Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3138352e3231332e3235312e302f32342d3234203d3e20393834.roa
File: 3138352e3231332e3235312e302f32342d3234203d3e20393834.roa (raw, json)
Hash identifier: FGC3U8MCAGUVSALFgzhtyJUeZqfy8bg54XiX52tmMmo=
Subject key identifier: 6E:E5:FD:57:0B:8C:D7:86:05:3C:F1:C3:14:1D:20:92:C4:5B:A7:0E
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 6160146F6B0101A4EC429EA29FD7131B6041E26A
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3138352e3231332e3235312e302f32342d3234203d3e20393834.roa
Signing time: Wed 14 Oct 2026 09:49:36 +0000
ROA not before: Wed 14 Oct 2026 09:44:36 +0000
ROA not after: Wed 13 Oct 2027 09:49:36 +0000
asID: 984
IP address blocks: 185.213.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 01:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:60:14:6f:6b:01:01:a4:ec:42:9e:a2:9f:d7:13:1b:60:41:e2:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: Oct 14 09:44:36 2026 GMT
Not After : Oct 13 09:49:36 2027 GMT
Subject: CN=6EE5FD570B8CD786053CF1C3141D2092C45BA70E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6a:4f:57:ee:87:5d:75:00:85:4e:3a:9b:c9:
38:2a:04:9e:b1:6d:cb:a3:5f:44:b4:ff:2c:54:3b:
d6:d1:21:3f:97:93:b6:43:ac:42:bb:34:86:15:92:
64:f7:5d:d5:0a:8f:14:01:14:43:28:b0:29:86:71:
60:73:93:3c:8e:4e:25:fc:c7:51:13:55:d6:eb:18:
70:af:8e:75:ad:8c:f4:1a:2c:7a:36:49:bb:87:f0:
33:fd:07:f4:5e:ee:3b:e4:3b:2a:8a:d9:8e:21:a0:
35:48:ac:d6:c4:2e:11:27:89:4c:39:3f:90:cc:aa:
cf:db:6b:e9:d7:bc:5d:08:e9:53:aa:cd:88:95:0e:
e7:0b:3f:d4:8b:d0:50:f7:a2:fd:63:d0:3c:30:09:
88:2f:a3:2b:37:42:3b:1c:13:9f:43:35:fb:7d:43:
c4:7f:89:23:37:b8:fc:bc:f8:44:82:06:17:f9:33:
9d:65:ca:1b:47:46:5a:a2:61:31:b6:ae:1a:17:8e:
07:92:b3:c7:45:3a:98:e5:73:d0:98:6c:b8:77:13:
f1:e8:11:6a:83:5c:4e:e0:1d:58:cb:40:be:24:9c:
d6:61:6b:58:45:b6:f7:ad:6f:bc:f1:16:8a:5f:2a:
4c:58:55:0d:18:6b:4b:8b:d6:4b:35:a5:56:6b:18:
64:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E5:FD:57:0B:8C:D7:86:05:3C:F1:C3:14:1D:20:92:C4:5B:A7:0E
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3138352e3231332e3235312e302f32342d3234203d3e20393834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.251.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:32:52:3c:8e:04:35:82:9e:10:9c:84:94:57:b8:d7:8b:3f:
ab:3f:51:a0:ad:53:a9:b8:6f:da:24:eb:72:98:ba:00:ed:67:
6f:85:77:cb:fd:b1:ed:c9:3d:3e:4a:57:cb:fd:98:b7:a0:f9:
d4:b1:25:08:82:51:89:3d:ff:58:e2:8d:fd:b1:c7:78:e0:90:
02:96:95:dc:78:52:2c:ab:fe:fa:89:b0:bc:29:14:1d:b0:02:
30:2b:99:f0:07:35:ee:6c:d8:6e:55:fd:eb:1c:46:f7:6a:43:
5d:28:4d:21:2e:51:44:c5:da:c2:39:0e:65:69:16:d8:34:a8:
26:8c:d5:89:b7:e9:84:e1:15:a6:77:72:58:b9:aa:17:a9:32:
84:05:e1:e6:27:7d:a5:7b:b8:3a:5a:9b:54:a7:4c:99:69:cd:
9a:c1:5d:0c:d4:45:0a:a1:dc:27:86:36:7d:ec:6f:29:87:77:
e1:13:a0:09:c6:f2:e6:29:f0:65:34:d4:21:7d:4d:f5:a0:bb:
2b:a4:32:d6:ac:89:21:a8:b8:77:a2:ab:41:b2:08:00:3b:ce:
9e:0a:7f:f3:59:8b:e8:2b:5f:6c:af:99:0f:b0:93:d8:d0:b7:
ce:7f:5e:fc:69:53:4a:13:fc:f7:1d:eb:8a:0d:8a:41:26:ec:
bc:f8:85:4c
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUYWAUb2sBAaTsQp6in9cTG2BB4mowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGQ3ZmZhZTMwMGRlZjA4NzZiZjg0ODkwZmI2ZWExN2Jl
ODQxYTRkMzAeFw0yNjEwMTQwOTQ0MzZaFw0yNzEwMTMwOTQ5MzZaMDMxMTAvBgNV
BAMTKDZFRTVGRDU3MEI4Q0Q3ODYwNTNDRjFDMzE0MUQyMDkyQzQ1QkE3MEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfak9X7odddQCFTjqbyTgqBJ6x
bcujX0S0/yxUO9bRIT+Xk7ZDrEK7NIYVkmT3XdUKjxQBFEMosCmGcWBzkzyOTiX8
x1ETVdbrGHCvjnWtjPQaLHo2SbuH8DP9B/Re7jvkOyqK2Y4hoDVIrNbELhEniUw5
P5DMqs/ba+nXvF0I6VOqzYiVDucLP9SL0FD3ov1j0DwwCYgvoys3QjscE59DNft9
Q8R/iSM3uPy8+ESCBhf5M51lyhtHRlqiYTG2rhoXjgeSs8dFOpjlc9CYbLh3E/Ho
EWqDXE7gHVjLQL4knNZha1hFtvetb7zxFopfKkxYVQ0Ya0uL1ks1pVZrGGRBAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUbuX9VwuM14YFPPHDFB0gksRbpw4wHwYDVR0j
BBgwFoAUDX/64wDe8Idr+EiQ+26he+hBpNMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODExM2RkYTYtN2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4
Y2ExLzEvMEQ3RkZBRTMwMERFRjA4NzZCRjg0ODkwRkI2RUExN0JFODQxQTREMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RYXzY0d0RlOElkci1FaVEtMjZoZS1o
QnBOTS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODExM2RkYTYt
N2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4Y2ExLzEvMzEzODM1MmUzMjMxMzMyZTMy
MzUzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM5MzgzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALnV
+zANBgkqhkiG9w0BAQsFAAOCAQEAXjJSPI4ENYKeEJyElFe414s/qz9RoK1Tqbhv
2iTrcpi6AO1nb4V3y/2x7ck9PkpXy/2Yt6D51LElCIJRiT3/WOKN/bHHeOCQApaV
3HhSLKv++omwvCkUHbACMCuZ8Ac17mzYblX96xxG92pDXShNIS5RRMXawjkOZWkW
2DSoJozVibfphOEVpndyWLmqF6kyhAXh5id9pXu4OlqbVKdMmWnNmsFdDNRFCqHc
J4Y2fexvKYd34ROgCcby5inwZTTUIX1N9aC7K6Qy1qyJIai4d6KrQbIIADvOngp/
81mL6CtfbK+ZD7CT2NC3zn9e/GlTShP89x3rig2KQSbsvPiFTA==
-----END CERTIFICATE-----
Generated at Sat Oct 17 15:24:57 2026 by rpki-client