Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3232322e3138342e302f32332d3234203d3e2037303138.roa
File: 3138352e3232322e3138342e302f32332d3234203d3e2037303138.roa (raw, json)
Hash identifier: f0uzUPrI7byCOPQz4dgoAvTYWPXyvP1m/5hJuvugR78=
Subject key identifier: D2:8A:FC:8B:0C:84:84:C5:71:E8:07:F4:C4:9B:63:37:4E:07:03:61
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 49AA11B9F8440822AD3CFB02A17550B12D586473
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3232322e3138342e302f32332d3234203d3e2037303138.roa
Signing time: Thu 13 Aug 2026 15:49:28 +0000
ROA not before: Thu 13 Aug 2026 15:44:28 +0000
ROA not after: Thu 12 Aug 2027 15:49:28 +0000
asID: 7018
IP address blocks: 185.222.184.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:aa:11:b9:f8:44:08:22:ad:3c:fb:02:a1:75:50:b1:2d:58:64:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Aug 13 15:44:28 2026 GMT
Not After : Aug 12 15:49:28 2027 GMT
Subject: CN=D28AFC8B0C8484C571E807F4C49B63374E070361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5e:04:a6:f4:93:6d:4c:ef:6c:e6:fc:cc:87:
8a:a1:54:df:7b:fd:b0:fc:78:67:89:16:f3:21:bb:
b6:d7:17:0f:b7:5c:77:4b:39:bb:e6:be:9d:ae:a1:
ea:5b:d5:37:a6:db:e1:57:9f:8f:fa:6b:06:4a:e9:
a4:48:84:a3:c1:26:f3:be:04:96:64:bb:0f:bf:c5:
be:41:13:36:b1:e2:2a:59:11:ae:2b:5f:9e:6a:3b:
e7:78:82:af:e7:4c:7d:d6:25:b3:a0:ff:dd:d6:5c:
67:0a:1f:3f:2d:cd:41:cb:da:82:44:a4:31:50:02:
66:27:f2:78:8e:4e:26:60:6a:ba:8c:28:0b:81:e8:
01:af:e8:d5:cc:78:b5:47:d2:57:16:6d:24:8f:66:
79:55:21:89:14:65:a9:71:34:be:43:30:a1:7c:2e:
4d:90:36:12:68:5c:a9:25:20:e9:3c:b3:8b:c2:ab:
76:52:83:cf:04:07:a8:3b:3a:74:09:16:76:ae:c2:
e0:6f:61:ad:df:6b:a0:dc:5f:df:b0:c5:ab:0b:4c:
fc:13:27:98:a9:98:73:f3:b1:6b:c8:1f:d6:d2:fc:
a8:f7:0f:d0:34:33:e8:3c:79:6c:00:9f:5b:9d:c1:
e1:ea:61:b5:f2:10:9e:28:13:e6:88:79:d1:81:ed:
43:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:8A:FC:8B:0C:84:84:C5:71:E8:07:F4:C4:9B:63:37:4E:07:03:61
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3232322e3138342e302f32332d3234203d3e2037303138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.184.0/23
Signature Algorithm: sha256WithRSAEncryption
70:76:89:1d:d4:74:35:4f:47:df:e0:2b:77:5d:43:6c:47:5e:
c0:54:19:e1:a1:b2:c6:94:2c:49:a0:0f:51:db:94:d7:3d:27:
68:37:2f:e4:a1:20:56:c3:57:ec:86:ac:d5:21:df:b6:a5:85:
8c:93:ae:84:fb:d1:31:d1:07:a5:ec:d1:d0:c0:7e:f4:63:1b:
a3:13:82:6a:90:29:5a:05:4f:e1:96:4a:eb:fd:f5:25:8a:87:
6c:70:de:e1:54:91:1f:51:08:3a:86:45:af:c6:41:5d:ea:7a:
9a:d5:8e:18:3d:24:3e:f5:4c:80:ff:4e:a5:80:97:da:24:15:
73:c7:bd:36:d7:8e:e6:83:5c:37:5e:cf:fd:09:cb:fc:86:2f:
7e:aa:d8:aa:f2:15:cb:e2:11:46:8c:3c:67:ae:98:74:c3:88:
6a:cd:d6:5c:ab:d2:43:2b:a0:e1:69:9f:a7:07:f0:61:95:8f:
51:08:41:c9:69:50:d9:da:1b:07:cc:99:2a:f5:43:db:53:0d:
09:3b:c3:69:b4:be:b7:91:83:12:f2:1f:35:70:36:19:c6:69:
40:cd:46:18:42:c6:c5:e2:fd:38:34:b1:e6:95:40:bb:69:b6:
f4:ac:e9:42:f8:57:4a:82:0a:65:c1:53:9d:20:70:bd:b9:91:
26:d2:9f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:42:02 2026 by rpki-client