Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232362e3134372e302f32342d3234203d3e20313336373837.roa
File: 3138352e3232362e3134372e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 6NMIbEX0S/dGv3TB+O9bhcHwlYVM/8cWZz/210f7/P8=
Subject key identifier: CA:35:EF:8E:6D:92:45:99:6A:5D:5D:F4:AC:C1:F8:63:A9:1C:EF:71
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0AEE05F979E5F1FF7E5BDACCFD9139E4D869D9D3
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232362e3134372e302f32342d3234203d3e20313336373837.roa
Signing time: Thu 16 Jul 2026 23:26:16 +0000
ROA not before: Thu 16 Jul 2026 23:21:16 +0000
ROA not after: Thu 15 Jul 2027 23:26:16 +0000
asID: 136787
IP address blocks: 185.226.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:ee:05:f9:79:e5:f1:ff:7e:5b:da:cc:fd:91:39:e4:d8:69:d9:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 16 23:21:16 2026 GMT
Not After : Jul 15 23:26:16 2027 GMT
Subject: CN=CA35EF8E6D9245996A5D5DF4ACC1F863A91CEF71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2f:b1:7d:53:fe:04:83:b8:38:de:8e:a7:31:
ce:af:d5:07:03:98:3b:0d:99:87:01:b1:1a:d0:63:
8c:a9:48:db:d9:c3:1a:dc:47:11:47:c4:36:5f:7b:
02:7d:df:bf:b5:90:51:aa:de:04:eb:63:28:73:32:
7a:0c:28:89:30:95:30:d9:69:d6:91:8e:1a:21:50:
0e:e0:af:a3:b7:e5:5c:33:0e:e1:b9:6a:3a:58:07:
58:97:13:f7:9a:71:60:c0:b1:e6:17:65:1a:62:37:
b3:c8:61:d7:fa:a8:41:33:37:5a:55:f1:c3:c7:e6:
b3:24:b6:81:a2:72:68:10:50:05:d6:7f:fb:32:85:
15:ff:ac:81:a4:08:50:b5:6b:de:11:05:34:1d:b5:
a6:03:01:9b:bc:68:f1:17:a7:0c:d5:85:db:32:19:
34:bb:62:73:6b:92:4e:3f:4e:91:dc:4b:ad:c0:d2:
d8:e8:89:d3:57:d9:8b:37:35:57:a6:8d:dd:46:de:
b0:15:4e:84:f8:13:92:a6:82:54:d9:fe:97:b9:e1:
1c:79:95:20:35:3b:60:1e:23:c6:1b:31:d5:0f:9f:
b6:13:d3:fd:7b:58:57:c3:5a:21:e0:c1:48:87:ed:
92:11:3e:69:5a:90:61:7f:fe:67:1e:17:3b:57:68:
7e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:35:EF:8E:6D:92:45:99:6A:5D:5D:F4:AC:C1:F8:63:A9:1C:EF:71
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232362e3134372e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.147.0/24
Signature Algorithm: sha256WithRSAEncryption
10:ce:6d:d4:a1:50:d7:c7:74:c7:ac:29:d3:1c:86:f1:4e:f1:
44:9e:eb:40:40:bf:b2:3f:13:75:b6:61:b1:9d:93:b9:00:eb:
3b:d5:3e:54:e5:8e:82:1b:93:0f:1f:89:87:f0:b8:d0:3d:fe:
28:23:ad:ab:ea:6b:c3:29:e6:7d:41:ce:2a:96:98:16:b0:ff:
5a:7e:83:f5:a6:3e:a5:c4:be:2b:3d:2c:77:3a:6f:1c:82:4d:
00:66:46:85:e8:74:0f:1d:7c:20:c8:98:fc:9d:47:b1:48:85:
44:05:e9:66:d2:ce:5f:59:76:51:56:04:bc:ba:af:60:db:e3:
6e:03:de:40:d1:e2:bd:3c:51:ce:51:00:d2:a2:26:af:80:78:
06:9a:aa:1d:3c:08:b3:60:47:64:db:4f:0d:a2:0c:97:03:c5:
93:3f:45:86:a8:5b:06:5d:1f:d8:0d:ab:33:68:f5:0e:09:e4:
e4:72:f0:47:2b:dd:c5:15:2a:20:8a:95:b0:87:d1:d1:91:6d:
86:cb:dd:55:21:15:29:80:01:22:e1:63:a2:1a:20:c0:c7:ed:
8c:f4:27:ca:72:6b:39:eb:c9:4a:bc:e0:f4:25:f3:51:36:83:
93:49:58:29:af:bc:cf:9a:51:45:ea:4f:dc:ad:e1:6a:19:a1:
36:d2:d3:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:34:13 2026 by rpki-client