Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3232322e3138342e302f32332d3234203d3e203230313135.roa
File: 3138352e3232322e3138342e302f32332d3234203d3e203230313135.roa (raw, json)
Hash identifier: WHvgyBp+t45/E2NGoPmh9YlrqKKptbS+eu4tuP/vFls=
Subject key identifier: 8A:77:15:05:9A:99:1F:B9:86:FD:C4:13:E8:34:12:38:06:0F:BD:1D
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 0CE67A10F5F900B9D844A1FD42915EB9152C9536
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3232322e3138342e302f32332d3234203d3e203230313135.roa
Signing time: Thu 18 Jun 2026 17:47:45 +0000
ROA not before: Thu 18 Jun 2026 17:42:45 +0000
ROA not after: Thu 17 Jun 2027 17:47:45 +0000
asID: 20115
IP address blocks: 185.222.184.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 19:30:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:e6:7a:10:f5:f9:00:b9:d8:44:a1:fd:42:91:5e:b9:15:2c:95:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Jun 18 17:42:45 2026 GMT
Not After : Jun 17 17:47:45 2027 GMT
Subject: CN=8A7715059A991FB986FDC413E8341238060FBD1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:31:72:51:49:27:35:cf:1f:b5:95:39:8c:9f:
0a:56:bf:48:c9:f4:99:70:a5:a1:ac:87:a1:90:d1:
65:ad:95:69:e8:cd:da:0b:32:72:eb:76:e9:b2:e0:
ba:7a:59:7e:92:70:d2:2c:02:97:39:c0:a8:d2:64:
16:be:49:00:32:99:1e:57:13:ac:19:cf:9e:44:c8:
3e:20:16:a1:b6:9a:e3:04:44:d0:00:5f:c4:28:a6:
eb:2d:3f:54:6d:1d:6e:5b:e3:b4:50:14:05:df:80:
fb:f1:7f:37:02:94:b9:c8:e6:ac:e2:bc:87:5c:b3:
49:3f:dc:60:59:25:d1:4d:19:7a:19:fd:91:96:89:
bf:80:1b:46:dd:70:c2:ad:17:7f:49:e5:0b:4a:3f:
54:d7:05:99:3f:c1:11:d3:ba:3e:16:f2:e4:a0:1b:
c9:eb:19:72:e2:65:eb:6d:0e:63:f0:d0:52:c8:0d:
59:32:19:02:fc:d0:40:93:a9:7b:c0:9a:ae:1e:da:
c5:90:19:a8:16:fe:2f:1a:8e:60:13:38:cc:ae:07:
d2:dc:84:8d:35:45:0f:62:c0:04:e8:7a:a3:a4:2f:
fb:58:27:20:82:19:3b:b7:9d:bc:86:c6:ac:21:97:
a1:df:4c:16:10:9c:03:10:e2:09:91:5a:11:51:dd:
4e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:77:15:05:9A:99:1F:B9:86:FD:C4:13:E8:34:12:38:06:0F:BD:1D
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3232322e3138342e302f32332d3234203d3e203230313135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.184.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:5b:1b:2a:fd:70:b8:45:bd:ad:ec:75:69:bb:c9:91:ae:86:
5a:c7:e8:18:1e:c9:09:01:a2:78:61:aa:66:a9:49:d4:72:8c:
fa:fa:44:74:fc:76:e9:bf:c4:dd:b4:94:3d:ec:b2:e1:e2:f3:
95:4b:cc:a6:93:1e:03:af:d2:29:98:86:4d:5e:8d:f6:a0:29:
f7:bd:f5:3e:fb:c2:50:44:bf:7a:1b:96:c9:ec:d3:49:76:87:
18:79:d8:75:69:f5:ff:2e:68:05:45:e1:ab:b1:87:80:a2:fd:
3c:44:93:39:70:45:5b:af:2f:3a:84:d2:14:79:75:2b:23:5d:
04:ed:b8:50:87:79:8d:63:5e:c5:46:b9:87:49:0e:28:03:d0:
3c:ec:44:aa:8f:43:a7:21:bc:b8:c8:a1:d6:c0:0f:17:a1:a4:
4f:54:e7:b1:e5:e6:3f:6b:52:b9:c4:30:0f:a1:fb:b4:5d:99:
59:d6:04:ac:08:ea:97:fc:5f:46:71:14:5a:18:4f:1f:a2:e7:
81:00:0c:1a:3e:c6:64:22:f1:41:e9:be:f0:14:e9:d4:90:06:
81:fa:88:c6:10:f5:83:50:f3:46:61:ce:a0:be:fc:84:5b:c5:
77:1b:81:93:61:51:cc:b1:0a:6c:d1:99:0d:fe:e1:b9:01:2e:
84:58:93:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 05:08:09 2026 by rpki-client