Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3230352e3232332e302f32342d3234203d3e20323131343339.roa
File: 3138352e3230352e3232332e302f32342d3234203d3e20323131343339.roa (raw, json)
Hash identifier: MTYyYYlFq7zcnCEfX5fwjZDa98BsgprJFc0W2tBmGGI=
Subject key identifier: 78:1D:BE:64:09:67:F5:2B:93:82:A4:46:C3:44:DF:23:F1:12:0E:D4
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 0D3DB6E24703F8E1F11DA407E4289347946B3A16
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3230352e3232332e302f32342d3234203d3e20323131343339.roa
Signing time: Wed 04 Mar 2026 13:32:26 +0000
ROA not before: Wed 04 Mar 2026 13:27:26 +0000
ROA not after: Wed 03 Mar 2027 13:32:26 +0000
asID: 211439
IP address blocks: 185.205.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:3d:b6:e2:47:03:f8:e1:f1:1d:a4:07:e4:28:93:47:94:6b:3a:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Mar 4 13:27:26 2026 GMT
Not After : Mar 3 13:32:26 2027 GMT
Subject: CN=781DBE640967F52B9382A446C344DF23F1120ED4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:09:bb:ad:2f:92:ca:d6:3c:93:f1:75:a5:8a:
87:6c:3d:cc:31:65:0b:39:7b:72:92:ba:3f:f1:9e:
58:c4:7d:65:fe:71:37:4b:3b:41:ef:ae:48:d0:dd:
d1:07:43:66:d7:cc:50:3a:ed:7e:5c:c6:41:7e:02:
d0:7b:1c:95:2f:6e:c1:77:09:6c:16:cd:52:f4:54:
bf:ec:ba:14:7f:14:d3:64:24:f2:15:67:65:fd:df:
8d:9c:c3:6f:22:4f:e7:45:5b:d6:19:52:b9:21:dd:
dd:b9:70:f7:c8:4c:e6:fb:ec:18:40:42:94:3b:e3:
96:a2:fa:d1:d0:a5:a4:b1:cc:e4:b2:64:02:d7:f0:
64:1c:ad:ae:5f:ee:ff:92:f0:c3:74:7e:4b:45:f4:
9b:75:51:a9:ae:10:c4:4b:93:22:a7:ed:db:5a:31:
3e:62:e3:f3:b2:bc:81:5f:f7:44:87:4c:e2:7d:ce:
3b:a5:c6:e2:25:6a:a0:02:f4:27:9e:17:9d:60:1c:
47:3c:5c:27:c4:da:dc:6b:dc:df:d9:1f:ca:3d:89:
18:71:f6:53:f4:74:b4:3d:a4:74:25:db:f5:51:eb:
81:eb:66:6d:15:f9:a8:92:4f:28:70:6d:a1:ae:d6:
ee:8f:3e:12:5d:0d:38:e0:00:5d:df:5e:0b:0f:6d:
0d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:1D:BE:64:09:67:F5:2B:93:82:A4:46:C3:44:DF:23:F1:12:0E:D4
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3230352e3232332e302f32342d3234203d3e20323131343339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.205.223.0/24
Signature Algorithm: sha256WithRSAEncryption
16:d7:3d:1c:ad:38:df:3c:76:c7:c9:6d:77:8f:23:48:16:d2:
e6:49:ba:7e:fe:e5:96:7b:71:57:50:26:1a:7b:59:d4:8e:b0:
5b:0a:da:9a:ab:a1:41:b6:17:f2:42:89:5f:8e:84:00:15:57:
80:0f:be:ca:d9:08:17:e0:51:b7:9b:07:14:3b:f5:15:43:77:
8f:b3:35:c2:01:c0:83:8b:a2:b1:3f:41:cb:23:a2:8b:9a:53:
2c:ac:c9:d7:93:b1:b2:ff:ea:f4:03:95:20:c8:53:41:5d:4c:
61:92:cb:cf:92:67:5a:10:28:a3:11:23:17:e8:4b:65:92:f6:
a8:a1:8e:95:27:ac:b8:e6:4f:98:c2:24:4a:00:a2:f5:13:28:
5e:21:b3:41:c1:a3:7c:ff:65:00:40:d5:4a:0c:d5:f9:e6:1c:
c3:6c:51:d0:1d:24:0d:5a:cc:6d:98:c2:3b:9c:e7:d9:0d:e3:
62:c9:e5:c2:26:d0:ee:ab:96:6d:c7:4d:1c:91:2a:19:7e:74:
d9:7f:f3:d1:8a:2f:c5:fa:17:7b:51:2e:cd:64:37:00:6b:9e:
75:0a:70:c3:b1:2f:33:2c:fe:d8:42:c3:08:71:75:6d:10:be:
bb:8b:81:5e:d6:e1:42:64:8b:0e:7b:6c:aa:ef:c8:b6:39:1b:
02:45:46:04
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUDT224kcD+OHxHaQH5CiTR5RrOhYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2FkZjYzZTM3NWIwYjc4NTA4MWI1OTQ1YjFkMThkOWRl
ODZlMGVmYzAeFw0yNjAzMDQxMzI3MjZaFw0yNzAzMDMxMzMyMjZaMDMxMTAvBgNV
BAMTKDc4MURCRTY0MDk2N0Y1MkI5MzgyQTQ0NkMzNDRERjIzRjExMjBFRDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPCbutL5LK1jyT8XWliodsPcwx
ZQs5e3KSuj/xnljEfWX+cTdLO0HvrkjQ3dEHQ2bXzFA67X5cxkF+AtB7HJUvbsF3
CWwWzVL0VL/suhR/FNNkJPIVZ2X9342cw28iT+dFW9YZUrkh3d25cPfITOb77BhA
QpQ745ai+tHQpaSxzOSyZALX8GQcra5f7v+S8MN0fktF9Jt1UamuEMRLkyKn7dta
MT5i4/OyvIFf90SHTOJ9zjulxuIlaqAC9CeeF51gHEc8XCfE2txr3N/ZH8o9iRhx
9lP0dLQ9pHQl2/VR64HrZm0V+aiSTyhwbaGu1u6PPhJdDTjgAF3fXgsPbQ1zAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUeB2+ZAln9SuTgqRGw0TfI/ESDtQwHwYDVR0j
BBgwFoAUet9j43Wwt4UIG1lFsdGNnehuDvwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQtOTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2Fi
MDAyLzAvN0FERjYzRTM3NUIwQjc4NTA4MUI1OTQ1QjFEMThEOURFODZFMEVGQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2V0OWo0M1d3dDRVSUcxbEZzZEdObmVo
dUR2dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQt
OTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2FiMDAyLzAvMzEzODM1MmUzMjMwMzUyZTMy
MzIzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzMTM0MzMzOS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEALnN3zANBgkqhkiG9w0BAQsFAAOCAQEAFtc9HK043zx2x8ltd48jSBbS5km6
fv7llntxV1AmGntZ1I6wWwramquhQbYX8kKJX46EABVXgA++ytkIF+BRt5sHFDv1
FUN3j7M1wgHAg4uisT9ByyOii5pTLKzJ15Oxsv/q9AOVIMhTQV1MYZLLz5JnWhAo
oxEjF+hLZZL2qKGOlSesuOZPmMIkSgCi9RMoXiGzQcGjfP9lAEDVSgzV+eYcw2xR
0B0kDVrMbZjCO5zn2Q3jYsnlwibQ7quWbcdNHJEqGX502X/z0YovxfoXe1EuzWQ3
AGuedQpww7EvMyz+2ELDCHF1bRC+u4uBXtbhQmSLDntsqu/ItjkbAkVGBA==
-----END CERTIFICATE-----
Generated at Thu Mar 5 17:33:17 2026 by rpki-client