Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e342e3232312e302f32342d3234203d3e203535323031.roa
File: 3138352e342e3232312e302f32342d3234203d3e203535323031.roa (raw, json)
Hash identifier: Z7hqzPmqLrE0ldxB9HP+OQBaEkbJOUYO17+cxxo6EhY=
Subject key identifier: 5B:65:B2:D1:03:E2:42:7D:2B:52:A4:AB:B1:31:F5:86:48:55:F0:09
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 124E1C179346708327DFF9791A2884CD535E331F
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e342e3232312e302f32342d3234203d3e203535323031.roa
Signing time: Wed 08 Jul 2026 14:49:03 +0000
ROA not before: Wed 08 Jul 2026 14:44:03 +0000
ROA not after: Wed 07 Jul 2027 14:49:03 +0000
asID: 55201
IP address blocks: 185.4.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:4e:1c:17:93:46:70:83:27:df:f9:79:1a:28:84:cd:53:5e:33:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Jul 8 14:44:03 2026 GMT
Not After : Jul 7 14:49:03 2027 GMT
Subject: CN=5B65B2D103E2427D2B52A4ABB131F5864855F009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:69:26:2a:35:b4:f9:07:a6:81:24:43:30:f0:
9c:61:3e:c3:53:60:58:27:d7:4b:9d:08:6e:2f:0a:
4c:92:86:13:e9:1f:86:d3:25:4b:59:f1:78:26:96:
af:c7:a9:0f:d3:c4:69:ec:28:48:c1:37:d1:6f:9c:
92:89:f3:b0:47:8d:31:bc:9b:8a:b6:61:34:82:24:
4c:7b:73:46:e9:71:ef:9a:35:54:af:62:1f:72:45:
c5:06:a2:dc:35:3a:df:64:2e:8a:7b:58:bd:7f:83:
74:dc:85:3c:15:40:31:d0:b3:29:23:6b:2b:72:41:
b4:b6:31:e2:f8:82:34:e7:d6:95:f8:98:8d:6f:92:
75:eb:3f:5a:a5:f4:84:ff:36:34:f9:62:c4:58:38:
a2:cb:52:f8:2f:42:5f:bd:5d:0b:2c:46:a9:fd:8f:
4d:5a:b5:d2:bc:24:b1:c7:11:18:cb:67:0d:cf:66:
20:77:a8:2e:f3:0f:d6:ff:9e:3b:7c:08:06:07:4a:
87:a1:ec:1f:7d:66:70:b0:77:00:d3:39:b9:8a:36:
6c:32:93:70:1c:d5:57:8c:95:e9:c7:04:0e:dd:26:
36:52:f9:05:df:9c:71:56:90:af:b6:a1:29:cf:45:
c9:25:eb:a7:1b:88:fc:58:6a:c1:9b:0c:09:f2:87:
9f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:65:B2:D1:03:E2:42:7D:2B:52:A4:AB:B1:31:F5:86:48:55:F0:09
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e342e3232312e302f32342d3234203d3e203535323031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.4.221.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:4a:b8:aa:f7:1f:47:a9:31:d6:77:52:5a:0c:3c:1b:8a:87:
69:71:d2:b6:38:65:23:cf:6a:37:a1:75:8d:33:0f:14:06:78:
77:e0:d3:b6:df:7f:12:d4:9b:f6:af:f5:ab:a1:8b:55:67:e5:
3e:54:54:6c:5e:4b:86:fe:63:b5:ea:37:2e:b5:8d:ad:0b:79:
93:b1:a9:8d:1a:90:41:20:b1:47:3c:8b:4b:08:aa:5b:5e:08:
95:51:84:2c:31:70:e7:2d:7f:9b:3f:93:1f:04:57:20:cc:ed:
08:82:62:a5:eb:92:23:e1:5c:bb:c6:89:d4:34:51:f4:69:bf:
ee:bf:59:b7:6e:25:d9:0b:22:10:66:b6:37:9a:5b:6a:89:ac:
74:46:54:ab:42:c7:e8:f4:b6:7e:9f:2e:7b:19:f7:0d:ee:d0:
77:43:15:84:de:df:86:4e:83:bd:75:df:76:e7:37:46:70:60:
98:75:8c:61:a9:a4:e9:b7:65:90:ed:f2:c4:40:7a:b2:1f:54:
89:b7:c5:3d:a0:5f:a6:0b:83:68:65:a9:58:88:d8:a0:d6:12:
9c:f0:a6:3e:df:9b:05:d9:ec:30:2d:c9:66:f2:e9:46:2f:75:
01:a6:c5:d2:e8:c2:1f:96:73:97:fd:9e:fd:a8:ab:47:98:1c:
ef:42:f8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:07:03 2026 by rpki-client