Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3138352e3136322e3137382e302f32342d3234203d3e2035353131.roa
File: 3138352e3136322e3137382e302f32342d3234203d3e2035353131.roa (raw, json)
Hash identifier: JUlZBSKolE1cnU8n1sBRM9UqTq9Mj1dhnDW8iA6zVpA=
Subject key identifier: 8A:FE:30:60:88:AB:58:E5:40:49:55:11:C2:20:44:E7:33:D5:AB:B3
Certificate issuer: /CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Certificate serial: 66F02664FA0BB97EE19007C0D2DC2DB6ABE7094B
Authority key identifier: E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3138352e3136322e3137382e302f32342d3234203d3e2035353131.roa
Signing time: Mon 05 Oct 2026 14:39:52 +0000
ROA not before: Mon 05 Oct 2026 14:34:52 +0000
ROA not after: Mon 04 Oct 2027 14:39:52 +0000
asID: 5511
IP address blocks: 185.162.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl
rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:f0:26:64:fa:0b:b9:7e:e1:90:07:c0:d2:dc:2d:b6:ab:e7:09:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Validity
Not Before: Oct 5 14:34:52 2026 GMT
Not After : Oct 4 14:39:52 2027 GMT
Subject: CN=8AFE306088AB58E540495511C22044E733D5ABB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a9:39:44:61:53:f7:87:16:a3:70:b3:22:9b:
d9:07:1e:60:c0:08:fc:44:df:0f:40:a2:3e:33:24:
a2:f5:50:76:b6:7c:90:e4:df:df:90:7b:1f:d1:97:
0e:d7:16:a6:a2:99:77:76:70:a4:a7:93:a6:cf:2a:
eb:c6:1c:6a:19:76:2e:37:bf:96:a1:f6:b0:78:ff:
10:ff:57:bc:4c:9c:7f:3d:da:80:01:1c:a5:69:d4:
a7:dd:dd:00:a1:68:58:e7:4f:0f:6e:bc:4b:4e:80:
15:30:9d:bd:e3:1e:1c:18:b5:77:4b:7c:a3:2b:f6:
14:28:53:07:ce:aa:37:eb:37:e3:f3:6d:23:e0:b3:
a5:1a:d1:0c:3a:8d:53:eb:1b:4a:89:76:4b:8e:70:
2e:73:fa:3e:d8:e2:ae:dd:23:ba:93:1e:85:20:f8:
89:01:35:da:af:20:cd:bf:4f:29:e1:d9:1d:45:5e:
bc:ce:bb:0f:c0:a3:09:ef:cb:bd:09:91:91:0a:3c:
26:0a:73:b5:d5:a7:b8:42:ae:1b:64:94:65:64:d2:
62:d2:28:5b:dc:ae:eb:ba:6a:ba:fe:80:41:f7:15:
3e:77:ae:af:a4:8b:1b:1d:44:90:21:17:cb:89:4b:
97:9e:70:45:87:9a:a3:7a:5d:76:f3:0b:cc:1f:b6:
a4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:FE:30:60:88:AB:58:E5:40:49:55:11:C2:20:44:E7:33:D5:AB:B3
X509v3 Authority Key Identifier:
keyid:E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3138352e3136322e3137382e302f32342d3234203d3e2035353131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.178.0/24
Signature Algorithm: sha256WithRSAEncryption
55:30:6e:70:45:98:80:c3:62:d6:73:fd:50:75:9a:10:d7:c5:
77:e6:95:0e:29:0a:a3:7e:71:39:40:14:be:d3:2f:8a:d9:46:
5c:c2:50:97:7d:4f:fb:ce:1e:41:a3:fd:e9:ba:1c:da:67:93:
f4:da:58:0c:cf:b5:56:ee:ad:34:32:a6:90:90:46:fe:04:d3:
f5:d1:c5:dc:ac:36:cd:d9:a1:b3:f0:19:59:f7:56:f6:a9:c1:
bf:34:c4:2b:a5:6e:96:b6:b7:69:47:1c:6a:54:4b:14:9e:6c:
29:e8:10:44:5c:a7:28:ee:7e:27:33:e0:99:9a:35:13:68:39:
64:49:fa:01:21:3f:93:ae:1f:d3:84:21:e1:cd:0e:36:a8:ca:
d1:d9:2c:a6:3b:fa:ea:55:fd:72:fc:86:45:62:7a:10:a7:0a:
20:cb:49:f3:78:e7:7e:24:00:42:05:3f:ad:d7:9d:02:ae:31:
ca:65:32:a2:0d:2a:0d:c6:cd:a1:b1:c5:93:5d:f9:11:1b:a3:
f1:c8:9e:c1:64:1a:b9:39:75:b9:6a:6b:69:03:fc:6e:50:f8:
70:74:c7:b2:ce:2b:93:0a:1d:ae:b9:6f:0f:66:6a:86:ac:dd:
cf:d6:90:24:43:15:6d:67:e7:4c:37:23:50:a3:7f:2a:05:03:
b5:5a:ba:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:51:58 2026 by rpki-client