Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/3138352e322e3136322e302f32332d3234203d3e2034373636.roa
File: 3138352e322e3136322e302f32332d3234203d3e2034373636.roa (raw, json)
Hash identifier: 6xIjLnCy0qhWyFEfLZh4dFeHr64CJ0o3uIQFz4O4Ksk=
Subject key identifier: 33:FB:EE:8D:52:EA:AA:0E:B2:F6:C7:2C:4B:7C:BF:EA:38:1C:DE:21
Certificate issuer: /CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
Certificate serial: 093F24F3287CFD6C2395B8EC1112AB5423850AC8
Authority key identifier: 9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/3138352e322e3136322e302f32332d3234203d3e2034373636.roa
Signing time: Fri 25 Sep 2026 14:34:17 +0000
ROA not before: Fri 25 Sep 2026 14:29:17 +0000
ROA not after: Fri 24 Sep 2027 14:34:17 +0000
asID: 4766
IP address blocks: 185.2.162.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl
rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft
rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 03:54:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:3f:24:f3:28:7c:fd:6c:23:95:b8:ec:11:12:ab:54:23:85:0a:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
Validity
Not Before: Sep 25 14:29:17 2026 GMT
Not After : Sep 24 14:34:17 2027 GMT
Subject: CN=33FBEE8D52EAAA0EB2F6C72C4B7CBFEA381CDE21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a8:54:c5:45:6a:ad:0d:c5:45:0c:ee:9f:c4:
4a:98:e5:72:e9:81:0d:7f:09:bb:b4:d8:d8:5b:1c:
f0:3d:9d:04:60:ab:cb:cc:43:01:11:27:b4:88:84:
23:ec:c1:ca:bf:17:a4:f5:57:b7:8a:7f:fe:19:df:
76:be:a6:fe:cc:e5:b2:1c:ba:f9:85:4a:9a:5c:b0:
a0:dd:16:c0:80:9b:45:11:2d:1e:a3:7a:8a:ba:f1:
9a:9e:ad:4e:91:8d:05:38:50:50:f4:ba:9f:f2:e2:
69:3d:bd:8f:9d:24:3d:65:0b:38:86:7b:6a:ea:ae:
c9:cd:17:42:d7:2c:8e:fe:05:d4:33:89:88:d9:29:
af:12:67:8b:21:f8:e1:45:ec:50:1e:7a:f0:95:91:
7d:fe:85:aa:13:c8:1e:06:c1:97:91:47:0e:d0:cc:
c5:2b:52:cf:ac:c0:4c:6d:5a:bb:ce:04:37:19:79:
a3:08:f6:8e:a7:35:5c:bb:6d:d3:f4:5c:b4:ec:d6:
f4:42:8a:f6:ec:00:32:ed:af:01:30:fa:3b:e5:ae:
0d:8d:5f:0c:c5:85:94:96:af:21:57:68:4b:2a:da:
a7:e7:63:90:fa:eb:46:ed:1a:b9:b6:5e:db:e2:e7:
16:bf:a1:de:b6:68:4e:c6:4b:5e:43:29:54:06:dd:
82:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:FB:EE:8D:52:EA:AA:0E:B2:F6:C7:2C:4B:7C:BF:EA:38:1C:DE:21
X509v3 Authority Key Identifier:
keyid:9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/3138352e322e3136322e302f32332d3234203d3e2034373636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.2.162.0/23
Signature Algorithm: sha256WithRSAEncryption
80:15:f2:6c:a6:28:ad:97:02:2d:5b:c1:58:00:a1:a4:ab:f8:
dc:50:fa:f7:d2:b4:e5:0c:15:93:6a:bf:5c:45:a6:ec:0b:2b:
dd:e6:2c:23:bf:9b:66:e1:88:cf:3a:24:f1:7c:60:b5:3e:b0:
be:4b:e4:80:20:0f:3f:5a:6b:0c:8d:c9:02:7f:83:fd:c4:ac:
58:67:9d:20:25:19:79:47:23:42:aa:3b:9f:e8:8a:d8:38:ef:
04:b0:b6:49:93:0c:05:17:85:68:25:ab:0a:28:75:35:df:9d:
c4:fd:ad:94:21:dc:f1:b5:3c:3d:c9:43:7c:d8:b9:cc:88:e1:
bf:36:7d:b7:7e:18:37:e7:ba:8d:dc:6d:0e:9b:cf:3e:84:f8:
9c:04:99:c2:03:a0:2a:29:28:a4:c7:66:d6:fa:d0:0f:d7:26:
cb:47:2e:d7:da:ab:ef:9e:aa:b4:48:2b:c2:01:f6:10:4f:ea:
63:18:d6:a2:ce:2e:dc:1f:e2:e4:f7:49:cb:8c:e0:4c:ec:d3:
14:b2:6c:f6:cf:94:b3:91:05:f9:24:5a:9d:14:78:c0:b9:50:
65:c8:b6:74:d8:2a:ce:6f:e4:31:ad:26:3b:23:dc:04:1c:7c:
06:1e:e4:85:1d:39:0f:9f:bc:a5:e8:e1:17:bf:61:b2:2d:0f:
f5:fc:e3:53
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUCT8k8yh8/WwjlbjsERKrVCOFCsgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWYwZDI0Yzg1NWVlZTAwZmU0YWJmMzkwM2M2ZThmY2M3
MDgzZWQ0ZDAeFw0yNjA5MjUxNDI5MTdaFw0yNzA5MjQxNDM0MTdaMDMxMTAvBgNV
BAMTKDMzRkJFRThENTJFQUFBMEVCMkY2QzcyQzRCN0NCRkVBMzgxQ0RFMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSqFTFRWqtDcVFDO6fxEqY5XLp
gQ1/Cbu02NhbHPA9nQRgq8vMQwERJ7SIhCPswcq/F6T1V7eKf/4Z33a+pv7M5bIc
uvmFSppcsKDdFsCAm0URLR6jeoq68ZqerU6RjQU4UFD0up/y4mk9vY+dJD1lCziG
e2rqrsnNF0LXLI7+BdQziYjZKa8SZ4sh+OFF7FAeevCVkX3+haoTyB4GwZeRRw7Q
zMUrUs+swExtWrvOBDcZeaMI9o6nNVy7bdP0XLTs1vRCivbsADLtrwEw+jvlrg2N
XwzFhZSWryFXaEsq2qfnY5D660btGrm2Xtvi5xa/od62aE7GS15DKVQG3YKNAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUM/vujVLqqg6y9scsS3y/6jgc3iEwHwYDVR0j
BBgwFoAUnw0kyFXu4A/kq/OQPG6PzHCD7U0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWYzMTc2OGQtNDJiMS00ZTkyLWI4M2YtYmVmN2VlMDE3
ODEzLzAvOUYwRDI0Qzg1NUVFRTAwRkU0QUJGMzkwM0M2RThGQ0M3MDgzRUQ0RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL253MGt5Rlh1NEFfa3FfT1FQRzZQekhD
RDdVMC5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWYzMTc2OGQt
NDJiMS00ZTkyLWI4M2YtYmVmN2VlMDE3ODEzLzAvMzEzODM1MmUzMjJlMzEzNjMy
MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzQzNzM2MzYucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG5AqIw
DQYJKoZIhvcNAQELBQADggEBAIAV8mymKK2XAi1bwVgAoaSr+NxQ+vfStOUMFZNq
v1xFpuwLK93mLCO/m2bhiM86JPF8YLU+sL5L5IAgDz9aawyNyQJ/g/3ErFhnnSAl
GXlHI0KqO5/oitg47wSwtkmTDAUXhWglqwoodTXfncT9rZQh3PG1PD3JQ3zYucyI
4b82fbd+GDfnuo3cbQ6bzz6E+JwEmcIDoCopKKTHZtb60A/XJstHLtfaq++eqrRI
K8IB9hBP6mMY1qLOLtwf4uT3ScuM4Ezs0xSybPbPlLORBfkkWp0UeMC5UGXItnTY
Ks5v5DGtJjsj3AQcfAYe5IUdOQ+fvKXo4Re/YbItD/X841M=
-----END CERTIFICATE-----
Generated at Fri Oct 23 19:13:12 2026 by rpki-client