Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3138352e3231302e3137302e302f32332d3233203d3e20383334.roa
File: 3138352e3231302e3137302e302f32332d3233203d3e20383334.roa (raw, json)
Hash identifier: lXDhBA8H2d1LpAoql0c+vF9OP1+v0zqok15tPd+NtSc=
Subject key identifier: 3A:75:F7:72:05:8F:53:46:83:46:9A:0D:C6:60:6C:41:F5:E7:B9:9A
Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial: 3F21352D0D66E119AFE29CFE10488E93D9215276
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3138352e3231302e3137302e302f32332d3233203d3e20383334.roa
Signing time: Mon 02 Mar 2026 11:38:37 +0000
ROA not before: Mon 02 Mar 2026 11:33:37 +0000
ROA not after: Mon 01 Mar 2027 11:38:37 +0000
asID: 834
IP address blocks: 185.210.170.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 16:05:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:21:35:2d:0d:66:e1:19:af:e2:9c:fe:10:48:8e:93:d9:21:52:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Validity
Not Before: Mar 2 11:33:37 2026 GMT
Not After : Mar 1 11:38:37 2027 GMT
Subject: CN=3A75F772058F534683469A0DC6606C41F5E7B99A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:30:fa:b7:2e:44:b7:a2:b4:31:ac:2a:2a:22:
f2:b3:42:7b:2b:35:be:82:34:23:6d:de:f2:a8:8a:
27:ac:ff:23:b1:77:5d:94:63:60:e0:ed:27:df:11:
91:32:9c:42:0a:ba:39:7f:34:65:01:d0:86:d4:4f:
5c:6d:89:bc:45:08:e5:c9:3c:a9:13:50:e7:ac:af:
59:ae:10:ef:e6:26:27:4d:00:ee:b6:b4:c7:07:61:
89:96:f0:d4:ab:7b:8e:13:24:7b:15:0a:e9:9c:58:
2f:05:c4:f1:f6:08:de:d0:db:34:2f:5b:1d:c3:a0:
49:54:9a:5a:a9:c6:d0:5e:83:c2:38:c4:17:e7:d7:
84:83:7e:77:43:9b:fb:c2:30:e4:62:ca:bf:8d:3a:
db:46:20:33:d8:af:0f:ed:c2:45:8f:ef:16:25:55:
26:e5:c5:89:b4:9d:83:1f:90:1c:e7:32:ad:b7:a3:
de:e4:a7:52:69:c2:f6:8c:93:a1:5a:55:9b:f6:44:
81:e0:3a:d5:e5:97:44:a7:a5:a0:15:bb:cb:aa:db:
3b:8a:80:8e:4f:36:52:e3:7c:d9:17:d3:ec:91:8e:
c2:f8:e4:3a:04:c2:ee:ce:c8:a1:be:e8:62:7e:75:
d7:1e:60:a7:be:05:56:68:0d:57:52:29:79:30:de:
a5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:75:F7:72:05:8F:53:46:83:46:9A:0D:C6:60:6C:41:F5:E7:B9:9A
X509v3 Authority Key Identifier:
keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3138352e3231302e3137302e302f32332d3233203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.170.0/23
Signature Algorithm: sha256WithRSAEncryption
84:52:d6:aa:d9:c6:af:ea:0a:72:6b:ef:82:01:a8:05:5d:d5:
80:f9:6b:85:e5:30:36:92:50:f8:89:28:53:49:19:66:ad:16:
5d:6b:80:04:6d:dc:e2:70:ba:7e:58:7c:e2:be:31:27:c4:6f:
ba:13:07:a6:b2:2d:51:48:89:d8:e9:c9:bb:9c:65:7d:ee:3b:
fe:66:7d:8c:59:e9:11:27:78:f8:d8:4e:43:10:17:83:bd:3e:
61:a8:c3:49:80:74:5b:14:3a:db:17:83:30:61:5c:07:e4:6a:
a5:36:33:92:4a:7d:2e:9f:cb:eb:e5:e9:8c:a2:46:1b:b5:9b:
60:d9:f2:2f:ce:60:5e:f3:c0:0a:12:b2:d5:d6:a6:8b:87:2f:
3a:b8:a6:31:fe:79:60:a7:7e:07:3e:f6:57:eb:e3:b6:75:1d:
76:cc:56:66:ba:94:a4:4d:ce:95:c2:42:e6:f8:26:45:f4:bb:
57:90:cb:89:c7:b0:db:be:f6:89:ce:d3:f5:ae:56:f7:f8:b6:
fc:c4:bb:8d:8c:f0:90:ec:da:68:00:20:51:1c:ff:fd:9e:b6:
91:1e:1f:04:de:d2:48:33:41:97:b8:38:7d:fb:ca:8a:5c:32:
e4:43:3b:cd:b6:56:72:da:8c:83:f3:9d:04:9d:da:6a:dc:41:
f5:50:b3:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 23:32:19 2026 by rpki-client