Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/38352e3131372e3232382e302f32342d3234203d3e20323134343538.roa
File: 38352e3131372e3232382e302f32342d3234203d3e20323134343538.roa (raw, json)
Hash identifier: wzm7liWKnOarnFPjXDLPc8Lt7waL3BRAPmIB5MlPCA8=
Subject key identifier: 5E:B5:B1:D6:2A:F9:F9:A3:F5:D1:EC:72:53:75:69:AC:88:84:F6:F1
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 17F5EB743CD629BFCD40FC14F6D84019E5D47B3A
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/38352e3131372e3232382e302f32342d3234203d3e20323134343538.roa
Signing time: Sun 16 Aug 2026 09:49:28 +0000
ROA not before: Sun 16 Aug 2026 09:44:28 +0000
ROA not after: Sun 15 Aug 2027 09:49:28 +0000
asID: 214458
IP address blocks: 85.117.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 14:04:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:f5:eb:74:3c:d6:29:bf:cd:40:fc:14:f6:d8:40:19:e5:d4:7b:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: Aug 16 09:44:28 2026 GMT
Not After : Aug 15 09:49:28 2027 GMT
Subject: CN=5EB5B1D62AF9F9A3F5D1EC72537569AC8884F6F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fb:48:d9:0e:4c:f2:32:33:3f:47:74:59:8c:
7d:13:b1:43:cb:61:6d:3d:5b:e4:1d:fb:c7:bc:00:
44:7d:95:24:46:98:f2:b7:bd:9b:5c:4a:87:82:b9:
f3:e1:da:77:6f:44:10:1e:e6:d2:6e:d3:83:ac:2e:
ab:bf:77:1e:b8:b4:6a:65:03:f5:63:bc:9b:46:9f:
60:36:06:e3:2f:2e:32:2f:70:76:10:27:1d:e6:9c:
03:18:fe:98:1e:af:b8:ff:e4:67:51:1d:23:fd:d0:
21:e6:e1:65:ad:29:0b:42:82:e0:9e:5b:40:aa:1d:
9a:54:dd:c1:39:01:6c:68:62:e3:6c:3a:68:32:7d:
18:56:89:c1:f0:c8:e3:c9:07:bf:41:82:9b:3a:30:
83:50:b9:5b:42:23:ed:c4:f3:35:06:48:cc:5f:1c:
a8:ae:24:23:09:83:39:4c:1a:65:5f:ce:6c:22:34:
2d:27:38:7b:21:bb:1b:63:fe:90:9a:fc:11:be:d1:
3e:3f:2a:de:5d:b0:c8:b3:c2:22:0d:90:ca:db:90:
aa:04:d4:f6:ba:95:3b:8e:de:6e:2e:96:09:10:2f:
5e:74:28:2c:0f:95:41:4a:26:87:53:b8:ef:25:c1:
ec:45:ec:0d:f1:52:14:35:10:fe:12:b2:bc:85:ea:
e7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:B5:B1:D6:2A:F9:F9:A3:F5:D1:EC:72:53:75:69:AC:88:84:F6:F1
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/38352e3131372e3232382e302f32342d3234203d3e20323134343538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.117.228.0/24
Signature Algorithm: sha256WithRSAEncryption
86:0e:63:2d:cf:3f:b0:48:31:c2:ed:12:71:f3:8e:70:30:cb:
fd:7d:b4:40:60:7a:db:90:12:dd:11:d7:f3:81:bd:5c:55:b3:
ef:f5:52:04:46:9c:8b:01:12:a5:0a:56:eb:98:04:66:98:83:
a5:fe:06:3b:90:a7:bc:c9:7d:9d:03:6a:2d:97:80:d9:e0:f2:
63:95:bd:77:93:f9:50:6d:2f:b0:76:f9:2a:bc:db:5d:cb:1c:
4e:72:07:bd:22:8b:7f:aa:8d:20:d5:7e:30:8d:52:11:b8:4d:
54:7b:80:79:95:6c:b7:7f:29:1c:f6:d3:30:19:bc:4a:4f:99:
ae:fb:cc:e7:25:9a:0b:55:49:e4:4f:78:55:f1:70:39:f0:30:
51:d7:69:4e:2e:5c:35:0f:c4:a2:ab:cc:9d:2a:54:88:6e:2a:
a4:e5:6e:79:43:34:c1:21:42:8a:0f:5b:8f:b2:4a:f9:b0:26:
a5:4d:d7:fd:b8:5e:93:c3:0c:c4:98:1f:fd:b8:56:28:4a:94:
5f:6c:59:16:95:a2:01:77:e2:fc:92:60:23:51:bd:d2:f2:2f:
d9:45:f9:b9:48:9d:89:97:9f:52:c9:64:1d:88:29:97:22:c3:
dc:aa:9f:e7:65:39:02:1d:28:4c:01:62:ee:b0:7f:fb:25:42:
8c:69:05:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 21:30:23 2026 by rpki-client