Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3232322e3138362e302f32332d3234203d3e2037303138.roa
File: 3138352e3232322e3138362e302f32332d3234203d3e2037303138.roa (raw, json)
Hash identifier: QHtWC9cPACIbjekyYKvrCLdwSWe6K0olX8D5nn27if0=
Subject key identifier: D8:56:0C:DF:D2:4E:EB:C7:A5:E1:6B:F9:AB:60:05:C7:7D:B0:EA:A0
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 51E3153AB23ABD115B5F2734E11719291E7ED60B
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3232322e3138362e302f32332d3234203d3e2037303138.roa
Signing time: Thu 13 Aug 2026 15:49:28 +0000
ROA not before: Thu 13 Aug 2026 15:44:28 +0000
ROA not after: Thu 12 Aug 2027 15:49:28 +0000
asID: 7018
IP address blocks: 185.222.186.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:e3:15:3a:b2:3a:bd:11:5b:5f:27:34:e1:17:19:29:1e:7e:d6:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Aug 13 15:44:28 2026 GMT
Not After : Aug 12 15:49:28 2027 GMT
Subject: CN=D8560CDFD24EEBC7A5E16BF9AB6005C77DB0EAA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e1:af:b8:d1:f6:1d:1d:f0:e3:3a:91:de:34:
95:4a:5a:c8:70:66:b0:30:cd:05:af:9f:9c:ac:a0:
d3:22:dd:18:cd:f7:9d:a0:73:04:fb:76:a5:70:d1:
4b:14:3c:c0:63:bb:a4:15:48:52:06:67:d7:7f:8e:
49:00:66:02:c8:78:97:a3:df:46:25:43:5b:83:42:
3f:80:72:8e:6d:56:b5:2f:6e:c8:dd:2e:c6:51:9c:
23:4e:2b:28:a3:2b:be:b7:48:86:a8:82:6e:18:c5:
7b:99:04:3f:f8:3b:3e:72:71:8d:b3:e2:bc:6d:3e:
03:2a:e3:3c:e8:8d:a2:75:09:71:5c:5f:46:39:51:
04:a1:36:c7:b0:f8:65:5f:ef:8d:3f:26:69:0d:55:
ef:e8:08:f9:a4:9c:81:9e:5f:48:ac:b3:2e:cd:c0:
49:c2:47:a3:55:a0:de:cc:99:67:ee:8b:9d:3c:e3:
f9:cf:a7:b4:83:44:43:08:e9:58:f0:97:d6:b6:40:
df:79:63:1a:b0:b2:63:9a:f5:80:91:6f:00:ad:fe:
a7:46:11:05:bd:f5:59:ef:48:d5:86:f2:e5:f3:0a:
50:29:75:31:b2:00:a9:f4:74:18:aa:49:52:c1:93:
21:8e:c4:7c:77:1f:57:38:2d:9c:01:cd:d8:64:38:
82:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:56:0C:DF:D2:4E:EB:C7:A5:E1:6B:F9:AB:60:05:C7:7D:B0:EA:A0
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3232322e3138362e302f32332d3234203d3e2037303138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.186.0/23
Signature Algorithm: sha256WithRSAEncryption
80:9e:f5:b2:3a:e9:07:5f:af:61:3f:42:35:27:68:fe:9a:15:
f7:a3:a0:65:df:81:3e:0c:7e:94:8b:63:8b:32:79:1d:06:02:
8d:84:2a:2e:46:95:2b:2a:af:a9:4b:57:97:d6:94:8f:2e:e1:
22:0e:ff:6f:f0:eb:5a:7c:87:f0:e4:18:cf:29:d1:3a:03:5a:
94:81:f3:a0:a7:c6:f1:90:ba:cf:12:40:8e:8e:60:90:ea:d8:
75:e9:2c:8b:72:1b:50:ca:89:57:28:b4:86:38:1c:1b:2e:36:
77:99:37:67:fb:d7:a8:df:9a:3b:46:47:4b:fa:66:a0:b6:dd:
d4:f4:1e:c1:1f:7d:e2:50:d8:b0:26:3c:aa:9d:59:cb:7f:a9:
f1:6e:af:8a:e1:12:c9:46:69:7d:9a:d8:84:1c:73:bf:64:c7:
bf:6f:f8:38:1e:1b:2b:d0:81:14:f4:3c:3f:9f:d4:25:f0:7e:
a1:38:f5:53:9b:80:c7:ea:c1:83:6f:35:5a:c6:0c:1f:17:4c:
8b:20:2f:6d:f1:57:31:68:26:05:fa:f7:33:e0:1e:f3:f5:fc:
7b:37:40:bc:d6:e3:0e:64:d4:d0:15:36:17:96:db:1b:0a:02:
75:85:3a:9a:73:94:4b:f9:42:3d:82:ad:bf:7a:39:ff:4a:8b:
d4:81:ef:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:42:08 2026 by rpki-client