Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3230352e3232312e302f32342d3234203d3e203239383032.roa
File: 3138352e3230352e3232312e302f32342d3234203d3e203239383032.roa (raw, json)
Hash identifier: QKF4Neyl4nEJE8EMmffbRkMHJiMBp18BlOGtB8kEdx0=
Subject key identifier: 4A:32:40:65:36:11:55:F8:E7:75:32:38:A6:DE:2D:A6:1A:8D:0D:61
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 331CFE2023D064B140D54B54C871D1F2BAA676F3
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3230352e3232312e302f32342d3234203d3e203239383032.roa
Signing time: Sun 13 Sep 2026 02:49:35 +0000
ROA not before: Sun 13 Sep 2026 02:44:35 +0000
ROA not after: Sun 12 Sep 2027 02:49:35 +0000
asID: 29802
IP address blocks: 185.205.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Sep 2026 20:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:1c:fe:20:23:d0:64:b1:40:d5:4b:54:c8:71:d1:f2:ba:a6:76:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Sep 13 02:44:35 2026 GMT
Not After : Sep 12 02:49:35 2027 GMT
Subject: CN=4A324065361155F8E7753238A6DE2DA61A8D0D61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:59:77:83:cd:85:66:b4:65:02:75:37:fe:f6:
d7:88:f4:a5:f9:b7:6c:41:cc:d7:36:12:cd:b3:e4:
91:55:bd:89:47:56:de:80:66:cc:36:04:42:10:40:
86:64:0e:68:6f:cf:8a:14:9c:76:a8:be:1d:92:e0:
cd:ad:28:db:eb:df:73:f4:ee:b6:8d:36:36:62:7f:
97:f8:a8:a7:13:3c:6e:28:ec:26:51:fe:15:3f:5d:
75:74:32:ea:2b:ef:70:c7:8c:b6:85:b0:ca:9e:9c:
05:c6:29:59:1a:37:2c:d7:71:f5:c0:26:c9:70:c8:
e8:7d:91:8d:8e:8a:50:7f:12:45:0b:bd:af:e5:e4:
eb:46:d5:70:7b:54:aa:be:93:04:80:a0:ad:82:1a:
0e:5c:04:fb:6f:19:0f:28:43:5e:47:42:4c:06:fb:
1f:7c:23:cc:ed:2e:0d:1c:ae:f9:53:b1:6a:3c:a0:
8f:e9:65:d8:2f:b3:6c:70:86:61:9f:29:88:13:96:
93:86:aa:a6:6f:5a:02:ca:f1:f4:84:a7:d2:10:8c:
1d:28:20:66:38:24:ca:8e:15:52:d0:f5:59:e8:8c:
19:a5:8e:fc:4c:68:a8:3a:8a:06:9e:77:24:6d:63:
0d:20:7e:68:11:0c:6c:f8:22:80:da:fe:fb:83:10:
69:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:32:40:65:36:11:55:F8:E7:75:32:38:A6:DE:2D:A6:1A:8D:0D:61
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3230352e3232312e302f32342d3234203d3e203239383032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.205.221.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:40:0f:7d:ee:50:37:1d:8b:56:2c:b1:70:9b:d8:cb:97:b9:
da:c5:5d:d7:94:e8:ec:5c:80:a8:bc:6f:56:f1:18:2e:2e:e6:
00:b8:67:52:58:89:53:6c:e0:55:12:09:04:cc:cf:0f:e5:c2:
21:cf:e2:f7:5f:7f:07:74:82:7f:bc:6f:c9:fc:37:d6:66:81:
fd:d8:6c:74:3d:96:5e:01:c4:e6:e8:6d:bb:6e:55:09:0d:38:
91:a2:49:a1:8f:bd:97:8e:f0:72:08:96:ec:2e:38:66:b2:86:
c9:e2:a0:e6:5b:aa:91:70:5b:e5:79:a7:ad:7b:e6:09:68:51:
f0:bd:c1:ad:e9:34:4f:83:a3:18:5a:0c:9e:1e:f3:7c:a8:36:
6f:fb:3f:ea:19:aa:06:1c:48:79:94:4b:3f:fd:4f:8c:1e:7c:
eb:8d:01:64:0c:53:ad:1e:47:7a:98:db:b6:87:fa:82:4e:34:
54:1d:dc:c3:1e:b3:89:9f:b4:be:26:8a:a1:02:e5:b8:0f:38:
28:16:d6:61:fb:f1:9d:54:97:9b:b7:47:fa:51:a5:00:0e:57:
cc:6f:90:35:6f:13:90:9f:f5:22:5c:7e:17:e5:e8:86:72:ed:
b6:3b:24:cb:d9:b7:d7:4c:aa:5d:e8:1e:1e:01:d4:8d:38:e9:
91:f9:7f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 05:33:19 2026 by rpki-client