Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/3138352e322e3136302e302f32332d3234203d3e203430363736.roa
File: 3138352e322e3136302e302f32332d3234203d3e203430363736.roa (raw, json)
Hash identifier: O3J2SAXtmg62ikqS6buGe0VGwNezma9salxJz05yb48=
Subject key identifier: A6:B6:9F:B4:87:D8:B4:5E:91:F0:19:D6:9D:EF:66:A5:29:73:A1:6C
Certificate issuer: /CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
Certificate serial: 0A2059CEC3263357C9FE6C330CAE5D6C2FBCC030
Authority key identifier: 9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/3138352e322e3136302e302f32332d3234203d3e203430363736.roa
Signing time: Sat 30 May 2026 22:33:32 +0000
ROA not before: Sat 30 May 2026 22:28:32 +0000
ROA not after: Sat 29 May 2027 22:33:32 +0000
asID: 40676
IP address blocks: 185.2.160.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl
rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft
rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 03:18:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:20:59:ce:c3:26:33:57:c9:fe:6c:33:0c:ae:5d:6c:2f:bc:c0:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
Validity
Not Before: May 30 22:28:32 2026 GMT
Not After : May 29 22:33:32 2027 GMT
Subject: CN=A6B69FB487D8B45E91F019D69DEF66A52973A16C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5f:48:69:f6:27:a3:5f:1a:12:c9:be:55:d3:
70:32:61:2d:5a:c2:95:ed:9f:b3:50:c3:e4:b5:5b:
e3:24:5d:8a:65:a0:11:b8:be:4b:40:da:59:82:72:
81:85:0c:41:83:ca:ba:79:56:78:2a:33:5d:1a:04:
f1:d2:25:38:e8:15:20:c8:84:4e:6c:13:2b:f8:36:
2c:c5:e1:ed:9c:a8:72:64:9c:4e:2b:32:68:f0:8d:
46:71:e0:f4:8a:48:42:d5:36:27:32:28:16:f8:55:
98:ca:ff:a7:fa:43:f4:4d:0d:f1:a4:2a:1c:fb:3e:
cf:88:76:65:21:cc:62:fd:6b:b6:0b:f5:fd:06:b1:
df:ef:7d:ef:2a:17:6c:3d:d8:92:ea:7b:7a:3d:db:
6a:14:b0:34:71:69:bb:13:d4:27:85:b2:07:53:25:
50:2f:3a:ed:a9:18:f1:8e:ab:5c:31:9f:17:fe:4d:
f3:94:ff:1b:86:55:70:bc:ab:f8:6b:a9:44:d4:41:
9a:e7:c2:a0:6d:fb:f5:98:3c:c6:54:b3:23:ab:6c:
e4:4a:e4:81:ba:57:4e:76:1a:55:e1:d0:1c:49:df:
5d:e9:22:5e:0f:9a:0a:7d:8c:c3:8a:a8:e3:a8:6a:
b0:40:71:51:38:bb:99:b9:ee:7c:b7:07:47:1e:e3:
cd:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:B6:9F:B4:87:D8:B4:5E:91:F0:19:D6:9D:EF:66:A5:29:73:A1:6C
X509v3 Authority Key Identifier:
keyid:9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/3138352e322e3136302e302f32332d3234203d3e203430363736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.2.160.0/23
Signature Algorithm: sha256WithRSAEncryption
30:42:f5:65:66:28:86:71:86:95:e3:f6:33:dd:a1:bc:91:49:
7f:97:e2:b5:30:29:7d:6c:c7:fc:ec:a5:bc:10:9c:2f:58:59:
a3:bc:b8:65:15:90:98:7f:ae:5d:e6:fe:19:6e:b6:b6:3f:5c:
ba:83:a1:b4:05:11:ac:34:9a:7b:de:74:ac:a6:cc:31:77:7c:
46:ad:af:17:53:34:ff:b3:39:3c:da:24:3f:05:dc:28:85:9d:
6a:96:01:c1:39:22:29:94:92:b2:71:af:97:46:f7:58:eb:7a:
df:85:ae:0c:39:1e:52:78:e3:ff:d5:52:5f:3e:ec:fe:58:20:
eb:a3:0a:4d:f3:8f:19:02:af:e2:de:98:cc:69:00:a5:bf:ee:
0b:68:32:e6:f7:ac:27:9e:55:f9:eb:3b:18:1b:8a:16:5b:a8:
1b:5c:b0:44:e9:eb:60:19:9f:82:59:a5:53:85:27:5b:dd:72:
1f:22:aa:3b:7d:2e:b6:eb:4f:8c:3e:1b:93:76:9a:9c:44:2b:
6e:41:52:e3:77:a1:10:95:64:f3:bf:b8:5c:18:13:cc:8c:9e:
cd:8a:3d:d6:d2:3c:3b:df:4e:c3:7e:ac:8b:99:d3:0d:b1:cf:
9a:40:fb:98:ee:a7:96:8f:3a:cc:b0:e4:d0:09:f2:d5:1c:05:
ed:5d:8c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 16:02:22 2026 by rpki-client