Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/3138352e322e34392e302f32342d3234203d3e203136323736.roa
File: 3138352e322e34392e302f32342d3234203d3e203136323736.roa (raw, json)
Hash identifier: FCBsflEGPuIBPUDpr9Wd2P83pgvdVR6oNP7rgNfs70A=
Subject key identifier: 89:B4:C1:E9:CE:6F:B9:4C:FC:B0:0E:F7:49:8A:23:38:D1:F8:16:F6
Certificate issuer: /CN=a29ef21c1397ab4b2f08778305a37ffd1cc25c4e
Certificate serial: 7BC7302A2E60AC05E6B6C043FA0C9CBD8BFA7284
Authority key identifier: A2:9E:F2:1C:13:97:AB:4B:2F:08:77:83:05:A3:7F:FD:1C:C2:5C:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/op7yHBOXq0svCHeDBaN__RzCXE4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/3138352e322e34392e302f32342d3234203d3e203136323736.roa
Signing time: Wed 12 Aug 2026 16:43:07 +0000
ROA not before: Wed 12 Aug 2026 16:38:07 +0000
ROA not after: Wed 11 Aug 2027 16:43:07 +0000
asID: 16276
IP address blocks: 185.2.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.crl
rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/op7yHBOXq0svCHeDBaN__RzCXE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 17:15:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:c7:30:2a:2e:60:ac:05:e6:b6:c0:43:fa:0c:9c:bd:8b:fa:72:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a29ef21c1397ab4b2f08778305a37ffd1cc25c4e
Validity
Not Before: Aug 12 16:38:07 2026 GMT
Not After : Aug 11 16:43:07 2027 GMT
Subject: CN=89B4C1E9CE6FB94CFCB00EF7498A2338D1F816F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9a:0c:44:5e:bb:ad:68:4d:0e:ea:d9:d8:82:
ee:04:a6:b3:32:40:9e:16:23:2d:e2:fc:65:12:c4:
85:88:1f:4a:86:51:2b:57:ab:43:83:89:11:cb:df:
f2:d4:06:24:99:ce:95:0c:15:4f:2c:11:8e:0d:b3:
a2:b6:94:cd:b9:8e:b1:ae:e6:74:de:07:f9:94:b2:
ee:a5:c9:76:8f:66:64:b5:2a:f6:f2:84:15:e9:69:
aa:61:6b:47:2d:f6:43:9c:fb:ed:4a:4b:58:14:b6:
4c:e3:81:55:97:c4:de:5b:c0:16:3f:ca:78:85:87:
7f:3d:5a:da:a7:32:fe:b8:ff:e6:82:8b:bd:b3:ab:
6c:bc:2e:fb:6d:c0:07:18:3b:aa:d3:91:3d:1b:e9:
04:41:70:f8:be:43:e0:65:2d:8c:d9:2b:8b:9a:50:
d5:a2:92:4c:5a:9b:0e:7a:b1:19:54:c3:23:08:61:
64:f4:60:8f:74:9a:25:cf:a4:77:bb:e9:6d:9b:f9:
93:cd:37:18:09:1e:d7:e6:80:f5:03:0b:fa:69:f5:
69:ff:a5:2b:e2:06:a5:56:36:6a:29:5e:d2:11:37:
6f:a3:4d:69:3c:d0:37:9a:d9:ab:d4:73:e8:88:22:
31:69:26:f7:40:76:70:41:a6:f2:f3:8b:de:d0:31:
15:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B4:C1:E9:CE:6F:B9:4C:FC:B0:0E:F7:49:8A:23:38:D1:F8:16:F6
X509v3 Authority Key Identifier:
keyid:A2:9E:F2:1C:13:97:AB:4B:2F:08:77:83:05:A3:7F:FD:1C:C2:5C:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/op7yHBOXq0svCHeDBaN__RzCXE4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/3138352e322e34392e302f32342d3234203d3e203136323736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.2.49.0/24
Signature Algorithm: sha256WithRSAEncryption
74:09:57:5c:23:b8:b6:c8:be:de:da:ac:6d:a5:a5:c1:a4:f9:
22:f3:e4:b8:30:9f:ac:34:ce:f1:0c:10:c2:e0:67:00:38:c7:
aa:a8:64:8b:12:e5:dc:61:1a:71:74:81:d2:39:52:06:a2:d4:
81:af:aa:46:61:9a:58:88:a8:f8:0a:76:ab:e8:56:59:27:e4:
a0:32:43:3a:73:c5:02:98:f6:13:0b:b3:19:f3:a1:49:a7:39:
b7:d2:cf:b5:e3:68:9d:34:27:8c:be:1f:e8:c1:c7:68:ab:68:
47:04:7a:ff:51:af:ac:2e:c0:33:5d:00:f0:f3:3d:15:24:4e:
88:ac:9f:67:06:b6:a0:77:7a:ed:7a:81:36:eb:a0:c6:d8:e5:
02:35:0b:a5:84:ae:0e:e6:9d:34:19:96:9a:86:2a:1f:4d:f8:
b8:e2:41:4a:13:fb:b3:ca:0b:aa:22:fa:44:38:a1:e1:1c:69:
cc:0a:aa:fd:fb:db:07:27:d9:a5:d1:2d:b3:51:50:ee:ee:7b:
93:8e:24:d5:c5:c8:dd:af:ec:85:48:1e:d8:d5:02:0f:b7:c5:
2d:2c:99:d7:60:59:13:9a:46:22:6e:42:8b:0b:42:18:b4:8b:
4a:1c:e3:77:73:13:a9:ee:02:f3:6b:fd:05:40:1f:4b:76:32:
9a:fa:cd:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:23:26 2026 by rpki-client