Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3138352e3130302e3231342e302f32342d3234203d3e203235313938.roa
File: 3138352e3130302e3231342e302f32342d3234203d3e203235313938.roa (raw, json)
Hash identifier: J9+QUYLsYpq/uWOu023y03FhTB2Q1kydfGDoNoWLIgs=
Subject key identifier: A5:F3:C8:11:2B:EC:96:B4:45:21:22:80:E9:9F:C2:BC:7C:25:15:E2
Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d
Certificate serial: 520CAE73E5FD9F44E68D35CE9B9305225FFC9E8C
Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3138352e3130302e3231342e302f32342d3234203d3e203235313938.roa
Signing time: Thu 15 Oct 2026 19:43:16 +0000
ROA not before: Thu 15 Oct 2026 19:38:16 +0000
ROA not after: Thu 14 Oct 2027 19:43:16 +0000
asID: 25198
IP address blocks: 185.100.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl
rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 18:34:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:0c:ae:73:e5:fd:9f:44:e6:8d:35:ce:9b:93:05:22:5f:fc:9e:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d
Validity
Not Before: Oct 15 19:38:16 2026 GMT
Not After : Oct 14 19:43:16 2027 GMT
Subject: CN=A5F3C8112BEC96B445212280E99FC2BC7C2515E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:77:bb:00:aa:4d:e2:04:ec:a2:c7:b1:98:91:
b9:10:30:97:94:20:a8:65:9b:b5:43:65:56:c9:7c:
df:1b:f3:87:09:80:93:ef:94:71:d3:fe:0e:d4:07:
13:2a:5a:1d:e2:95:10:c4:8f:e6:02:e5:28:c2:59:
a9:3f:db:7a:2f:74:01:df:90:3c:89:89:26:74:3e:
a0:f6:4b:5c:27:9c:52:da:5e:1e:e1:81:db:f6:46:
5c:41:b7:26:52:11:d1:a3:19:4b:06:b5:f4:f2:9b:
8d:7a:ec:37:64:05:a9:a4:26:c6:62:b9:94:1f:b3:
01:e3:8f:ed:e5:e0:76:35:a5:2d:79:8c:8f:b5:8d:
b6:ef:65:c4:a3:f9:7a:9d:bd:8e:03:ee:17:19:fc:
33:42:1b:89:ec:f8:8a:23:d0:b6:a7:35:56:16:f2:
60:89:d0:11:62:16:74:03:a2:25:69:82:f0:30:3b:
3f:8a:9e:7e:91:97:69:e3:64:dd:9a:24:46:6b:4c:
99:0e:e1:b9:e6:56:ac:dc:07:a0:9a:40:b1:63:37:
71:34:e2:8f:21:12:36:31:08:d1:1e:d8:e7:ee:9b:
c4:6b:27:84:ec:26:1f:c2:5f:d3:9e:7c:71:e4:c7:
60:97:88:58:16:27:a7:f5:2f:b6:10:2a:da:aa:4d:
66:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F3:C8:11:2B:EC:96:B4:45:21:22:80:E9:9F:C2:BC:7C:25:15:E2
X509v3 Authority Key Identifier:
keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3138352e3130302e3231342e302f32342d3234203d3e203235313938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.214.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:e0:be:41:f5:2e:a1:70:e8:b6:ec:9a:26:da:71:59:c4:86:
bb:e6:cd:22:7c:7b:7d:5c:ba:6a:9a:a0:7e:1c:d2:17:0e:17:
63:1f:58:f9:55:46:b5:94:65:c8:83:4a:79:5a:f6:de:53:94:
af:4c:1c:af:cc:13:02:68:9d:67:a0:99:36:1c:e8:ec:29:3f:
7c:df:f0:e3:9d:e1:12:8b:a5:5a:d0:91:27:10:5e:0d:0e:d8:
93:23:a7:40:a2:49:45:cc:a2:95:76:de:d6:b8:69:ad:24:40:
5d:14:63:58:82:e3:27:9b:bc:c1:1e:a0:97:6c:d9:ca:ad:68:
4d:b6:00:33:8d:18:19:52:96:3f:31:31:f2:d6:6b:81:54:d2:
09:8b:30:cc:02:95:74:21:f1:83:24:84:65:5b:a2:7b:65:10:
63:df:94:59:d8:91:67:08:9d:e3:cf:fc:0d:5f:3e:2b:6f:70:
1b:80:eb:32:4e:69:f5:57:bc:78:51:70:f0:0e:b2:9f:90:b1:
61:b3:75:64:2a:09:ee:c5:70:54:b6:65:59:40:7e:01:76:94:
7a:63:a4:7d:34:b4:4b:56:04:18:14:c8:dc:f3:38:51:f4:88:
e7:cc:2b:1d:eb:43:24:8a:e6:88:c3:19:f0:7d:fb:55:d1:39:
e7:f9:18:0b
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUUgyuc+X9n0TmjTXOm5MFIl/8nowwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWZmNmYyNmVhMWYxMGRhNGExNmNhZDljN2E2NTEwODU2
ZmJhYmI4ZDAeFw0yNjEwMTUxOTM4MTZaFw0yNzEwMTQxOTQzMTZaMDMxMTAvBgNV
BAMTKEE1RjNDODExMkJFQzk2QjQ0NTIxMjI4MEU5OUZDMkJDN0MyNTE1RTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkd7sAqk3iBOyix7GYkbkQMJeU
IKhlm7VDZVbJfN8b84cJgJPvlHHT/g7UBxMqWh3ilRDEj+YC5SjCWak/23ovdAHf
kDyJiSZ0PqD2S1wnnFLaXh7hgdv2RlxBtyZSEdGjGUsGtfTym4167DdkBamkJsZi
uZQfswHjj+3l4HY1pS15jI+1jbbvZcSj+XqdvY4D7hcZ/DNCG4ns+Ioj0LanNVYW
8mCJ0BFiFnQDoiVpgvAwOz+Knn6Rl2njZN2aJEZrTJkO4bnmVqzcB6CaQLFjN3E0
4o8hEjYxCNEe2Ofum8RrJ4TsJh/CX9OefHHkx2CXiFgWJ6f1L7YQKtqqTWYrAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUpfPIESvslrRFISKA6Z/CvHwlFeIwHwYDVR0j
BBgwFoAUr/bybqHxDaShbK2cemUQhW+6u40wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTctMmI5NS00YTQyLTgwZDAtNWM0MWY4MDdi
NjFmLzAvQUZGNkYyNkVBMUYxMERBNEExNkNBRDlDN0E2NTEwODU2RkJBQkI4RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JfYnlicUh4RGFTaGJLMmNlbVVRaFct
NnU0MC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTct
MmI5NS00YTQyLTgwZDAtNWM0MWY4MDdiNjFmLzAvMzEzODM1MmUzMTMwMzAyZTMy
MzEzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzUzMTM5Mzgucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAC5ZNYwDQYJKoZIhvcNAQELBQADggEBAB7gvkH1LqFw6LbsmibacVnEhrvmzSJ8
e31cumqaoH4c0hcOF2MfWPlVRrWUZciDSnla9t5TlK9MHK/MEwJonWegmTYc6Owp
P3zf8OOd4RKLpVrQkScQXg0O2JMjp0CiSUXMopV23ta4aa0kQF0UY1iC4yebvMEe
oJds2cqtaE22ADONGBlSlj8xMfLWa4FU0gmLMMwClXQh8YMkhGVbontlEGPflFnY
kWcInePP/A1fPitvcBuA6zJOafVXvHhRcPAOsp+QsWGzdWQqCe7FcFS2ZVlAfgF2
lHpjpH00tEtWBBgUyNzzOFH0iOfMKx3rQySK5ojDGfB9+1XROef5GAs=
-----END CERTIFICATE-----
Generated at Mon Oct 19 06:06:33 2026 by rpki-client