Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/3138352e39312e3131322e302f32342d3234203d3e20383334.roa
File: 3138352e39312e3131322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: sR62WH97nYoLOUNF2KvRD4SdkLQcNvP4QUYn3/hjJS0=
Subject key identifier: 2C:D9:8D:BF:E4:90:CF:43:37:2A:C5:2F:37:69:2B:0C:E6:C2:4F:0B
Certificate issuer: /CN=1498141819112b8446c2d4a3111f53038f05dbe9
Certificate serial: 36ACD52BD7FC6E9D18C3730CCF6D1F8441940A43
Authority key identifier: 14:98:14:18:19:11:2B:84:46:C2:D4:A3:11:1F:53:03:8F:05:DB:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/3138352e39312e3131322e302f32342d3234203d3e20383334.roa
Signing time: Wed 04 Mar 2026 18:25:27 +0000
ROA not before: Wed 04 Mar 2026 18:20:27 +0000
ROA not after: Wed 03 Mar 2027 18:25:27 +0000
asID: 834
IP address blocks: 185.91.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.crl
rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft
rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 02:18:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:ac:d5:2b:d7:fc:6e:9d:18:c3:73:0c:cf:6d:1f:84:41:94:0a:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1498141819112b8446c2d4a3111f53038f05dbe9
Validity
Not Before: Mar 4 18:20:27 2026 GMT
Not After : Mar 3 18:25:27 2027 GMT
Subject: CN=2CD98DBFE490CF43372AC52F37692B0CE6C24F0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:68:90:9d:c7:dc:0f:52:5c:3d:2b:89:e3:65:
99:6c:9f:e0:f6:4b:56:8a:53:f0:b0:7b:bf:cf:41:
5a:19:06:b5:18:04:b6:d3:b0:b3:2d:d0:cd:60:b9:
82:bd:91:00:14:df:a5:bb:ed:08:25:98:3c:26:43:
96:0c:71:b2:1c:e7:26:9e:87:48:c5:87:9b:54:5a:
58:97:87:5a:09:13:13:ab:8d:4c:09:59:99:de:d0:
32:bd:71:a0:63:86:6e:fa:5a:1e:e5:dc:02:e5:65:
04:e7:53:0c:33:19:c4:5a:e7:3a:6f:3c:79:cb:31:
f8:54:d1:18:dc:06:d3:a3:2d:fd:c4:21:f8:ee:59:
ce:7c:27:4b:d2:dd:a1:63:0b:ee:2d:a8:e7:ee:72:
98:00:b7:cc:82:ae:d9:d3:4e:45:82:b5:cb:02:1c:
6f:d9:cc:96:65:53:50:76:c0:43:b7:79:db:a8:aa:
e7:5d:b4:db:5b:d0:9b:43:0e:b6:35:1c:dc:f7:30:
74:7d:4f:9e:09:68:01:d3:93:d6:b8:18:9a:ab:cf:
00:1d:c7:4a:e4:5c:e2:b2:e5:98:8c:b5:c5:20:43:
19:6c:d7:7e:e4:60:a8:12:c8:c6:36:74:3f:58:56:
c1:22:7e:48:77:c6:02:1d:0a:95:04:b4:70:e2:27:
f4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D9:8D:BF:E4:90:CF:43:37:2A:C5:2F:37:69:2B:0C:E6:C2:4F:0B
X509v3 Authority Key Identifier:
keyid:14:98:14:18:19:11:2B:84:46:C2:D4:A3:11:1F:53:03:8F:05:DB:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/3138352e39312e3131322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.91.112.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:1f:4f:51:ed:9c:a6:19:79:d0:6b:fe:be:e0:38:1a:65:d1:
3e:04:41:93:a1:da:9a:a4:dc:ed:ac:94:6a:b9:73:e7:0a:a9:
0f:0c:92:29:03:b0:bb:6a:ff:9e:92:e9:75:ca:ed:b5:a4:06:
e2:f0:cf:d1:dc:e0:00:76:61:46:3b:30:e9:ae:14:e0:54:6c:
b9:91:ce:83:90:61:30:fe:fc:72:4d:36:0f:c3:de:b6:d6:88:
a1:6c:1c:0f:09:1c:bf:34:4c:e2:01:b7:d6:10:2e:4f:84:45:
bb:de:74:7a:2d:4a:ee:f9:50:eb:b4:82:ec:db:00:40:77:6e:
5c:19:85:c8:65:a3:21:ba:c9:6c:d9:c4:ac:32:94:10:2c:ae:
c6:78:4e:fa:df:ad:85:a0:7f:3f:ab:e0:43:d0:1f:39:69:40:
e4:16:d7:12:78:a5:df:b6:51:28:ba:24:95:3f:75:e9:f3:37:
ca:48:4e:7f:21:58:63:2f:59:0e:89:b0:4c:8f:5f:02:4d:fe:
a9:4a:94:02:e4:ab:fc:d4:35:68:fd:32:d6:88:6b:64:f5:f1:
e2:d9:88:81:db:3a:5b:ba:87:0c:98:c0:7a:73:72:10:f9:33:
a3:8c:15:ad:3c:32:93:31:49:33:1f:f7:ca:a8:e6:46:5e:10:
24:96:fc:47
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUNqzVK9f8bp0Yw3MMz20fhEGUCkMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQ5ODE0MTgxOTExMmI4NDQ2YzJkNGEzMTExZjUzMDM4
ZjA1ZGJlOTAeFw0yNjAzMDQxODIwMjdaFw0yNzAzMDMxODI1MjdaMDMxMTAvBgNV
BAMTKDJDRDk4REJGRTQ5MENGNDMzNzJBQzUyRjM3NjkyQjBDRTZDMjRGMEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9aJCdx9wPUlw9K4njZZlsn+D2
S1aKU/Cwe7/PQVoZBrUYBLbTsLMt0M1guYK9kQAU36W77QglmDwmQ5YMcbIc5yae
h0jFh5tUWliXh1oJExOrjUwJWZne0DK9caBjhm76Wh7l3ALlZQTnUwwzGcRa5zpv
PHnLMfhU0RjcBtOjLf3EIfjuWc58J0vS3aFjC+4tqOfucpgAt8yCrtnTTkWCtcsC
HG/ZzJZlU1B2wEO3eduoquddtNtb0JtDDrY1HNz3MHR9T54JaAHTk9a4GJqrzwAd
x0rkXOKy5ZiMtcUgQxls137kYKgSyMY2dD9YVsEifkh3xgIdCpUEtHDiJ/RnAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQULNmNv+SQz0M3KsUvN2krDObCTwswHwYDVR0j
BBgwFoAUFJgUGBkRK4RGwtSjER9TA48F2+kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjkwNjZmNWQtZWNjMS00OTI3LTk1YzEtZTFhOGRmOGY5
ODk3LzAvMTQ5ODE0MTgxOTExMkI4NDQ2QzJENEEzMTExRjUzMDM4RjA1REJFOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0ZKZ1VHQmtSSzRSR3d0U2pFUjlUQTQ4
RjItay5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMjkwNjZmNWQt
ZWNjMS00OTI3LTk1YzEtZTFhOGRmOGY5ODk3LzAvMzEzODM1MmUzOTMxMmUzMTMx
MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC5W3Aw
DQYJKoZIhvcNAQELBQADggEBAAsfT1HtnKYZedBr/r7gOBpl0T4EQZOh2pqk3O2s
lGq5c+cKqQ8MkikDsLtq/56S6XXK7bWkBuLwz9Hc4AB2YUY7MOmuFOBUbLmRzoOQ
YTD+/HJNNg/D3rbWiKFsHA8JHL80TOIBt9YQLk+ERbvedHotSu75UOu0guzbAEB3
blwZhchloyG6yWzZxKwylBAsrsZ4TvrfrYWgfz+r4EPQHzlpQOQW1xJ4pd+2USi6
JJU/denzN8pITn8hWGMvWQ6JsEyPXwJN/qlKlALkq/zUNWj9MtaIa2T18eLZiIHb
Olu6hwyYwHpzchD5M6OMFa08MpMxSTMf98qo5kZeECSW/Ec=
-----END CERTIFICATE-----
Generated at Sat Mar 21 09:25:19 2026 by rpki-client