ce:ea:a0:b6:ed:28:5e:04:8a:d4:cd:1b:09:46:0c:
0b:31:1c:2e:81:d9:ce:27:a1:43:c0:06:45:91:82:7c:2f:f1:
a8:35:fd:04:3a:2a:44:79:c2:d4:a2:d3:fc:75:37:ea:44:25:
d8:e1:63:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:33:54 2026 by rpki-client