Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/3138352e322e3230372e302f32342d3234203d3e203531303539.roa
File: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (raw, json)
Hash identifier: b6Yfbp7lTBDGPk9jmhYrtWwx0Keh61hgl0fuJiHvhDc=
Subject key identifier: 29:D1:5D:24:F8:B7:D4:D5:29:D3:CC:54:F7:10:C9:7F:30:09:B0:75
Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial: 7B7D9520054CAA4F6B5F75D2235B9ACF82FEEF85
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/3138352e322e3230372e302f32342d3234203d3e203531303539.roa
Signing time: Tue 11 Aug 2026 11:05:45 +0000
ROA not before: Tue 11 Aug 2026 11:00:45 +0000
ROA not after: Tue 10 Aug 2027 11:05:45 +0000
asID: 51059
IP address blocks: 185.2.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Sep 2026 23:32:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:7d:95:20:05:4c:aa:4f:6b:5f:75:d2:23:5b:9a:cf:82:fe:ef:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Validity
Not Before: Aug 11 11:00:45 2026 GMT
Not After : Aug 10 11:05:45 2027 GMT
Subject: CN=29D15D24F8B7D4D529D3CC54F710C97F3009B075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2c:0c:bd:c9:c1:2f:d0:20:ae:20:d3:9e:cd:
33:86:2d:04:57:1d:41:46:c8:b5:4a:bb:28:97:2a:
a6:d7:ad:86:37:9f:f2:6b:5b:25:ab:cc:6b:f3:c0:
9e:01:46:7b:d5:e8:3d:eb:0e:6b:23:60:0f:d1:21:
2e:60:b3:96:72:2e:21:a3:56:a5:4f:8c:1a:ec:96:
c9:b1:6b:f8:f1:fb:36:4b:16:70:36:51:07:4a:53:
38:ec:35:e5:8e:35:e5:24:fc:18:bf:84:6f:70:5e:
02:10:5c:76:c1:49:20:61:ca:74:df:77:20:2e:b3:
b8:ed:cb:c4:14:b9:d9:ee:11:c9:ee:13:b0:bf:3c:
4d:b5:12:2b:e5:8a:53:9c:41:74:ee:b1:c7:0d:a1:
59:35:a2:1c:cc:2a:76:9d:08:e6:7e:b8:5d:80:f8:
5e:4c:24:e2:41:cc:a6:8a:13:a8:f1:4a:d6:77:cf:
ef:1f:18:61:3f:7d:4f:f8:20:4e:a3:92:4e:e4:5f:
21:de:a7:14:86:27:04:d0:79:0d:e1:be:f6:87:51:
64:90:98:cd:be:46:bd:85:36:f0:64:07:97:f5:04:
02:af:95:0f:ad:eb:cd:e6:a4:e4:90:80:01:a6:b2:
a6:67:c5:ac:72:ee:15:4a:a7:3e:10:4d:5f:ed:82:
92:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D1:5D:24:F8:B7:D4:D5:29:D3:CC:54:F7:10:C9:7F:30:09:B0:75
X509v3 Authority Key Identifier:
keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/3138352e322e3230372e302f32342d3234203d3e203531303539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.2.207.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:cd:7c:32:af:31:54:a3:6f:85:7b:d3:4f:68:d1:ef:cd:67:
34:ca:d7:0d:11:85:20:d2:8f:24:d5:5c:18:99:82:e5:bb:80:
07:4b:d6:7d:3f:b6:b1:22:da:38:5e:0f:b2:80:c5:ef:bb:7b:
37:8d:96:21:e0:49:b9:12:25:87:94:bc:75:ec:39:28:e8:44:
26:b8:c3:ba:65:ca:5d:6d:f1:53:2e:47:70:a5:81:cf:71:cc:
7c:2b:14:58:cd:a3:b5:46:aa:a6:99:cc:95:cc:74:ef:f6:e6:
e8:a7:c6:94:89:2f:ef:af:74:e1:1e:a6:da:c8:7e:88:15:08:
8d:f8:61:63:c6:35:59:b1:67:c5:c9:49:6e:e1:f3:bb:cd:08:
21:e1:79:b7:fb:b2:da:f7:8d:50:17:9f:ff:7a:53:36:3a:2b:
ff:54:b8:82:d7:ff:14:b0:b8:3b:91:51:59:a3:48:59:70:e9:
53:de:79:31:05:50:75:5a:90:0a:cd:25:e7:da:c6:4b:b9:03:
a2:aa:11:4a:09:6e:a4:2d:4c:aa:3b:20:51:1e:12:08:ba:a4:
2b:62:2a:5c:31:68:32:8c:be:a9:75:00:02:ba:53:3f:f2:be:
0d:77:59:d3:ae:db:a4:63:01:39:83:ad:fe:f6:aa:da:15:d5:
49:38:d2:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 2 05:46:15 2026 by rpki-client