Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3230352e3232322e302f32342d3234203d3e20383334.roa
File: 3138352e3230352e3232322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 60JFHDrxMiyOYm135DaI/EftF38guu6VKo3hSLbhxLA=
Subject key identifier: F1:7A:D1:D4:ED:E8:9F:C1:1E:3D:72:4C:EF:F2:61:BB:9C:5C:E1:5E
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 471D952B0A7D6CC5D619630E6A0A41D2DE35C62A
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3230352e3232322e302f32342d3234203d3e20383334.roa
Signing time: Thu 25 Jun 2026 12:03:18 +0000
ROA not before: Thu 25 Jun 2026 11:58:18 +0000
ROA not after: Thu 24 Jun 2027 12:03:18 +0000
asID: 834
IP address blocks: 185.205.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:1d:95:2b:0a:7d:6c:c5:d6:19:63:0e:6a:0a:41:d2:de:35:c6:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Jun 25 11:58:18 2026 GMT
Not After : Jun 24 12:03:18 2027 GMT
Subject: CN=F17AD1D4EDE89FC11E3D724CEFF261BB9C5CE15E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:62:9f:90:99:9d:11:4e:c6:eb:da:e5:a2:38:
d3:72:81:cc:5c:8f:9b:3d:73:94:4f:61:21:7e:f2:
d7:95:d7:bb:25:5f:39:7f:42:b2:d8:43:4b:c6:02:
17:39:3f:2e:1d:49:76:9f:1b:d2:ce:fb:bd:77:ec:
c2:7e:a5:49:4e:e0:e0:0e:4b:cc:93:bf:16:da:9c:
61:98:9e:8c:3d:25:da:58:0c:e8:a3:b7:c5:e1:37:
75:c3:48:a4:05:a0:b6:0e:0d:c7:d8:0d:8e:cb:0d:
28:2f:da:1d:cd:6f:fe:15:86:dd:e6:3c:63:ee:c1:
72:80:0d:1d:c3:34:53:ff:c2:11:05:a8:ee:50:c6:
8b:59:f5:aa:26:44:db:9e:9c:9f:2b:2e:03:ba:fa:
d0:ac:02:d4:3f:eb:eb:2e:57:08:10:ee:9e:2d:f5:
a8:c2:a2:60:47:fc:c6:dc:a3:16:66:bf:5b:17:17:
97:b8:15:f8:43:d8:8c:fb:aa:77:1b:1c:af:4c:aa:
c0:ea:94:1c:98:f8:66:89:b6:df:07:e6:2d:30:e9:
61:5b:40:b6:8f:55:a9:b3:17:2c:23:a5:10:61:18:
c4:ab:4d:c0:a8:53:3e:70:d2:e1:76:d0:48:16:d6:
0a:e9:75:f4:23:15:4f:4b:cf:3f:4d:f6:bd:4c:e1:
a3:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:7A:D1:D4:ED:E8:9F:C1:1E:3D:72:4C:EF:F2:61:BB:9C:5C:E1:5E
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3230352e3232322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.205.222.0/24
Signature Algorithm: sha256WithRSAEncryption
91:41:34:1c:a2:fc:05:12:52:3c:f2:c4:9c:1c:58:39:18:25:
24:61:c6:64:5a:1f:68:a8:86:e6:01:b0:cc:79:9a:54:5e:54:
9a:5d:cd:52:fd:11:76:3e:ae:44:ca:74:87:bb:ee:be:a5:43:
64:a4:53:61:a0:65:84:c2:d3:dc:1c:89:65:de:45:e7:77:b0:
a2:1d:b0:c5:82:ba:08:93:67:4b:21:ea:c7:ca:f4:6b:01:e6:
61:f2:aa:18:f8:e9:fb:18:e6:c8:26:57:e3:2e:bb:5b:a2:a3:
be:9b:6e:4d:d8:e9:90:7d:17:84:32:fb:82:e0:26:b4:45:8c:
c2:f9:c3:ca:9e:e8:29:58:b4:98:ce:ca:59:38:e6:18:53:8d:
a4:1a:5d:f6:6d:7f:ab:17:73:ab:74:0e:60:ce:2e:04:6f:a8:
de:58:7c:2f:4c:0e:c2:1e:4d:72:c7:e3:78:a5:2d:1c:84:3c:
a2:c0:58:14:45:13:3d:77:56:9d:4e:e5:e6:da:fe:95:90:1c:
04:cb:76:2b:cd:42:03:4f:c2:8c:21:ef:2e:2a:a0:cb:e4:29:
11:08:7d:28:ac:10:e1:8c:d3:35:9b:9f:c4:b6:2c:73:c4:56:
58:68:8e:e2:02:e9:8d:87:f5:22:c8:28:a2:74:b3:ea:ba:71:
a6:4d:9e:26
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIURx2VKwp9bMXWGWMOagpB0t41xiowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2FkZjYzZTM3NWIwYjc4NTA4MWI1OTQ1YjFkMThkOWRl
ODZlMGVmYzAeFw0yNjA2MjUxMTU4MThaFw0yNzA2MjQxMjAzMThaMDMxMTAvBgNV
BAMTKEYxN0FEMUQ0RURFODlGQzExRTNENzI0Q0VGRjI2MUJCOUM1Q0UxNUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlYp+QmZ0RTsbr2uWiONNygcxc
j5s9c5RPYSF+8teV17slXzl/QrLYQ0vGAhc5Py4dSXafG9LO+7137MJ+pUlO4OAO
S8yTvxbanGGYnow9JdpYDOijt8XhN3XDSKQFoLYODcfYDY7LDSgv2h3Nb/4Vht3m
PGPuwXKADR3DNFP/whEFqO5QxotZ9aomRNuenJ8rLgO6+tCsAtQ/6+suVwgQ7p4t
9ajComBH/MbcoxZmv1sXF5e4FfhD2Iz7qncbHK9MqsDqlByY+GaJtt8H5i0w6WFb
QLaPVamzFywjpRBhGMSrTcCoUz5w0uF20EgW1grpdfQjFU9Lzz9N9r1M4aPlAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU8XrR1O3on8EePXJM7/Jhu5xc4V4wHwYDVR0j
BBgwFoAUet9j43Wwt4UIG1lFsdGNnehuDvwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQtOTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2Fi
MDAyLzAvN0FERjYzRTM3NUIwQjc4NTA4MUI1OTQ1QjFEMThEOURFODZFMEVGQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2V0OWo0M1d3dDRVSUcxbEZzZEdObmVo
dUR2dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQt
OTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2FiMDAyLzAvMzEzODM1MmUzMjMwMzUyZTMy
MzIzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALnN
3jANBgkqhkiG9w0BAQsFAAOCAQEAkUE0HKL8BRJSPPLEnBxYORglJGHGZFofaKiG
5gGwzHmaVF5Uml3NUv0Rdj6uRMp0h7vuvqVDZKRTYaBlhMLT3ByJZd5F53ewoh2w
xYK6CJNnSyHqx8r0awHmYfKqGPjp+xjmyCZX4y67W6KjvptuTdjpkH0XhDL7guAm
tEWMwvnDyp7oKVi0mM7KWTjmGFONpBpd9m1/qxdzq3QOYM4uBG+o3lh8L0wOwh5N
csfjeKUtHIQ8osBYFEUTPXdWnU7l5tr+lZAcBMt2K81CA0/CjCHvLiqgy+QpEQh9
KKwQ4YzTNZufxLYsc8RWWGiO4gLpjYf1IsgoonSz6rpxpk2eJg==
-----END CERTIFICATE-----
Generated at Mon Jun 29 10:01:22 2026 by rpki-client