Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e38312e3132362e302f32342d3234203d3e20313336373837.roa
File: 3138352e38312e3132362e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: nk9zNVRrJmhcn/TjNsuU80/3lM77LZKXheCchS7KMX0=
Subject key identifier: E3:E0:76:C5:4E:60:D7:D6:33:C7:AD:9B:61:FA:68:A7:D0:40:81:7F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6876CCF2EB52E010584F7262EDE5C5E2CEF604B3
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e38312e3132362e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 29 Sep 2025 09:47:46 +0000
ROA not before: Mon 29 Sep 2025 09:42:46 +0000
ROA not after: Mon 28 Sep 2026 09:47:46 +0000
asID: 136787
IP address blocks: 185.81.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:76:cc:f2:eb:52:e0:10:58:4f:72:62:ed:e5:c5:e2:ce:f6:04:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 29 09:42:46 2025 GMT
Not After : Sep 28 09:47:46 2026 GMT
Subject: CN=E3E076C54E60D7D633C7AD9B61FA68A7D040817F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7e:02:15:9e:5a:2c:71:23:63:77:c7:dd:6d:
10:78:6a:de:d7:1d:b4:a2:bb:7c:36:0c:ef:ed:4c:
ca:78:a6:d8:88:b7:01:8b:ee:23:38:69:3a:63:dd:
08:77:c3:21:e9:26:20:36:99:d7:c0:ec:ed:e2:02:
f4:bb:11:62:88:96:f5:bd:50:80:92:2e:45:f2:bf:
f8:50:19:ec:f3:a5:75:00:84:3e:82:40:c6:d1:c5:
7b:4d:80:85:6d:85:51:81:0a:a5:b5:bf:a8:2e:6b:
d7:30:60:21:e2:e4:8b:76:f5:12:9d:64:a4:45:84:
2e:d3:9c:0d:1d:43:0e:e7:9f:b2:88:7d:d0:b1:44:
7a:f9:dc:9b:69:5a:3b:70:11:f1:2e:3f:35:3d:d8:
07:6e:fe:03:b3:20:14:06:58:59:f8:0e:4a:1a:f4:
bf:b9:3f:ac:50:d8:97:79:85:70:b0:77:ff:1d:fd:
f2:be:4d:c3:4b:47:e6:4e:94:ad:91:32:03:a7:5b:
85:9f:97:71:85:79:be:9f:0d:f5:bc:92:cd:b6:d4:
1d:82:0b:5f:57:84:30:93:27:26:d0:8f:1c:70:e1:
c4:f7:2e:2f:d4:8f:73:be:2c:cf:99:37:83:16:6a:
77:73:e8:a0:2f:3d:2e:77:6e:a5:c5:5b:37:0f:ff:
f2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E0:76:C5:4E:60:D7:D6:33:C7:AD:9B:61:FA:68:A7:D0:40:81:7F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e38312e3132362e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.126.0/24
Signature Algorithm: sha256WithRSAEncryption
72:7d:cb:1d:46:51:12:43:70:a0:ba:48:a5:52:95:c1:e2:b9:
cc:63:99:fe:44:a6:cf:50:5e:ad:80:8d:49:ff:c5:da:89:e6:
77:db:2d:e3:cc:2e:db:d5:97:b9:2c:6a:26:ed:bf:7d:df:9c:
cf:9f:fe:56:1b:41:d4:98:b5:eb:da:bc:4d:2e:b2:f2:47:bc:
c1:a9:33:81:03:18:53:2c:25:b4:6b:1e:0d:d6:1e:df:19:3f:
8e:a4:3b:0c:eb:1a:ff:17:1b:54:21:93:fb:04:b7:73:90:9d:
d5:39:68:af:09:76:90:fd:40:67:88:37:a5:79:7a:cc:72:25:
07:ca:ef:5c:cb:02:51:a5:db:f9:af:8f:0d:6b:a5:79:90:3e:
36:8c:29:83:3b:c1:01:f7:c9:11:2c:83:fa:2a:38:6a:16:dd:
77:27:a8:97:30:49:12:d1:c4:9c:f4:63:19:78:7c:d0:ed:39:
27:8b:da:b2:e3:5b:1c:46:d4:9a:c1:ae:76:02:58:0b:a6:c5:
61:e8:76:47:6a:6c:ed:7b:98:f6:f4:98:cb:80:fb:d7:bc:38:
b5:04:ed:9f:ef:d7:1b:af:94:bc:d5:cf:42:f4:94:db:49:fa:
b4:cd:1a:66:fa:da:22:11:81:26:e2:a0:e6:d0:d4:a4:bd:ad:
59:90:17:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:21:17 2025 by rpki-client