Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3138352e3130302e3231342e302f32342d3234203d3e20343031333632.roa
File: 3138352e3130302e3231342e302f32342d3234203d3e20343031333632.roa (raw, json)
Hash identifier: NmXtAE932Jkzm2a2Q5GtbgRDD3B1MS18rlo+beAB8ZA=
Subject key identifier: 32:FE:F8:AA:F0:F6:6D:77:05:B6:7F:78:3E:86:85:51:DF:CD:A6:96
Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d
Certificate serial: 51EB99DF017997BC99F2864E54CA69DA469CE265
Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3138352e3130302e3231342e302f32342d3234203d3e20343031333632.roa
Signing time: Thu 20 Aug 2026 06:22:12 +0000
ROA not before: Thu 20 Aug 2026 06:17:12 +0000
ROA not after: Thu 19 Aug 2027 06:22:12 +0000
asID: 401362
IP address blocks: 185.100.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl
rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 00:46:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:eb:99:df:01:79:97:bc:99:f2:86:4e:54:ca:69:da:46:9c:e2:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d
Validity
Not Before: Aug 20 06:17:12 2026 GMT
Not After : Aug 19 06:22:12 2027 GMT
Subject: CN=32FEF8AAF0F66D7705B67F783E868551DFCDA696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1c:99:a7:26:84:42:8f:ff:b6:ab:8d:ce:c7:
47:3b:4a:b9:8f:c5:8b:88:0f:f9:44:cc:f3:6e:d6:
3a:ef:dc:03:7f:05:e9:93:6f:9c:42:96:0d:19:dc:
eb:be:30:68:07:1c:a3:91:69:c5:65:9d:f7:ea:8f:
1a:64:cf:8c:8e:8b:38:a2:73:19:f4:76:85:41:db:
fd:3e:ad:a3:2e:4b:58:6b:aa:7e:0b:49:04:f1:a4:
7d:a2:f1:37:2c:c8:8c:e3:b0:77:8f:12:d0:46:60:
8e:62:96:4d:ef:e6:95:79:88:da:8e:b1:f0:c3:9a:
72:23:e0:86:6e:b5:7b:c0:de:98:68:a6:6d:b6:d8:
a4:42:3c:34:bc:9b:63:ce:94:ff:55:63:ee:67:04:
55:d5:d7:fa:7c:1f:bf:36:77:91:7f:5e:bd:d4:d1:
d7:d6:52:77:32:63:07:67:4f:9c:0d:58:d7:64:3b:
0c:e2:8a:af:25:dc:52:31:55:2e:33:95:48:ed:1d:
c9:fe:92:28:e1:98:ef:a5:35:51:99:91:87:50:82:
72:5a:c8:bd:49:32:f8:90:ff:70:bd:4b:94:de:bd:
7f:f9:4d:e0:c8:4e:ba:49:bc:ee:61:a3:cd:20:96:
f5:ff:b8:af:0d:20:db:d6:ac:bc:83:8d:9c:fb:49:
e6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:FE:F8:AA:F0:F6:6D:77:05:B6:7F:78:3E:86:85:51:DF:CD:A6:96
X509v3 Authority Key Identifier:
keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3138352e3130302e3231342e302f32342d3234203d3e20343031333632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.214.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:cf:11:f6:63:8e:b5:40:57:35:29:fc:63:d2:b7:fb:a3:c4:
b6:42:59:b3:74:70:79:16:0d:a4:a4:0d:09:5a:65:c0:3c:cd:
52:52:35:90:f1:76:c9:51:8c:89:1e:09:68:59:32:83:5e:ba:
aa:c5:fa:a2:0c:40:5c:7b:71:a2:8d:f5:a8:5f:41:85:92:19:
cb:7c:de:86:1a:2b:fa:5d:1e:10:29:2a:8e:ef:b2:ec:99:28:
71:2f:5a:72:51:30:60:7a:ce:9d:fc:90:61:32:63:8a:f9:86:
86:0f:21:f1:ac:03:7b:d8:82:9c:b7:cc:60:1a:ab:ac:2d:b4:
e8:de:a1:35:a7:9c:ee:f0:f9:d0:86:55:b0:c8:e5:1b:f7:ab:
22:3d:43:fa:c8:31:13:cb:a8:49:90:f2:c3:10:16:bc:05:00:
e6:1b:8a:4e:57:2d:ba:29:b9:9d:71:11:ea:2b:2f:56:e2:ee:
43:22:29:d3:3a:e3:31:6b:29:d6:b0:c1:d5:31:3f:e3:5e:91:
ad:05:6c:71:fd:9f:00:05:a4:27:60:88:d8:c9:e1:ff:cd:dd:
8d:4f:41:00:6b:fd:78:4d:6f:fa:bf:77:42:4f:82:0f:72:02:
37:66:d1:da:fd:a1:b1:fd:24:5f:95:8b:48:30:aa:40:41:c2:
62:0e:26:6d
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUUeuZ3wF5l7yZ8oZOVMpp2kac4mUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWZmNmYyNmVhMWYxMGRhNGExNmNhZDljN2E2NTEwODU2
ZmJhYmI4ZDAeFw0yNjA4MjAwNjE3MTJaFw0yNzA4MTkwNjIyMTJaMDMxMTAvBgNV
BAMTKDMyRkVGOEFBRjBGNjZENzcwNUI2N0Y3ODNFODY4NTUxREZDREE2OTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrHJmnJoRCj/+2q43Ox0c7SrmP
xYuID/lEzPNu1jrv3AN/BemTb5xClg0Z3Ou+MGgHHKORacVlnffqjxpkz4yOizii
cxn0doVB2/0+raMuS1hrqn4LSQTxpH2i8TcsyIzjsHePEtBGYI5ilk3v5pV5iNqO
sfDDmnIj4IZutXvA3phopm222KRCPDS8m2POlP9VY+5nBFXV1/p8H782d5F/Xr3U
0dfWUncyYwdnT5wNWNdkOwziiq8l3FIxVS4zlUjtHcn+kijhmO+lNVGZkYdQgnJa
yL1JMviQ/3C9S5TevX/5TeDITrpJvO5ho80glvX/uK8NINvWrLyDjZz7SeZtAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUMv74qvD2bXcFtn94PoaFUd/NppYwHwYDVR0j
BBgwFoAUr/bybqHxDaShbK2cemUQhW+6u40wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTctMmI5NS00YTQyLTgwZDAtNWM0MWY4MDdi
NjFmLzAvQUZGNkYyNkVBMUYxMERBNEExNkNBRDlDN0E2NTEwODU2RkJBQkI4RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JfYnlicUh4RGFTaGJLMmNlbVVRaFct
NnU0MC5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTct
MmI5NS00YTQyLTgwZDAtNWM0MWY4MDdiNjFmLzAvMzEzODM1MmUzMTMwMzAyZTMy
MzEzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzAzMTMzMzYzMi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEALlk1jANBgkqhkiG9w0BAQsFAAOCAQEALs8R9mOOtUBXNSn8Y9K3+6PEtkJZ
s3RweRYNpKQNCVplwDzNUlI1kPF2yVGMiR4JaFkyg166qsX6ogxAXHtxoo31qF9B
hZIZy3zehhor+l0eECkqju+y7JkocS9aclEwYHrOnfyQYTJjivmGhg8h8awDe9iC
nLfMYBqrrC206N6hNaec7vD50IZVsMjlG/erIj1D+sgxE8uoSZDywxAWvAUA5huK
Tlctuim5nXER6isvVuLuQyIp0zrjMWsp1rDB1TE/416RrQVscf2fAAWkJ2CI2Mnh
/83djU9BAGv9eE1v+r93Qk+CD3ICN2bR2v2hsf0kX5WLSDCqQEHCYg4mbQ==
-----END CERTIFICATE-----
Generated at Thu Sep 3 17:53:12 2026 by rpki-client