Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232352e3233352e302f32342d3234203d3e20323034313730.roa
File: 3138352e3232352e3233352e302f32342d3234203d3e20323034313730.roa (raw, json)
Hash identifier: 5+26MlmOmuKnTDyQ4yJmFUN/zigVc/jcZafPZQ7vuMk=
Subject key identifier: 3B:E2:D1:07:4C:62:5A:9C:63:D7:4C:AA:1D:F9:36:EB:E1:05:57:EC
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6296A8224E5189C8605A831EBA78DF01B56ECDCA
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232352e3233352e302f32342d3234203d3e20323034313730.roa
Signing time: Tue 28 Apr 2026 23:23:55 +0000
ROA not before: Tue 28 Apr 2026 23:18:55 +0000
ROA not after: Tue 27 Apr 2027 23:23:55 +0000
asID: 204170
IP address blocks: 185.225.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:96:a8:22:4e:51:89:c8:60:5a:83:1e:ba:78:df:01:b5:6e:cd:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 28 23:18:55 2026 GMT
Not After : Apr 27 23:23:55 2027 GMT
Subject: CN=3BE2D1074C625A9C63D74CAA1DF936EBE10557EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:75:f4:6f:e4:4c:69:0f:2b:f8:07:61:40:6b:
38:4a:c8:2e:ac:d5:a5:4e:68:e7:64:ab:83:83:1e:
8e:61:70:1a:f1:6a:94:d7:ee:8e:42:6a:9e:38:ee:
8a:2d:38:e5:19:ae:3d:ac:45:0d:6c:59:59:3b:72:
38:38:d9:7f:e0:d3:f0:87:a9:98:fc:34:7d:f6:41:
6a:71:1c:8e:75:03:41:b9:fb:ac:fe:f8:81:24:69:
8a:03:d4:89:79:9e:02:f3:25:2f:8e:20:d0:a0:76:
eb:95:95:d6:cb:79:8c:bc:1c:d4:e8:f1:ee:98:a5:
74:eb:ab:54:d5:3e:76:fa:cd:ad:92:2e:ae:80:c2:
cb:07:ef:d3:03:4e:46:1b:e6:90:7c:03:f0:c9:99:
a3:98:17:46:b2:94:f3:2b:ab:7d:3a:1c:ee:bd:63:
9e:f0:08:1c:63:bd:e9:c8:85:54:ec:85:91:76:2f:
e2:43:de:c2:63:d3:df:d0:70:31:fc:da:0b:15:0a:
45:5a:75:a2:d6:a8:2b:97:b8:87:83:bf:48:3a:3b:
e4:20:7b:37:a2:1e:f3:f8:23:b1:9e:b2:83:d3:28:
a8:5c:ef:e9:55:78:27:a4:0b:19:d4:c0:fb:49:b5:
f5:01:ad:bd:6b:2a:31:8f:3b:9e:9c:20:5b:9f:ae:
65:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E2:D1:07:4C:62:5A:9C:63:D7:4C:AA:1D:F9:36:EB:E1:05:57:EC
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232352e3233352e302f32342d3234203d3e20323034313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.235.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:57:70:a9:11:d8:95:03:24:0f:d9:3d:59:f4:24:12:ad:71:
c2:a9:b4:68:32:27:ed:65:26:4a:69:83:76:96:ce:7e:6e:95:
43:9f:95:a0:1a:d5:ad:25:68:00:2c:34:81:91:2f:45:48:a2:
e6:d7:1a:99:e8:af:4c:63:1e:fe:3f:39:fa:b8:27:ae:05:9c:
d8:69:60:74:09:fd:2b:d6:73:50:d0:dc:a7:94:c9:ef:e1:fb:
ba:65:9b:ac:4f:b5:8e:38:6f:b6:99:9e:0b:ec:a3:56:17:ac:
a7:07:f0:32:f0:3d:da:03:9f:67:88:1e:6e:9f:75:7f:7b:5c:
2e:a5:c0:8e:65:c5:b8:16:8a:6e:8a:7b:c6:5b:80:6e:c4:eb:
f3:1b:5f:a2:73:1b:dd:64:91:56:a2:f2:bf:b2:30:ff:f4:e3:
96:d5:a3:6a:d2:57:a5:9f:ea:07:0a:c6:b0:07:ab:95:f0:98:
11:d8:7c:6a:cd:58:5c:fe:c5:3d:a1:df:bd:9c:66:97:56:5a:
e8:84:36:ee:d8:b8:b8:d5:83:0b:62:75:99:b1:a6:6b:24:02:
ea:c6:46:d4:3b:02:64:b7:c0:be:b5:a5:2e:86:c1:64:01:26:
55:7e:98:83:bf:4c:a2:c9:c6:f1:fe:a5:7f:4c:52:82:de:37:
ef:b4:83:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:41:19 2026 by rpki-client