Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3138352e3231302e3136382e302f32342d3234203d3e20383334.roa
File: 3138352e3231302e3136382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 8juIV0dftfDc+Y71BykCuPcZOZufatRRCpbHWIi1myo=
Subject key identifier: BE:C9:72:06:FA:E1:37:40:79:BF:F1:31:48:05:A2:57:64:16:14:CF
Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial: 1851B828150A0D99A046D188AAC3BCE9BCBB96FA
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3138352e3231302e3136382e302f32342d3234203d3e20383334.roa
Signing time: Sun 25 Oct 2026 03:56:39 +0000
ROA not before: Sun 25 Oct 2026 03:51:39 +0000
ROA not after: Sun 24 Oct 2027 03:56:39 +0000
asID: 834
IP address blocks: 185.210.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 07:38:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:51:b8:28:15:0a:0d:99:a0:46:d1:88:aa:c3:bc:e9:bc:bb:96:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Validity
Not Before: Oct 25 03:51:39 2026 GMT
Not After : Oct 24 03:56:39 2027 GMT
Subject: CN=BEC97206FAE1374079BFF1314805A257641614CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:67:44:83:50:51:d0:07:88:01:a4:21:07:18:
fb:1b:2b:f2:c3:53:1a:5e:a1:80:02:c9:70:dc:07:
f5:de:5c:5a:84:d4:98:fb:ca:f5:65:c8:3e:36:05:
5b:85:f5:5d:c3:ec:d3:07:8f:4b:1f:84:2d:e9:9a:
d3:53:88:13:08:f7:40:2a:de:5a:61:b3:dc:13:6d:
00:07:ff:1b:2b:bc:26:c9:9c:52:b1:df:65:a3:66:
1d:08:89:d6:99:63:d7:d6:83:bf:cc:3c:0d:b0:36:
37:4d:73:4f:6a:34:2d:bc:05:05:40:37:63:78:bf:
63:43:08:67:8a:c8:e0:c2:27:0c:67:46:63:3c:de:
af:f0:4b:7e:79:1f:b6:da:84:76:b1:9a:14:63:8b:
dd:48:55:15:ec:c0:53:84:b5:90:6d:02:de:c3:a1:
56:f9:12:30:f4:84:f9:fc:54:a7:56:8a:b4:a8:5d:
ad:e4:ec:15:9c:e7:f4:b3:3e:d3:5a:c7:1e:eb:c0:
57:d7:b1:e9:eb:81:76:99:a9:41:37:e0:69:39:15:
d1:25:17:da:ae:bf:9a:52:66:8f:39:8e:a0:23:c7:
b5:1e:b3:6d:f1:62:00:d9:5f:62:2f:15:6d:63:2d:
e1:69:18:db:65:b8:0e:d2:b8:dc:dd:6e:8d:2e:d5:
56:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C9:72:06:FA:E1:37:40:79:BF:F1:31:48:05:A2:57:64:16:14:CF
X509v3 Authority Key Identifier:
keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3138352e3231302e3136382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.168.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:f3:2a:59:8b:6a:45:93:e6:c6:72:dd:ef:37:68:29:fa:f8:
5e:6a:f4:c8:72:80:e3:33:c5:38:1e:d7:01:d7:4e:0a:0b:f1:
e3:2a:05:ab:46:7f:b1:e3:af:49:49:99:4d:80:57:9b:87:ee:
2e:fb:69:3b:48:b1:5d:6f:6a:96:62:7f:8e:44:27:d5:b1:85:
3c:74:5f:21:3a:fd:26:76:8a:9b:08:88:65:a3:55:b3:c8:11:
55:ef:38:09:dc:5c:99:15:05:9d:65:68:eb:bd:80:eb:ce:17:
43:c5:40:26:fa:3f:5b:af:bc:98:b1:7e:3c:3e:db:8e:f2:6a:
62:08:92:f2:6a:e2:49:84:3c:88:13:46:eb:e9:af:47:df:2f:
3a:79:de:fb:85:0a:b4:b1:1d:d2:c1:2e:bc:9a:ed:4b:ac:cb:
a9:6f:c2:e4:38:8d:3b:53:83:95:c5:8e:04:42:2a:91:e5:fe:
27:d5:1b:c8:ab:31:9e:db:2f:e3:c1:57:af:25:05:f6:7a:7c:
72:a3:e6:05:22:40:d6:9d:30:c2:fc:ba:e0:a4:ee:6e:0f:9f:
da:8e:28:77:75:20:37:8a:64:59:63:8a:a7:60:ea:a9:2f:d0:
fd:0a:d4:a4:6b:cd:54:a2:55:ea:a7:c1:69:e7:3e:93:6b:58:
bc:d9:80:21
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUGFG4KBUKDZmgRtGIqsO86by7lvowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjJiZmQ0ZTAyMTU0N2QwMzBhYzEwYjAyMTM1MzVkNGM2
OTY4ZWVkZTAeFw0yNjEwMjUwMzUxMzlaFw0yNzEwMjQwMzU2MzlaMDMxMTAvBgNV
BAMTKEJFQzk3MjA2RkFFMTM3NDA3OUJGRjEzMTQ4MDVBMjU3NjQxNjE0Q0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCDZ0SDUFHQB4gBpCEHGPsbK/LD
UxpeoYACyXDcB/XeXFqE1Jj7yvVlyD42BVuF9V3D7NMHj0sfhC3pmtNTiBMI90Aq
3lphs9wTbQAH/xsrvCbJnFKx32WjZh0IidaZY9fWg7/MPA2wNjdNc09qNC28BQVA
N2N4v2NDCGeKyODCJwxnRmM83q/wS355H7bahHaxmhRji91IVRXswFOEtZBtAt7D
oVb5EjD0hPn8VKdWirSoXa3k7BWc5/SzPtNaxx7rwFfXsenrgXaZqUE34Gk5FdEl
F9quv5pSZo85jqAjx7Ues23xYgDZX2IvFW1jLeFpGNtluA7SuNzdbo0u1VZHAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUvslyBvrhN0B5v/ExSAWiV2QWFM8wHwYDVR0j
BBgwFoAUIr/U4CFUfQMKwQsCE1NdTGlo7t4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjNhYWNkMTctYmY5ZC00N2RiLTg2NGQtZjljN2MyYmUx
ODNhLzAvMjJCRkQ0RTAyMTU0N0QwMzBBQzEwQjAyMTM1MzVENEM2OTY4RUVERS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lyX1U0Q0ZVZlFNS3dRc0NFMU5kVEds
bzd0NC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMjNhYWNkMTct
YmY5ZC00N2RiLTg2NGQtZjljN2MyYmUxODNhLzAvMzEzODM1MmUzMjMxMzAyZTMx
MzYzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALnS
qDANBgkqhkiG9w0BAQsFAAOCAQEAnPMqWYtqRZPmxnLd7zdoKfr4Xmr0yHKA4zPF
OB7XAddOCgvx4yoFq0Z/seOvSUmZTYBXm4fuLvtpO0ixXW9qlmJ/jkQn1bGFPHRf
ITr9JnaKmwiIZaNVs8gRVe84CdxcmRUFnWVo672A684XQ8VAJvo/W6+8mLF+PD7b
jvJqYgiS8mriSYQ8iBNG6+mvR98vOnne+4UKtLEd0sEuvJrtS6zLqW/C5DiNO1OD
lcWOBEIqkeX+J9UbyKsxntsv48FXryUF9np8cqPmBSJA1p0wwvy64KTubg+f2o4o
d3UgN4pkWWOKp2DqqS/Q/QrUpGvNVKJV6qfBaec+k2tYvNmAIQ==
-----END CERTIFICATE-----
Generated at Fri Oct 30 11:39:56 2026 by rpki-client