Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3232322e3138342e302f32332d3234203d3e2037303239.roa
File: 3138352e3232322e3138342e302f32332d3234203d3e2037303239.roa (raw, json)
Hash identifier: rLFNajTdoOFHgKJhZZwEIHvBvBmK8n1Bak29UkHVIAo=
Subject key identifier: 1B:50:0D:B3:E4:FD:85:83:6B:20:1D:D2:72:D8:F9:79:0C:71:EA:16
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 3E4EEB43D1399C33D7B15D6E04C4AEA0761ED66D
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3232322e3138342e302f32332d3234203d3e2037303239.roa
Signing time: Thu 18 Jun 2026 17:47:46 +0000
ROA not before: Thu 18 Jun 2026 17:42:46 +0000
ROA not after: Thu 17 Jun 2027 17:47:46 +0000
asID: 7029
IP address blocks: 185.222.184.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 15:10:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:4e:eb:43:d1:39:9c:33:d7:b1:5d:6e:04:c4:ae:a0:76:1e:d6:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Jun 18 17:42:46 2026 GMT
Not After : Jun 17 17:47:46 2027 GMT
Subject: CN=1B500DB3E4FD85836B201DD272D8F9790C71EA16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9e:18:71:88:4b:96:86:e5:75:df:90:20:4c:
ee:1e:b6:5c:42:60:77:c1:a6:eb:34:0c:4a:30:43:
5a:7f:cf:ed:ed:b3:3b:c4:1f:b2:57:2e:9b:0a:ef:
63:1c:2f:67:c1:85:cd:c3:ac:04:54:a7:4f:db:f1:
46:80:46:a7:60:e3:46:cc:09:6f:6b:3a:69:00:4f:
c6:1e:e2:98:75:22:9d:a1:f4:3f:df:e3:ac:bf:99:
f7:2c:dd:93:ba:fc:69:40:10:17:e0:8d:3b:75:27:
a8:bd:58:cc:2a:a0:63:5e:fe:6f:3f:52:38:2c:8c:
a5:48:bd:74:28:e9:b7:9c:6f:61:ff:c8:5c:01:c1:
b1:0d:00:b6:06:91:cc:a1:18:f9:13:57:6e:bf:02:
ee:e8:86:32:87:7f:11:bf:b3:ba:9c:c6:9d:f1:57:
88:1c:cb:6c:df:7f:45:84:cc:26:cc:c5:d5:2f:15:
da:3f:5f:b4:2d:b8:6a:4c:04:b5:73:0d:8c:17:45:
af:93:8b:3a:d6:c9:58:e6:b4:f8:ab:df:22:ef:ac:
6b:7e:39:81:01:80:25:55:7e:0b:62:6a:f3:aa:0b:
f4:87:13:13:32:dd:54:1a:6c:cb:5b:b2:99:a7:c5:
51:2c:7f:75:7c:68:7b:16:f7:b1:7c:ad:7a:e7:28:
10:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:50:0D:B3:E4:FD:85:83:6B:20:1D:D2:72:D8:F9:79:0C:71:EA:16
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3232322e3138342e302f32332d3234203d3e2037303239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.184.0/23
Signature Algorithm: sha256WithRSAEncryption
51:68:54:18:f7:be:92:f9:1e:c8:ef:0c:58:02:6d:f0:97:7a:
8c:58:0e:59:05:04:71:62:f4:87:6f:95:04:f2:65:3b:38:0a:
6f:03:69:90:d3:e4:15:6b:09:c2:cc:11:3d:bd:df:52:a5:20:
c6:b8:bf:27:a1:53:aa:2b:76:84:3f:3d:06:93:32:3f:ff:ef:
51:76:1b:4f:d5:55:9d:b7:f1:e7:f2:26:62:53:ba:95:8e:b6:
70:5e:e8:b9:64:c2:e1:7d:01:39:e0:dd:08:a6:7e:eb:ed:df:
66:77:50:70:1f:7f:e6:ba:7d:8e:18:0e:20:f8:16:ae:dd:4c:
91:35:fe:cf:91:58:25:e7:d7:72:83:88:21:4c:b0:b1:c6:c3:
2e:8b:09:e9:65:5b:c6:d0:08:a8:5e:8c:9d:f3:fa:79:3f:88:
a9:00:b9:ca:d3:ea:e2:d4:54:03:bf:a0:f2:d5:4d:87:0b:ec:
60:46:e5:2f:32:fd:9d:69:fc:4d:06:a5:20:87:3f:44:16:cd:
4c:ad:8a:9a:12:cf:b0:f2:f4:46:a7:15:90:c1:a4:58:98:75:
39:d2:f5:fa:2c:29:a1:eb:ed:3a:5b:ee:cb:c0:5b:09:e4:3a:
f7:3a:18:bb:87:99:6f:2a:32:46:a6:10:5f:d0:3f:f3:17:e6:
77:79:c1:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:16:55 2026 by rpki-client