Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e342e3232312e302f32342d3234203d3e20313937353337.roa
File: 3138352e342e3232312e302f32342d3234203d3e20313937353337.roa (raw, json)
Hash identifier: T0WuJxAQxZj6FjW3TRWYj04yeirYOgET7hC3hr93I9A=
Subject key identifier: CD:92:48:E4:41:EE:63:BC:B4:62:3A:6F:4A:84:7F:5E:1E:70:7D:3A
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 01F6CDE762DD71932C9E51DB9887ACE228A72047
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e342e3232312e302f32342d3234203d3e20313937353337.roa
Signing time: Wed 08 Jul 2026 09:49:01 +0000
ROA not before: Wed 08 Jul 2026 09:44:01 +0000
ROA not after: Wed 07 Jul 2027 09:49:01 +0000
asID: 197537
IP address blocks: 185.4.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:19:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:f6:cd:e7:62:dd:71:93:2c:9e:51:db:98:87:ac:e2:28:a7:20:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Jul 8 09:44:01 2026 GMT
Not After : Jul 7 09:49:01 2027 GMT
Subject: CN=CD9248E441EE63BCB4623A6F4A847F5E1E707D3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b5:1a:2e:5a:1f:f8:aa:e9:af:a2:03:ce:c0:
b9:01:56:ac:61:2e:05:7d:b2:44:71:50:1b:ee:8c:
0d:42:3e:33:e1:20:26:da:ce:36:b0:5f:54:2e:c7:
9c:62:79:34:fb:b2:78:9b:7c:52:87:8a:f5:82:13:
aa:ca:b9:a2:40:ff:76:4c:ad:18:39:a0:67:59:05:
a8:81:e0:20:40:59:3f:fb:76:14:fe:a0:e6:8a:c4:
14:f4:9b:db:f8:9b:cc:72:ed:f1:0c:84:8a:e1:87:
b5:93:28:c8:87:dc:d9:88:de:12:60:68:e2:ca:62:
09:d6:e9:31:18:e5:e0:b1:d4:18:e4:6d:2e:a3:26:
4d:6b:61:95:29:7d:14:22:6b:a3:a5:12:ae:be:11:
29:69:2d:0d:9b:6e:06:d3:10:42:0f:ed:e7:f4:7c:
64:cd:7c:b0:18:4b:55:68:7a:58:d4:76:67:c8:a2:
37:de:92:18:c0:25:f5:8b:c9:8f:9d:ad:8f:3d:b5:
d8:77:2b:30:16:b3:76:2f:8c:fd:ac:3b:a3:17:20:
90:b6:10:6e:74:3b:79:aa:31:28:13:74:6f:88:20:
ed:10:59:44:e6:22:5e:f0:6d:8d:cb:34:16:4d:d3:
7c:a6:56:bd:f3:c3:8b:1b:3d:09:8a:48:73:41:86:
fd:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:92:48:E4:41:EE:63:BC:B4:62:3A:6F:4A:84:7F:5E:1E:70:7D:3A
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e342e3232312e302f32342d3234203d3e20313937353337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.4.221.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:3b:40:a3:68:14:6d:03:f8:fa:69:fa:c0:7c:98:4c:3f:ae:
43:90:0e:62:06:2e:28:95:09:f6:01:e8:65:89:2e:93:23:8b:
c4:50:8e:8f:a0:29:2d:ef:ec:1a:c0:ec:d8:ef:8d:bd:6d:03:
7f:70:42:f8:b2:94:6d:52:c5:f6:57:39:bb:2a:f5:de:46:0c:
fa:ba:ea:c3:e2:12:71:ef:ff:5b:5b:0d:6c:3a:db:7c:19:1d:
e0:77:16:f3:32:32:13:06:78:e5:e2:33:d2:b5:39:2d:10:f5:
68:b1:fd:27:51:83:fd:94:a5:a3:e4:6c:99:13:c4:ab:c7:59:
a5:71:5b:fd:e7:61:13:8e:7f:0f:17:25:f9:31:7b:9b:15:d9:
69:5e:7e:cf:af:9c:20:87:8a:c4:06:ca:2d:b9:63:3e:67:a4:
51:dc:c5:29:70:fc:02:5f:6a:dc:03:5b:93:ac:77:ef:81:45:
8a:78:42:ee:6b:ec:31:8e:3d:03:29:5c:a9:e4:66:a8:3a:5d:
c9:88:3b:86:cf:2d:df:33:55:bd:71:4b:a9:34:f9:f5:eb:58:
9b:ab:06:e7:6b:84:82:01:f2:53:2b:16:58:64:dc:51:95:67:
41:a8:e7:78:17:64:f1:27:f1:40:98:15:33:cc:b2:42:66:78:
6a:dd:12:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:55:15 2026 by rpki-client