Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/3138352e322e3230342e302f32342d3234203d3e203531303539.roa
File: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (raw, json)
Hash identifier: +aYnErtc+EVB5Hf8hgiUTnglnPe1EayxJzqPbVrfrk4=
Subject key identifier: 50:1A:97:C9:94:0C:BC:EE:2E:C4:64:BE:78:C2:37:96:4A:FE:E6:DA
Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial: 3B546BF3CAAEC9DD602832CA774CB4E72478EF63
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/3138352e322e3230342e302f32342d3234203d3e203531303539.roa
Signing time: Tue 11 Aug 2026 11:05:44 +0000
ROA not before: Tue 11 Aug 2026 11:00:44 +0000
ROA not after: Tue 10 Aug 2027 11:05:44 +0000
asID: 51059
IP address blocks: 185.2.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Aug 2026 07:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:54:6b:f3:ca:ae:c9:dd:60:28:32:ca:77:4c:b4:e7:24:78:ef:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Validity
Not Before: Aug 11 11:00:44 2026 GMT
Not After : Aug 10 11:05:44 2027 GMT
Subject: CN=501A97C9940CBCEE2EC464BE78C237964AFEE6DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ec:89:fb:40:c6:8d:39:2b:27:76:f2:a1:2d:
5e:03:44:a6:ca:75:d7:b3:39:e8:54:1c:dc:00:93:
1b:38:b9:25:e2:10:d7:2d:e1:2f:29:e1:7d:17:a7:
71:07:9a:78:67:65:40:c4:78:c6:57:14:8b:3f:eb:
1d:22:39:78:5b:fe:fa:21:4e:35:4d:05:af:41:c1:
34:93:f1:2d:a2:e6:b6:83:58:85:ea:fc:aa:3d:e8:
1f:50:dd:10:c0:67:23:d8:91:18:d1:5c:c5:dc:53:
82:84:93:b5:d7:c8:90:3b:d4:58:12:3b:61:ca:8c:
fd:9d:8f:0b:40:70:6a:38:dd:61:b2:b0:08:eb:fc:
b7:c7:34:53:30:fc:46:70:c7:fd:33:b4:66:91:b5:
d8:92:7a:f0:f6:34:06:5b:48:86:f1:66:20:6b:44:
b9:55:5a:63:10:91:97:5b:35:bd:81:15:a1:45:67:
63:2d:34:b9:b2:90:7b:aa:11:da:fd:c1:be:27:94:
65:eb:01:de:fc:f3:82:d5:27:13:99:e3:ca:1b:a8:
95:1d:43:a9:c8:e9:ab:e5:25:db:dc:69:ed:d4:59:
2b:e3:17:fb:2a:00:86:c2:e1:f2:2f:15:31:93:43:
99:53:9c:08:f1:e4:83:ec:67:7c:40:11:21:8c:e8:
39:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:1A:97:C9:94:0C:BC:EE:2E:C4:64:BE:78:C2:37:96:4A:FE:E6:DA
X509v3 Authority Key Identifier:
keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/3138352e322e3230342e302f32342d3234203d3e203531303539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.2.204.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:92:4c:9b:66:da:7b:db:c2:19:f2:ba:1e:bb:ec:00:d2:73:
ee:6c:f1:10:45:0a:4f:6d:65:a2:75:8e:65:7b:9c:ad:18:5d:
62:c8:d5:99:fc:fe:79:72:70:f8:d8:1d:ae:67:a8:e4:70:14:
3e:97:36:9b:46:78:b9:56:e0:23:7d:42:9f:3a:77:c9:af:e3:
99:1b:c4:3a:8a:74:09:8b:94:d0:d7:93:49:b3:59:81:d8:15:
c8:43:80:ed:ba:dc:33:78:5f:33:0a:75:aa:d6:83:8d:7e:b6:
ae:19:41:6e:f3:aa:ca:d0:4a:c8:2a:6e:19:2a:1f:09:2b:5f:
f3:a9:8a:ab:f3:99:88:44:37:91:3a:10:ae:38:a6:90:1b:99:
8f:81:e9:62:89:db:6b:a8:39:b0:45:8e:29:c9:55:ff:71:a0:
a4:a8:20:5d:f9:55:15:5b:2f:2d:83:84:03:37:cb:a8:91:84:
84:c2:57:7e:48:b9:ed:16:88:c2:b1:28:a3:8c:90:1b:1f:da:
b1:0c:2c:c5:b2:11:4a:04:ae:ce:6d:af:ef:21:02:fa:23:89:
20:4c:6a:50:86:54:77:b4:97:24:21:a1:57:41:e1:50:10:bb:
bb:ad:f8:b3:2f:bb:0a:6a:fe:2d:d5:ce:79:b3:f9:13:e5:69:
83:3a:c4:6c
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUO1Rr88quyd1gKDLKd0y05yR472MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0
N2RjZWVlYTAeFw0yNjA4MTExMTAwNDRaFw0yNzA4MTAxMTA1NDRaMDMxMTAvBgNV
BAMTKDUwMUE5N0M5OTQwQ0JDRUUyRUM0NjRCRTc4QzIzNzk2NEFGRUU2REEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC7In7QMaNOSsndvKhLV4DRKbK
ddezOehUHNwAkxs4uSXiENct4S8p4X0Xp3EHmnhnZUDEeMZXFIs/6x0iOXhb/voh
TjVNBa9BwTST8S2i5raDWIXq/Ko96B9Q3RDAZyPYkRjRXMXcU4KEk7XXyJA71FgS
O2HKjP2djwtAcGo43WGysAjr/LfHNFMw/EZwx/0ztGaRtdiSevD2NAZbSIbxZiBr
RLlVWmMQkZdbNb2BFaFFZ2MtNLmykHuqEdr9wb4nlGXrAd7884LVJxOZ48obqJUd
Q6nI6avlJdvcae3UWSvjF/sqAIbC4fIvFTGTQ5lTnAjx5IPsZ3xAESGM6DlNAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUUBqXyZQMvO4uxGS+eMI3lkr+5towHwYDVR0j
BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx
MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm
Yzd1by5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOWRmMzNhNTct
N2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUxMWI0LzAvMzEzODM1MmUzMjJlMzIzMDM0
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMTMwMzUzOS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALkC
zDANBgkqhkiG9w0BAQsFAAOCAQEAepJMm2bae9vCGfK6HrvsANJz7mzxEEUKT21l
onWOZXucrRhdYsjVmfz+eXJw+Ngdrmeo5HAUPpc2m0Z4uVbgI31Cnzp3ya/jmRvE
Oop0CYuU0NeTSbNZgdgVyEOA7brcM3hfMwp1qtaDjX62rhlBbvOqytBKyCpuGSof
CStf86mKq/OZiEQ3kToQrjimkBuZj4HpYonba6g5sEWOKclV/3GgpKggXflVFVsv
LYOEAzfLqJGEhMJXfki57RaIwrEoo4yQGx/asQwsxbIRSgSuzm2v7yEC+iOJIExq
UIZUd7SXJCGhV0HhUBC7u634sy+7Cmr+LdXOebP5E+VpgzrEbA==
-----END CERTIFICATE-----
Generated at Sun Aug 16 18:55:03 2026 by rpki-client