Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e32392e3136362e302f32342d3234203d3e203438393235.roa
File: 3138352e32392e3136362e302f32342d3234203d3e203438393235.roa (raw, json)
Hash identifier: hQ9Afv5t+EXGfiW46twvvhKdrlTYIO5MMbULcvQllig=
Subject key identifier: 3E:FC:7F:BE:91:22:8C:8F:CC:20:43:E1:33:1A:77:FE:8D:EE:48:AC
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 2EE82F6984158B41899E879702181DF0075EF06A
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e32392e3136362e302f32342d3234203d3e203438393235.roa
Signing time: Sat 29 Aug 2026 15:49:30 +0000
ROA not before: Sat 29 Aug 2026 15:44:30 +0000
ROA not after: Sat 28 Aug 2027 15:49:30 +0000
asID: 48925
IP address blocks: 185.29.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:e8:2f:69:84:15:8b:41:89:9e:87:97:02:18:1d:f0:07:5e:f0:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Aug 29 15:44:30 2026 GMT
Not After : Aug 28 15:49:30 2027 GMT
Subject: CN=3EFC7FBE91228C8FCC2043E1331A77FE8DEE48AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:13:d0:94:c5:a2:21:0d:26:1d:37:67:74:e4:
ad:cb:a5:54:23:b6:de:fa:71:e1:41:26:c3:80:4b:
31:f6:8e:f8:07:dc:82:b1:c4:fc:10:46:50:e6:83:
6a:e4:0e:0a:3b:13:64:6a:9b:2a:e0:3d:6d:91:37:
37:f4:94:d5:d3:0a:33:45:7d:a8:6a:2a:07:76:0f:
25:9a:a5:67:54:ee:2a:89:af:2d:4a:09:a2:ba:34:
3c:5e:73:ec:7a:76:bf:7f:0e:4e:72:e4:bf:fb:16:
ec:f2:97:88:8e:06:3f:fd:54:c3:44:13:a3:a9:29:
f2:eb:5f:e6:eb:01:09:02:3e:f7:1d:e3:ca:32:80:
e8:c1:45:3f:a5:5b:f0:21:72:98:be:2f:1b:92:3d:
c4:3c:39:2e:5b:a6:77:b6:d8:80:6c:b0:31:08:0a:
6c:1f:1e:bf:32:2e:e8:19:41:b8:6e:d1:5d:b7:e7:
4d:3a:43:45:da:4a:36:2b:db:a1:51:0b:91:27:df:
12:e2:4a:97:bf:b1:f6:1b:5a:03:49:f6:00:79:f9:
30:f3:af:46:f4:54:ce:82:b7:6e:c7:f6:e2:1c:98:
53:d5:99:86:80:f6:14:3e:01:d8:85:cc:71:b4:e5:
45:f5:d3:bd:56:d4:f3:60:0c:cb:28:c0:10:d5:c1:
1a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:FC:7F:BE:91:22:8C:8F:CC:20:43:E1:33:1A:77:FE:8D:EE:48:AC
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e32392e3136362e302f32342d3234203d3e203438393235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.29.166.0/24
Signature Algorithm: sha256WithRSAEncryption
91:e2:68:bf:05:0b:e7:78:14:47:0d:2a:6a:ec:2e:2e:4e:da:
05:5a:06:1c:c4:a7:a3:4b:c3:25:00:cf:cd:90:d5:5e:5a:9a:
84:79:1a:fa:df:51:c1:6e:e5:45:ec:70:06:96:b3:dd:45:40:
1a:9f:ad:b0:7b:31:f3:ad:15:ef:ec:79:24:17:09:89:d7:29:
16:43:f1:e0:aa:fd:05:fa:03:8d:db:1b:01:5e:ee:16:14:0f:
81:d8:90:d7:c0:30:9d:fa:b4:f7:e7:06:01:33:25:fc:b0:1a:
61:4b:0b:1e:60:74:5c:89:46:ec:2f:8a:d4:b5:df:26:3c:63:
c3:65:c5:f2:99:35:64:5e:b6:94:e0:e3:b6:91:f9:b6:04:10:
0c:0d:41:4d:8c:37:dc:5d:5e:2f:5a:65:ed:b1:2c:a8:2f:67:
31:02:7d:d7:b0:a6:87:0e:b1:c9:b3:bb:63:75:62:e9:d1:7b:
18:6d:39:df:8b:c0:d1:ac:79:97:48:b5:69:55:5e:55:c3:b4:
11:c6:a8:62:cf:d6:cb:22:9d:bb:4d:af:ef:11:bf:a4:d6:3f:
d6:61:42:31:55:52:de:e7:f1:12:a7:4c:ab:10:09:6d:e0:a6:
90:09:95:57:7d:b5:7a:73:40:31:cf:2c:15:18:39:c6:4b:5f:
ea:fb:da:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 16:17:22 2026 by rpki-client