Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/3138352e322e34382e302f32342d3234203d3e203137353631.roa
File: 3138352e322e34382e302f32342d3234203d3e203137353631.roa (raw, json)
Hash identifier: cZHbqDSphl2AebyPk2WwPs0MocGp/zIlcgDtX1Z1eRc=
Subject key identifier: 4E:68:44:44:37:0F:9B:BC:F0:D1:28:9F:9C:9E:F2:6D:EB:84:C9:D4
Certificate issuer: /CN=a29ef21c1397ab4b2f08778305a37ffd1cc25c4e
Certificate serial: 24D537E5B3AD5CEC65ECC6E58DC2D9D7028C1B95
Authority key identifier: A2:9E:F2:1C:13:97:AB:4B:2F:08:77:83:05:A3:7F:FD:1C:C2:5C:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/op7yHBOXq0svCHeDBaN__RzCXE4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/3138352e322e34382e302f32342d3234203d3e203137353631.roa
Signing time: Thu 13 Aug 2026 16:43:12 +0000
ROA not before: Thu 13 Aug 2026 16:38:12 +0000
ROA not after: Thu 12 Aug 2027 16:43:12 +0000
asID: 17561
IP address blocks: 185.2.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.crl
rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/op7yHBOXq0svCHeDBaN__RzCXE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 17:15:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:d5:37:e5:b3:ad:5c:ec:65:ec:c6:e5:8d:c2:d9:d7:02:8c:1b:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a29ef21c1397ab4b2f08778305a37ffd1cc25c4e
Validity
Not Before: Aug 13 16:38:12 2026 GMT
Not After : Aug 12 16:43:12 2027 GMT
Subject: CN=4E684444370F9BBCF0D1289F9C9EF26DEB84C9D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d5:53:34:a4:a2:27:6f:fc:2a:43:d9:83:70:
34:31:7d:9f:82:82:18:e1:7b:5e:31:b4:7d:e2:a0:
7f:f7:bc:74:5e:9d:71:64:7c:88:d4:4e:3a:9a:7c:
06:82:56:e8:f5:96:5c:5c:f5:ba:42:bd:b9:f3:9f:
5c:12:42:01:fa:86:10:32:01:14:59:18:f7:66:5d:
97:a7:fd:ef:3c:dd:0d:0e:67:c6:27:8f:23:80:bc:
94:ff:43:b0:1f:0e:29:98:9d:e2:d9:5d:8e:92:45:
47:cf:92:f4:7a:ee:a3:59:14:7d:4f:b0:bc:f2:db:
0a:fa:0d:a4:c7:1e:6c:e2:d1:62:4b:fa:80:f3:f1:
6f:3e:ed:4d:0c:16:9f:8a:fa:81:2c:93:4e:43:51:
5a:2c:24:f3:00:28:c6:9c:b6:ae:21:ad:72:65:b9:
bb:58:03:89:2f:f9:8b:a2:73:15:67:30:a1:2c:70:
77:ef:28:11:70:3f:e3:5f:50:45:25:de:84:f2:40:
0c:f2:d7:89:f8:fd:b8:f8:93:ba:87:c7:3e:bc:6c:
23:60:9e:1e:8e:c2:80:f7:73:88:86:06:6c:aa:13:
c0:0f:8e:7a:2a:25:9f:0e:f5:41:81:e8:ec:44:3b:
92:86:34:55:84:ea:df:32:36:7a:25:52:57:b0:7b:
af:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:68:44:44:37:0F:9B:BC:F0:D1:28:9F:9C:9E:F2:6D:EB:84:C9:D4
X509v3 Authority Key Identifier:
keyid:A2:9E:F2:1C:13:97:AB:4B:2F:08:77:83:05:A3:7F:FD:1C:C2:5C:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/op7yHBOXq0svCHeDBaN__RzCXE4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/3138352e322e34382e302f32342d3234203d3e203137353631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.2.48.0/24
Signature Algorithm: sha256WithRSAEncryption
13:3a:f1:f8:72:91:87:8f:a2:1f:62:c1:7b:e5:96:a0:42:d3:
6a:cb:61:d1:6f:96:9f:15:9e:66:73:c0:cd:1d:f2:4a:a2:38:
67:15:e0:5f:29:a5:2b:b2:da:4a:e1:d1:31:ed:c3:b3:6a:fa:
4d:ac:01:7b:f0:e9:12:45:6d:e0:e6:a3:8c:6b:c1:4b:2b:b9:
92:0d:39:90:d6:c8:8e:ae:85:21:b0:18:ff:10:9a:f4:1c:7b:
02:89:b5:5c:57:12:45:2b:b8:77:3e:ff:38:84:8d:89:0f:e1:
de:5f:68:1a:d2:48:f2:e0:dd:59:d3:6a:21:4e:98:10:33:e4:
d4:1f:ac:18:0c:1d:57:1e:b9:3d:01:f0:2b:73:2c:79:48:f0:
a7:b3:99:de:6c:9d:80:36:06:64:3b:6e:e1:5b:c0:5d:14:19:
f9:e3:e6:d7:a0:d6:59:fd:b0:7d:e7:5a:bc:b2:d6:4d:ad:8a:
8f:6f:2c:cc:c1:9a:55:5d:01:eb:9a:8a:79:55:1b:6a:4d:a0:
26:d1:72:60:79:8e:f9:cb:29:f0:2b:ef:e1:62:01:c1:13:03:
e9:ca:18:55:97:3d:a5:b2:39:53:95:48:c7:73:c3:13:69:0f:
de:40:b4:f1:19:bd:de:be:ac:2e:88:ae:44:f3:79:4a:f7:ee:
2e:94:c5:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:23:25 2026 by rpki-client