Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/3138352e35382e3135362e302f32342d3234203d3e203633303939.roa
File: 3138352e35382e3135362e302f32342d3234203d3e203633303939.roa (raw, json)
Hash identifier: DC0uMXuyrSg4UTnt8X12aE89X4eMjCQrPVHEP/8iDw8=
Subject key identifier: 90:51:7B:47:4C:DA:0E:0B:6B:B5:4B:F0:13:3E:5A:51:B7:AC:69:47
Certificate issuer: /CN=38a93c81ecd308e6a7632717045b3d35150120f8
Certificate serial: 16F4912C4A05209BD1CF516EC00A5F5654D6DE4B
Authority key identifier: 38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/3138352e35382e3135362e302f32342d3234203d3e203633303939.roa
Signing time: Thu 25 Jun 2026 10:56:02 +0000
ROA not before: Thu 25 Jun 2026 10:51:02 +0000
ROA not after: Thu 24 Jun 2027 10:56:02 +0000
asID: 63099
IP address blocks: 185.58.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl
rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 12:19:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:f4:91:2c:4a:05:20:9b:d1:cf:51:6e:c0:0a:5f:56:54:d6:de:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38a93c81ecd308e6a7632717045b3d35150120f8
Validity
Not Before: Jun 25 10:51:02 2026 GMT
Not After : Jun 24 10:56:02 2027 GMT
Subject: CN=90517B474CDA0E0B6BB54BF0133E5A51B7AC6947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6c:fc:8f:7c:db:7a:6b:5f:49:84:af:eb:dd:
2e:62:0a:f5:4a:76:b5:6e:e1:cc:cb:95:75:61:27:
f0:86:d3:5f:12:99:c1:57:cd:46:59:f9:a8:9f:33:
76:0a:7e:23:f0:62:14:5f:a2:97:aa:22:0d:fd:5f:
49:84:e0:62:9b:79:3e:8f:44:2e:78:43:57:86:77:
91:08:25:c2:6b:88:e1:f0:60:ab:69:31:1e:0e:5d:
9c:91:d6:3c:90:d0:cc:fd:4f:cf:01:5d:f2:19:28:
25:c3:0d:77:af:e6:01:4f:b0:1d:9a:a7:a6:05:bf:
5b:16:80:66:f4:8f:1a:e4:de:ef:f3:10:0f:a6:8c:
ca:f2:82:1b:e2:2c:05:bb:38:47:28:e2:cb:fb:81:
da:f1:6e:82:85:d4:52:f8:8e:8d:46:d3:60:f9:72:
40:10:6c:5e:77:49:50:f1:00:01:39:bf:03:57:c7:
63:76:d1:e6:43:fb:82:86:85:72:ab:ad:3d:35:d1:
4a:51:7f:74:04:30:75:66:ef:fc:09:df:db:e8:06:
bf:75:03:4c:ca:88:4e:9a:74:72:56:e0:45:5b:b7:
41:28:90:e4:b7:95:6d:d3:52:40:38:f7:67:31:37:
54:49:aa:dc:e3:3e:71:0e:25:a8:ca:2d:5b:7b:fe:
4f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:51:7B:47:4C:DA:0E:0B:6B:B5:4B:F0:13:3E:5A:51:B7:AC:69:47
X509v3 Authority Key Identifier:
keyid:38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/3138352e35382e3135362e302f32342d3234203d3e203633303939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.58.156.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:45:d8:9b:43:c5:c4:a9:ae:e9:9a:cf:77:f8:47:59:30:e7:
6c:1e:b3:a7:da:e9:59:17:66:38:bd:9f:2f:0e:f1:90:7a:92:
9f:a9:b0:f3:9d:c9:7c:63:c0:8a:74:70:06:92:32:22:0d:62:
fb:70:15:d6:70:43:ac:41:9e:11:24:66:0a:cd:bf:57:50:e9:
8f:3f:38:73:70:35:fe:98:e1:6f:91:7f:56:a4:db:7e:89:e5:
39:9c:54:08:dd:bb:60:a1:fc:93:c8:47:6d:d8:08:df:a3:3f:
4d:7a:5d:8d:e0:63:9e:9f:5e:1c:d3:93:d7:7c:62:7e:8b:86:
e1:a7:ba:df:b4:3e:d1:4e:2e:03:cb:94:09:91:2d:0d:3e:66:
0c:99:d4:2e:14:33:63:b8:41:69:7d:01:37:7f:2b:dc:ad:c9:
94:56:ec:ab:49:37:b8:89:e0:81:97:1c:36:4d:a6:85:54:c5:
8b:7c:64:c0:4a:16:e4:73:e7:6f:c5:d9:ed:ca:7c:b8:71:d3:
77:f0:d0:3c:f6:f9:6b:23:49:36:ee:37:c6:ff:ba:db:e5:a0:
5a:4f:24:50:95:d5:25:aa:2b:f7:68:35:19:ca:1f:8b:81:19:
e7:3a:e3:a4:03:31:09:bf:4c:94:6d:bf:5e:42:0c:25:0e:9f:
7f:e0:c7:6d
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUFvSRLEoFIJvRz1FuwApfVlTW3kswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzhhOTNjODFlY2QzMDhlNmE3NjMyNzE3MDQ1YjNkMzUx
NTAxMjBmODAeFw0yNjA2MjUxMDUxMDJaFw0yNzA2MjQxMDU2MDJaMDMxMTAvBgNV
BAMTKDkwNTE3QjQ3NENEQTBFMEI2QkI1NEJGMDEzM0U1QTUxQjdBQzY5NDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcbPyPfNt6a19JhK/r3S5iCvVK
drVu4czLlXVhJ/CG018SmcFXzUZZ+aifM3YKfiPwYhRfopeqIg39X0mE4GKbeT6P
RC54Q1eGd5EIJcJriOHwYKtpMR4OXZyR1jyQ0Mz9T88BXfIZKCXDDXev5gFPsB2a
p6YFv1sWgGb0jxrk3u/zEA+mjMryghviLAW7OEco4sv7gdrxboKF1FL4jo1G02D5
ckAQbF53SVDxAAE5vwNXx2N20eZD+4KGhXKrrT010UpRf3QEMHVm7/wJ39voBr91
A0zKiE6adHJW4EVbt0EokOS3lW3TUkA492cxN1RJqtzjPnEOJajKLVt7/k8XAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUkFF7R0zaDgtrtUvwEz5aUbesaUcwHwYDVR0j
BBgwFoAUOKk8gezTCOanYycXBFs9NRUBIPgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTgyYzY1YjktNzI1ZC00YmIwLWEyMTYtOGU3NzE5MWZm
OWI4LzAvMzhBOTNDODFFQ0QzMDhFNkE3NjMyNzE3MDQ1QjNEMzUxNTAxMjBGOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL09LazhnZXpUQ09hbll5Y1hCRnM5TlJV
QklQZy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOTgyYzY1Yjkt
NzI1ZC00YmIwLWEyMTYtOGU3NzE5MWZmOWI4LzAvMzEzODM1MmUzNTM4MmUzMTM1
MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMzMzAzOTM5LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
uTqcMA0GCSqGSIb3DQEBCwUAA4IBAQCcRdibQ8XEqa7pms93+EdZMOdsHrOn2ulZ
F2Y4vZ8vDvGQepKfqbDzncl8Y8CKdHAGkjIiDWL7cBXWcEOsQZ4RJGYKzb9XUOmP
PzhzcDX+mOFvkX9WpNt+ieU5nFQI3btgofyTyEdt2Ajfoz9Nel2N4GOen14c05PX
fGJ+i4bhp7rftD7RTi4Dy5QJkS0NPmYMmdQuFDNjuEFpfQE3fyvcrcmUVuyrSTe4
ieCBlxw2TaaFVMWLfGTAShbkc+dvxdntyny4cdN38NA89vlrI0k27jfG/7rb5aBa
TyRQldUlqiv3aDUZyh+LgRnnOuOkAzEJv0yUbb9eQgwlDp9/4Mdt
-----END CERTIFICATE-----
Generated at Sat Jul 18 02:21:58 2026 by rpki-client