Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/3138352e38362e3232372e302f32342d3234203d3e20323039383037.roa
File: 3138352e38362e3232372e302f32342d3234203d3e20323039383037.roa (raw, json)
Hash identifier: lMNBkd5n6kTZtMnXfvlhFn/0s/vwezmOPom5iab2J/Y=
Subject key identifier: B8:BD:C3:1B:E4:44:0A:5E:10:1B:D3:5F:A6:D6:6A:48:04:67:27:6D
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 65ACF385D08B3A8A63E8E00C3EE2EE5F4BE90747
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/3138352e38362e3232372e302f32342d3234203d3e20323039383037.roa
Signing time: Thu 22 Oct 2026 19:50:02 +0000
ROA not before: Thu 22 Oct 2026 19:45:02 +0000
ROA not after: Thu 21 Oct 2027 19:50:02 +0000
asID: 209807
IP address blocks: 185.86.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:ac:f3:85:d0:8b:3a:8a:63:e8:e0:0c:3e:e2:ee:5f:4b:e9:07:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Oct 22 19:45:02 2026 GMT
Not After : Oct 21 19:50:02 2027 GMT
Subject: CN=B8BDC31BE4440A5E101BD35FA6D66A480467276D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b7:81:c9:29:67:5c:67:36:05:e3:e7:2f:c8:
13:61:4b:9b:d5:4d:fc:e6:d1:16:44:38:5d:ee:2f:
a5:9b:61:bd:07:74:17:76:62:f8:64:05:38:83:b2:
35:a7:8c:46:f7:ad:53:ff:94:2a:23:e9:43:14:f2:
e7:7c:bd:c0:a6:15:b9:e5:55:a5:91:47:1e:72:b9:
eb:73:c5:34:68:d6:30:1c:f3:7e:dc:db:0e:59:71:
d6:a8:43:c5:cb:eb:f2:df:5f:bd:ab:be:b9:c7:73:
23:d4:d4:a2:87:62:e2:5d:68:4b:71:c8:a8:9c:cd:
3a:8a:f1:ea:ac:4f:ac:13:30:9b:b8:57:5e:d9:bb:
8c:a5:d6:e0:e8:31:db:6d:6f:bb:d8:e1:e8:4e:32:
ac:0a:b9:ed:3d:7d:8e:5c:1e:2c:d9:a4:69:ad:f8:
15:63:40:b5:88:2b:c2:1d:bd:c2:96:cf:6d:fa:3c:
c2:5e:32:63:13:f3:e0:ee:f5:5c:cb:fe:af:48:e8:
42:58:1d:5f:cb:48:53:56:dd:41:2a:25:92:8a:c8:
4d:77:94:9d:ba:0f:77:68:9b:8a:13:ea:70:3d:82:
7c:98:6b:d0:ed:42:d6:11:b9:d2:f2:ef:70:ad:23:
4b:18:e1:17:22:37:14:bb:31:6d:47:1f:19:a6:c9:
2d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:BD:C3:1B:E4:44:0A:5E:10:1B:D3:5F:A6:D6:6A:48:04:67:27:6D
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/3138352e38362e3232372e302f32342d3234203d3e20323039383037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.227.0/24
Signature Algorithm: sha256WithRSAEncryption
66:14:b7:8e:83:52:be:ab:08:33:a2:20:72:c5:69:33:72:03:
f4:11:1b:08:71:16:30:45:57:a7:00:4e:40:aa:83:05:85:c5:
75:e7:8d:33:ec:0f:1c:3f:13:a7:58:b5:48:cb:bd:6d:7b:7a:
ac:bd:2b:b6:74:87:ca:b2:2d:ed:0b:8c:e7:21:f6:dc:8d:c7:
90:71:6a:52:80:23:85:db:43:42:a8:35:a4:a7:ef:95:b2:94:
b4:99:6c:3c:34:48:4f:a5:db:05:c8:8a:4a:9e:c0:b1:ef:54:
0b:08:9b:c0:11:aa:39:01:e8:10:c6:d6:5e:b7:69:9e:d4:e5:
0a:be:94:a4:4a:06:a3:01:96:b6:4c:f7:59:7c:26:3c:8a:bc:
82:53:8c:de:21:16:79:28:b2:bc:08:02:ee:30:7e:b7:2a:b8:
11:c9:39:fc:61:e5:0d:c0:79:ea:6c:5a:74:bf:40:cd:be:90:
fb:aa:4a:4d:5f:cf:cc:80:01:a3:4f:9a:2c:b2:22:bf:3e:95:
28:72:0e:da:45:cd:d7:03:c4:57:ca:52:b0:47:4b:76:dc:cb:
e1:6d:3a:c9:99:6a:cd:44:32:b0:30:6c:70:51:e3:3e:1a:0a:
45:36:b7:e4:23:fb:53:d4:b2:97:c7:b8:c2:3f:46:a9:c8:80:
bc:89:c2:24
-----BEGIN CERTIFICATE-----
MIIFNjCCBB6gAwIBAgIUZazzhdCLOopj6OAMPuLuX0vpB0cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZmFjNDcwOGQ3ZTI2NWRiMTA0NGY5YmIwZWU4NzI4NTg3
ZjQ4YjQ4NDAeFw0yNjEwMjIxOTQ1MDJaFw0yNzEwMjExOTUwMDJaMDMxMTAvBgNV
BAMTKEI4QkRDMzFCRTQ0NDBBNUUxMDFCRDM1RkE2RDY2QTQ4MDQ2NzI3NkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2t4HJKWdcZzYF4+cvyBNhS5vV
Tfzm0RZEOF3uL6WbYb0HdBd2YvhkBTiDsjWnjEb3rVP/lCoj6UMU8ud8vcCmFbnl
VaWRRx5yuetzxTRo1jAc837c2w5ZcdaoQ8XL6/LfX72rvrnHcyPU1KKHYuJdaEtx
yKiczTqK8eqsT6wTMJu4V17Zu4yl1uDoMdttb7vY4ehOMqwKue09fY5cHizZpGmt
+BVjQLWIK8IdvcKWz236PMJeMmMT8+Du9VzL/q9I6EJYHV/LSFNW3UEqJZKKyE13
lJ26D3dom4oT6nA9gnyYa9DtQtYRudLy73CtI0sY4RciNxS7MW1HHxmmyS0nAgMB
AAGjggJAMIICPDAdBgNVHQ4EFgQUuL3DG+RECl4QG9NfptZqSARnJ20wHwYDVR0j
BBgwFoAU+sRwjX4mXbEET5uw7ocoWH9ItIQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNWI1OGU2NDYtZTdhMi00NjVjLTg3YzUtNDNjMzU5YWQ5
MzY5LzAvRkFDNDcwOEQ3RTI2NURCMTA0NEY5QkIwRUU4NzI4NTg3RjQ4QjQ4NC5j
cmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEtc1J3alg0bVhiRUVUNXV3N29jb1dI
OUl0SVEuY2VyMIGvBggrBgEFBQcBCwSBojCBnzCBnAYIKwYBBQUHMAuGgY9yc3lu
YzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzViNThlNjQ2
LWU3YTItNDY1Yy04N2M1LTQzYzM1OWFkOTM2OS8wLzMxMzgzNTJlMzgzNjJlMzIz
MjM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDM5MzgzMDM3LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQAuVbjMA0GCSqGSIb3DQEBCwUAA4IBAQBmFLeOg1K+qwgzoiByxWkzcgP0ERsI
cRYwRVenAE5AqoMFhcV1540z7A8cPxOnWLVIy71te3qsvSu2dIfKsi3tC4znIfbc
jceQcWpSgCOF20NCqDWkp++VspS0mWw8NEhPpdsFyIpKnsCx71QLCJvAEao5AegQ
xtZet2me1OUKvpSkSgajAZa2TPdZfCY8iryCU4zeIRZ5KLK8CALuMH63KrgRyTn8
YeUNwHnqbFp0v0DNvpD7qkpNX8/MgAGjT5ossiK/PpUocg7aRc3XA8RXylKwR0t2
3MvhbTrJmWrNRDKwMGxwUeM+GgpFNrfkI/tT1LKXx7jCP0apyIC8icIk
-----END CERTIFICATE-----
Generated at Mon Oct 26 21:08:49 2026 by rpki-client