Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3138352e3130302e3231352e302f32342d3234203d3e203533313037.roa
File: 3138352e3130302e3231352e302f32342d3234203d3e203533313037.roa (raw, json)
Hash identifier: vqMFhR+Qa7TcqBqduuV0aGajHzzemgnXT5oqKkEJuEE=
Subject key identifier: 23:F0:D6:41:C1:6F:6B:0A:F4:63:ED:67:02:64:9D:58:7C:55:A9:77
Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d
Certificate serial: 75B200158BA99822B9E63EBF428D29F8CFF59A40
Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3138352e3130302e3231352e302f32342d3234203d3e203533313037.roa
Signing time: Mon 02 Mar 2026 13:32:28 +0000
ROA not before: Mon 02 Mar 2026 13:27:28 +0000
ROA not after: Mon 01 Mar 2027 13:32:28 +0000
asID: 53107
IP address blocks: 185.100.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl
rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 24 Mar 2026 14:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:b2:00:15:8b:a9:98:22:b9:e6:3e:bf:42:8d:29:f8:cf:f5:9a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d
Validity
Not Before: Mar 2 13:27:28 2026 GMT
Not After : Mar 1 13:32:28 2027 GMT
Subject: CN=23F0D641C16F6B0AF463ED6702649D587C55A977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c5:77:cd:0e:51:0a:fd:a3:27:6b:68:73:c7:
76:1d:f6:a1:e7:c9:3a:67:68:05:75:e6:d2:4c:71:
35:74:77:01:d7:24:f5:1a:9c:cb:4d:62:d6:c8:fc:
76:be:26:dc:8a:b5:84:5c:f8:cb:7e:f1:b3:6c:7f:
97:35:46:b4:6c:33:13:e6:f2:13:fc:da:d2:65:d6:
b7:71:7c:40:51:e8:8b:61:4e:c0:2a:4f:33:3e:c3:
8b:06:b2:68:5a:7c:90:2e:f3:d7:7a:22:06:07:06:
56:75:e8:7f:a4:40:83:d7:b4:e0:6f:dc:3d:cb:5a:
f7:6a:bb:ed:c4:56:8d:c5:b2:99:c5:2d:84:af:62:
26:66:65:4a:2e:8b:d1:61:1d:5f:0c:c2:ed:ea:cf:
35:ad:d1:9b:7e:9e:9c:3a:40:9e:cd:44:b8:56:2a:
b0:43:1c:76:a9:26:53:33:c9:f0:cd:74:ff:d4:37:
33:bd:46:f2:77:24:28:9a:11:04:ab:f8:7b:36:db:
d8:68:89:63:3d:94:96:03:82:75:18:6f:d9:79:dd:
04:31:c9:10:05:70:d9:83:fe:6e:d1:a7:8f:ad:21:
72:37:ae:c2:e5:c5:97:c9:7d:a6:2c:76:10:fd:1a:
41:55:38:e9:57:0f:fb:66:b0:70:6f:84:57:4a:aa:
5c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F0:D6:41:C1:6F:6B:0A:F4:63:ED:67:02:64:9D:58:7C:55:A9:77
X509v3 Authority Key Identifier:
keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3138352e3130302e3231352e302f32342d3234203d3e203533313037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.215.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:76:e0:f1:34:48:80:86:54:60:38:62:93:33:f7:9b:4c:5b:
0b:0e:d5:63:49:fb:f4:d1:1f:ad:7b:14:75:5d:e4:53:f7:f4:
0b:ca:0b:5d:21:19:a5:86:3a:56:d8:c5:ff:22:eb:a8:53:74:
d6:82:b3:01:b5:c4:69:72:26:d0:5b:bb:d5:fb:25:fe:fb:76:
6b:4a:9a:bd:1f:a5:c1:e5:46:49:54:56:51:8b:7e:c6:28:22:
3b:02:19:e1:26:66:29:b5:f1:28:ac:86:35:d3:a6:76:0b:d2:
4c:25:a5:70:98:92:a6:fd:77:e3:1b:9b:84:cf:89:b8:92:6d:
d4:5e:1d:01:c5:e0:4f:00:aa:ca:8f:8b:c5:e3:84:a4:55:3e:
9b:98:aa:64:f5:7d:17:c7:43:5a:83:4c:fd:7e:68:a1:b3:47:
b6:06:cd:96:26:a7:b8:7f:b3:e2:ef:17:6e:c3:b6:4f:f3:49:
8f:c1:ac:21:00:23:1e:a0:b7:15:28:03:4e:43:b7:a3:ba:35:
39:79:ca:ad:99:f5:c7:58:90:85:60:ba:97:03:4b:d9:b1:50:
4e:99:23:ca:45:1c:72:1b:5b:20:10:68:ad:02:e2:83:df:5d:
10:f2:ba:fd:c3:4f:81:d8:81:cc:4c:42:f9:ed:6a:44:d2:af:
8d:1e:1a:25
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUdbIAFYupmCK55j6/Qo0p+M/1mkAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWZmNmYyNmVhMWYxMGRhNGExNmNhZDljN2E2NTEwODU2
ZmJhYmI4ZDAeFw0yNjAzMDIxMzI3MjhaFw0yNzAzMDExMzMyMjhaMDMxMTAvBgNV
BAMTKDIzRjBENjQxQzE2RjZCMEFGNDYzRUQ2NzAyNjQ5RDU4N0M1NUE5NzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDExXfNDlEK/aMna2hzx3Yd9qHn
yTpnaAV15tJMcTV0dwHXJPUanMtNYtbI/Ha+JtyKtYRc+Mt+8bNsf5c1RrRsMxPm
8hP82tJl1rdxfEBR6IthTsAqTzM+w4sGsmhafJAu89d6IgYHBlZ16H+kQIPXtOBv
3D3LWvdqu+3EVo3FspnFLYSvYiZmZUoui9FhHV8Mwu3qzzWt0Zt+npw6QJ7NRLhW
KrBDHHapJlMzyfDNdP/UNzO9RvJ3JCiaEQSr+Hs229hoiWM9lJYDgnUYb9l53QQx
yRAFcNmD/m7Rp4+tIXI3rsLlxZfJfaYsdhD9GkFVOOlXD/tmsHBvhFdKqlzrAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUI/DWQcFvawr0Y+1nAmSdWHxVqXcwHwYDVR0j
BBgwFoAUr/bybqHxDaShbK2cemUQhW+6u40wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTctMmI5NS00YTQyLTgwZDAtNWM0MWY4MDdi
NjFmLzAvQUZGNkYyNkVBMUYxMERBNEExNkNBRDlDN0E2NTEwODU2RkJBQkI4RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JfYnlicUh4RGFTaGJLMmNlbVVRaFct
NnU0MC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTct
MmI5NS00YTQyLTgwZDAtNWM0MWY4MDdiNjFmLzAvMzEzODM1MmUzMTMwMzAyZTMy
MzEzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1MzMzMTMwMzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAC5ZNcwDQYJKoZIhvcNAQELBQADggEBAB124PE0SICGVGA4YpMz95tMWwsO1WNJ
+/TRH617FHVd5FP39AvKC10hGaWGOlbYxf8i66hTdNaCswG1xGlyJtBbu9X7Jf77
dmtKmr0fpcHlRklUVlGLfsYoIjsCGeEmZim18SishjXTpnYL0kwlpXCYkqb9d+Mb
m4TPibiSbdReHQHF4E8AqsqPi8XjhKRVPpuYqmT1fRfHQ1qDTP1+aKGzR7YGzZYm
p7h/s+LvF27Dtk/zSY/BrCEAIx6gtxUoA05Dt6O6NTl5yq2Z9cdYkIVgupcDS9mx
UE6ZI8pFHHIbWyAQaK0C4oPfXRDyuv3DT4HYgcxMQvntakTSr40eGiU=
-----END CERTIFICATE-----
Generated at Mon Mar 23 22:59:02 2026 by rpki-client