Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e342e3232312e302f32342d3234203d3e20323032373336.roa
File: 3138352e342e3232312e302f32342d3234203d3e20323032373336.roa (raw, json)
Hash identifier: EwGYrS1vbauJKvZo4/Al7Vkc53h3num38vaChmEfA48=
Subject key identifier: 91:11:61:3A:0A:A2:24:80:01:78:EC:32:F1:6A:84:88:5B:3F:55:D5
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 10C30525F53E481A6ECCDF853BBD6B55C743BD20
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e342e3232312e302f32342d3234203d3e20323032373336.roa
Signing time: Wed 08 Jul 2026 09:49:01 +0000
ROA not before: Wed 08 Jul 2026 09:44:01 +0000
ROA not after: Wed 07 Jul 2027 09:49:01 +0000
asID: 202736
IP address blocks: 185.4.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:19:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:c3:05:25:f5:3e:48:1a:6e:cc:df:85:3b:bd:6b:55:c7:43:bd:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Jul 8 09:44:01 2026 GMT
Not After : Jul 7 09:49:01 2027 GMT
Subject: CN=9111613A0AA224800178EC32F16A84885B3F55D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:40:54:a5:8a:af:a4:ed:e1:1c:c4:1a:87:b6:
92:8a:c7:65:f6:51:a1:3b:2b:ee:21:b4:c6:fb:33:
3d:85:d5:df:93:08:72:01:a1:04:e2:d0:3c:fc:ae:
d9:e3:2b:36:f6:c1:be:5d:e2:84:b2:f2:75:2a:24:
d5:e4:c2:ba:1a:2b:fe:ff:c1:f8:cf:2c:52:fb:fe:
b9:f5:f7:1a:a5:a5:6f:b1:9d:b2:89:ed:40:01:e7:
b2:d5:37:92:00:e4:1c:b4:bd:c9:7e:ad:73:52:48:
75:e1:af:1b:ee:66:2c:9d:9a:a6:37:b7:c7:8c:c3:
36:99:ba:be:00:9a:c1:51:f2:54:48:6a:6f:08:72:
be:35:6c:5d:18:b0:68:d7:69:84:dc:ff:d1:f8:84:
53:14:61:c6:86:9e:c3:f5:b8:f9:c0:55:54:48:85:
33:34:52:aa:67:62:79:3d:d5:69:3c:7d:1c:ee:51:
19:c2:d1:16:d2:db:de:e7:f2:8a:18:82:cf:ad:e3:
9e:a6:a0:b9:de:44:02:08:ec:fb:d4:51:22:8c:a0:
fe:51:f3:76:de:51:78:47:61:cd:e6:4e:f9:e0:4b:
73:49:18:e3:72:8d:9e:fd:79:d1:5f:38:43:d3:39:
70:14:01:f5:b7:6f:0d:a9:eb:5b:e1:d9:e6:48:6c:
30:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:11:61:3A:0A:A2:24:80:01:78:EC:32:F1:6A:84:88:5B:3F:55:D5
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e342e3232312e302f32342d3234203d3e20323032373336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.4.221.0/24
Signature Algorithm: sha256WithRSAEncryption
93:a0:a7:b1:e9:cc:8c:da:38:95:7d:96:5d:7e:d3:c6:eb:4d:
e0:6b:f0:a8:a7:73:04:d9:31:6d:8a:b5:59:fc:87:0f:0a:b5:
06:75:6e:57:98:0c:c3:89:ad:a1:b0:b5:83:f8:85:ac:90:f1:
b0:eb:b8:4a:cb:13:cd:f9:de:16:ce:9f:f4:83:c1:d2:8e:f4:
bb:a5:5b:24:98:46:b7:9d:d7:f1:17:1b:de:b1:69:01:54:62:
49:82:42:bd:53:35:2f:05:d8:ac:08:e5:07:09:34:43:52:e0:
6b:32:89:6a:ee:67:84:bc:c4:82:30:04:4b:aa:65:46:5a:dc:
33:53:03:1d:19:eb:54:43:53:63:7f:82:1c:d9:11:2b:01:4b:
cb:d1:61:58:34:9e:b4:08:4c:e7:3f:f2:f1:0f:e1:dc:2a:36:
e3:63:0c:49:67:aa:0c:96:3a:ed:90:d6:f0:90:4e:e5:81:ec:
6f:d5:fc:7c:2c:93:7f:43:3d:84:fe:6e:77:7b:e7:9d:7b:df:
e4:26:e5:3c:53:67:36:6c:cd:93:e2:12:8b:93:90:ba:d7:e4:
e8:7c:d7:37:59:7d:ac:f2:be:65:c7:41:e3:81:b0:23:b8:7b:
21:1b:42:11:a4:29:de:2b:dd:04:dc:60:35:19:1d:af:74:a4:
57:1d:26:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:54:08 2026 by rpki-client