Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3138352e3231332e3234382e302f32342d3234203d3e203133333335.roa
File: 3138352e3231332e3234382e302f32342d3234203d3e203133333335.roa (raw, json)
Hash identifier: yizEIX9Y5xQaoQUp8bijJythO8ySXs2RkWEBvAhplzs=
Subject key identifier: 91:DD:43:1C:AE:B3:C8:BB:B9:4D:8D:37:F0:28:EF:14:99:9D:13:B5
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 56E0DF550CF45F5251CF5B4756CF496DA769359E
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3138352e3231332e3234382e302f32342d3234203d3e203133333335.roa
Signing time: Tue 25 Aug 2026 02:25:15 +0000
ROA not before: Tue 25 Aug 2026 02:20:15 +0000
ROA not after: Tue 24 Aug 2027 02:25:15 +0000
asID: 13335
IP address blocks: 185.213.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:e0:df:55:0c:f4:5f:52:51:cf:5b:47:56:cf:49:6d:a7:69:35:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: Aug 25 02:20:15 2026 GMT
Not After : Aug 24 02:25:15 2027 GMT
Subject: CN=91DD431CAEB3C8BBB94D8D37F028EF14999D13B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:db:3d:b3:20:9e:43:ee:76:65:77:b0:56:7a:
ff:28:4e:52:94:e0:b1:a5:b2:d1:27:26:c4:cd:ea:
21:74:57:af:cb:3a:35:2f:5c:7a:84:52:00:e1:f5:
0e:10:21:a9:1d:97:2f:08:92:ab:9c:50:e5:30:fa:
0d:ac:60:62:9c:c2:0a:b3:09:08:a4:9c:f7:86:69:
27:1c:76:e6:0e:2d:4f:9f:43:f0:1c:49:e1:66:06:
2e:27:b8:59:9b:bd:30:1d:03:39:81:61:4f:70:48:
b6:d3:88:dc:44:d2:08:f7:3d:89:c2:a8:e1:cb:db:
f7:d5:bc:5d:8a:c4:74:64:e2:d7:c1:11:a6:01:8e:
7a:26:d2:01:62:3b:e9:ba:41:a6:30:b8:58:e8:f1:
3e:1e:ef:4e:9e:9c:53:36:74:cc:8c:40:e9:de:dd:
29:f6:8f:3e:37:42:de:9e:3b:bd:41:8b:94:7f:7a:
a6:b4:8f:8b:ef:4d:9d:82:1a:80:7f:4f:bc:69:5f:
f0:a8:05:c8:0b:b4:17:f4:a4:5b:08:2b:a0:9a:9f:
3a:56:18:9f:17:80:a5:dc:92:e7:18:e4:84:39:e8:
44:00:1a:f5:b0:dc:1a:c1:b3:e0:45:0b:7f:6a:46:
b6:d4:50:e2:35:40:e4:d6:3a:d1:ae:56:fc:95:f7:
0b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:DD:43:1C:AE:B3:C8:BB:B9:4D:8D:37:F0:28:EF:14:99:9D:13:B5
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3138352e3231332e3234382e302f32342d3234203d3e203133333335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.248.0/24
Signature Algorithm: sha256WithRSAEncryption
10:4b:8c:a2:9e:1e:4e:9d:f2:f5:78:27:5d:8c:47:12:92:35:
18:a1:1f:fd:54:d6:f3:18:11:be:8a:be:60:c3:7b:95:19:ae:
98:8d:75:47:d4:e3:64:28:9c:f3:c0:2a:2c:c6:89:16:e8:84:
e8:81:34:12:0a:78:0a:e5:69:a1:a2:63:cb:05:f1:b5:05:d5:
c7:01:49:24:23:a3:0e:17:60:47:c1:8b:90:7f:8d:cd:17:5d:
65:9e:ec:a3:97:85:0e:03:46:af:98:e9:18:12:3c:66:7f:7f:
c7:9a:1b:0e:f6:10:b0:ed:13:85:1a:67:0d:42:43:bd:93:84:
ce:fc:a4:f4:a5:aa:df:5a:4f:a2:97:43:9f:1f:fe:6f:06:ba:
24:3d:84:8c:cc:3f:e1:8b:b6:8a:01:e0:c0:42:51:36:ec:5e:
62:2c:e0:6b:38:73:2e:8c:be:05:bb:28:93:ea:e5:87:08:ca:
d8:ea:a7:22:c1:13:39:85:06:4c:1a:b7:01:3e:41:5f:8a:fe:
c3:35:c5:3c:a8:9a:00:72:ad:c0:b9:dc:fd:4e:df:ac:a2:ac:
58:88:be:b5:ae:d7:57:b1:a7:50:13:69:b3:10:31:4d:6a:1e:
cd:8e:cc:ec:11:e7:f0:4c:92:8a:d4:0e:50:5c:5a:33:41:0b:
53:2d:e3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:08:49 2026 by rpki-client