Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3232322e3138342e302f32332d3234203d3e203232373733.roa
File: 3138352e3232322e3138342e302f32332d3234203d3e203232373733.roa (raw, json)
Hash identifier: rZUSsJM4zXBdX5rcZ4fSPHMVjCoqzp1wNm82XivcDPU=
Subject key identifier: 43:C4:7A:B1:69:76:37:0E:18:8C:D5:31:7D:20:B8:6C:58:D7:77:D1
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 5E67684A599AFFEB1F241FAC3DA464C8D9C2C7C4
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3232322e3138342e302f32332d3234203d3e203232373733.roa
Signing time: Thu 26 Mar 2026 23:36:23 +0000
ROA not before: Thu 26 Mar 2026 23:31:23 +0000
ROA not after: Thu 25 Mar 2027 23:36:23 +0000
asID: 22773
IP address blocks: 185.222.184.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 Apr 2026 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:67:68:4a:59:9a:ff:eb:1f:24:1f:ac:3d:a4:64:c8:d9:c2:c7:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Mar 26 23:31:23 2026 GMT
Not After : Mar 25 23:36:23 2027 GMT
Subject: CN=43C47AB16976370E188CD5317D20B86C58D777D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e1:72:18:99:7b:bd:49:fe:de:65:b2:4e:48:
f4:eb:4d:12:41:92:da:63:76:0e:69:36:5b:ac:b1:
46:e8:f5:ff:f3:ad:31:d7:f1:20:a7:e1:98:e3:41:
72:28:28:e4:a5:f5:d1:cb:92:76:f7:46:48:29:76:
c5:cc:7b:71:e6:cc:fe:b1:4e:03:6d:13:4f:2b:fc:
84:d0:09:cc:62:58:00:f8:09:e0:a0:2d:e6:97:80:
bb:6e:d3:81:f8:72:1e:4e:c0:16:c2:8b:7d:17:a1:
4c:e8:02:68:54:54:6e:66:2c:ec:d1:00:98:40:ae:
80:a0:36:86:f5:8e:bf:8a:50:93:c0:6f:d5:76:dc:
d4:b4:1c:54:6a:42:79:12:c6:7e:35:3a:d7:79:04:
dd:eb:b0:ae:60:1b:29:8d:19:99:6b:85:67:6b:78:
17:e2:df:fd:d7:00:47:a3:89:7a:5b:2a:b6:dd:1a:
ec:40:20:11:eb:cb:d6:bd:47:43:45:6b:af:14:1e:
55:5d:73:d6:ba:a0:b8:6d:26:bf:9e:3c:4f:73:8e:
18:25:50:e5:45:b4:51:38:9d:e6:34:57:16:4a:d3:
5b:c6:25:d4:52:1e:bb:42:11:d9:93:09:31:6e:69:
74:10:e0:06:40:d5:60:9c:0b:19:8e:4c:ff:4c:66:
5b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C4:7A:B1:69:76:37:0E:18:8C:D5:31:7D:20:B8:6C:58:D7:77:D1
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3232322e3138342e302f32332d3234203d3e203232373733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.184.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:57:87:be:d8:40:3b:a3:96:e9:0f:97:86:a5:42:7b:66:6b:
64:23:57:55:d7:77:41:39:e1:6b:27:71:da:b8:c0:e0:23:9c:
94:ca:a4:5e:5d:f4:b5:36:1b:cc:30:71:49:ff:c0:23:97:8c:
d1:d3:85:52:84:45:da:53:33:b3:cc:1a:51:7f:65:c3:a0:8a:
cb:d5:27:bd:be:09:39:31:86:d3:ab:cc:bf:c4:0b:bb:47:a4:
93:b7:0e:f2:15:4f:98:b5:7e:ff:7d:3e:3f:94:d3:e8:24:c0:
5b:6e:51:2b:0a:1f:d0:90:4c:94:1c:50:11:7f:6e:6b:58:8e:
60:ad:1d:b7:8a:50:f7:2a:98:ef:83:18:b4:b6:6c:92:9e:35:
0f:df:db:e3:ab:ff:9e:ce:21:83:73:0a:27:27:34:df:4c:5c:
12:4c:03:c0:23:d2:b1:86:7c:3e:3c:7e:ea:40:6c:24:99:79:
45:f6:a6:55:3a:63:08:e3:0d:56:d8:8d:67:41:3f:98:b7:6a:
5b:26:39:ab:d7:0e:0e:81:4a:3f:ac:25:04:bd:ab:88:4e:e9:
1f:64:ce:39:7d:a4:31:04:e5:08:f0:04:2f:49:a6:bc:10:86:
ac:6a:f8:8f:dd:a7:93:bb:dd:5e:d5:d2:3a:6c:63:d5:1f:8c:
c5:7c:8e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 15:21:44 2026 by rpki-client