Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/3138352e3230302e3230382e302f32342d3234203d3e203137353631.roa
File: 3138352e3230302e3230382e302f32342d3234203d3e203137353631.roa (raw, json)
Hash identifier: KJh7OnFpsOSKfQd/UAft5kU/bpS+tKBMX9KHMKwbuUM=
Subject key identifier: 82:F0:BD:10:A3:02:D5:D7:23:57:6A:57:43:F3:94:59:6A:6D:D0:FE
Certificate issuer: /CN=fddee908a9ad2dfbe32ff35b402a5ab2198dc907
Certificate serial: 2ADF64F725453507B67282D5348F1662796DDB1F
Authority key identifier: FD:DE:E9:08:A9:AD:2D:FB:E3:2F:F3:5B:40:2A:5A:B2:19:8D:C9:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_d7pCKmtLfvjL_NbQCpashmNyQc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/3138352e3230302e3230382e302f32342d3234203d3e203137353631.roa
Signing time: Tue 16 Jun 2026 16:31:48 +0000
ROA not before: Tue 16 Jun 2026 16:26:48 +0000
ROA not after: Tue 15 Jun 2027 16:31:48 +0000
asID: 17561
IP address blocks: 185.200.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.crl
rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.mft
rsync://rpki.ripe.net/repository/DEFAULT/_d7pCKmtLfvjL_NbQCpashmNyQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 15:30:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:df:64:f7:25:45:35:07:b6:72:82:d5:34:8f:16:62:79:6d:db:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fddee908a9ad2dfbe32ff35b402a5ab2198dc907
Validity
Not Before: Jun 16 16:26:48 2026 GMT
Not After : Jun 15 16:31:48 2027 GMT
Subject: CN=82F0BD10A302D5D723576A5743F394596A6DD0FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:11:b3:a2:ef:61:62:60:dc:15:b9:f9:c4:fa:
8a:51:0c:e8:94:67:81:f2:3f:48:46:d7:07:5b:8b:
48:60:e4:12:8f:6b:6b:9e:fb:bd:83:1c:92:73:dc:
be:ad:8c:87:bb:7d:5d:b7:9a:74:ad:0d:13:c2:a1:
4b:52:2f:d6:d7:e3:e8:da:8c:29:3f:b1:14:3d:f4:
3a:7b:8c:04:08:ea:65:1e:68:9e:90:fb:3e:06:42:
0f:8c:09:f4:02:de:fe:3a:5b:5e:b0:8c:8a:6b:e6:
0a:07:0a:23:27:85:5c:a6:ee:94:46:ea:e2:58:a3:
b2:0c:e7:2a:06:c2:30:c2:4e:72:a9:5e:be:59:ee:
13:c5:cd:59:8a:eb:77:58:23:fa:32:6d:31:c9:74:
12:d4:cc:0b:40:ce:32:54:23:a1:27:9e:db:31:4a:
74:71:a4:f5:29:10:d3:f4:d0:64:5a:9f:07:86:6e:
e9:82:e5:2a:7a:dc:2a:63:08:43:17:46:85:ce:77:
28:73:27:36:e2:a7:e7:86:96:6c:a5:32:e0:20:1a:
23:61:bb:c5:f1:2c:6a:b4:fa:a5:fb:a9:d2:22:16:
11:c6:57:16:73:40:73:13:d5:56:ed:cd:b9:22:54:
0b:82:ef:3d:49:3a:39:10:ca:cd:8d:f2:19:a5:3c:
49:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:F0:BD:10:A3:02:D5:D7:23:57:6A:57:43:F3:94:59:6A:6D:D0:FE
X509v3 Authority Key Identifier:
keyid:FD:DE:E9:08:A9:AD:2D:FB:E3:2F:F3:5B:40:2A:5A:B2:19:8D:C9:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_d7pCKmtLfvjL_NbQCpashmNyQc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/3138352e3230302e3230382e302f32342d3234203d3e203137353631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.200.208.0/24
Signature Algorithm: sha256WithRSAEncryption
41:75:19:81:d8:e8:eb:45:b9:f5:68:21:7a:b2:7c:32:1b:93:
b3:5f:97:b1:87:1e:57:77:a9:eb:d5:04:ed:15:a2:3c:67:b3:
4d:a3:11:b4:52:d7:9d:6e:ae:b2:85:fd:6f:d3:b3:1b:e4:93:
6f:4f:e7:ae:ad:27:5b:33:dc:7d:05:3d:c0:c7:44:cc:77:22:
e1:9b:26:1e:b4:c7:68:2b:c7:98:68:55:e0:c6:62:38:60:a1:
00:b7:9e:17:46:71:00:05:63:cc:21:98:a4:b0:52:fe:e5:4b:
8f:e7:ed:a7:28:12:ea:6f:25:23:83:39:77:be:c6:7d:67:f1:
50:f6:42:5d:4f:fb:65:06:7f:c8:43:69:97:6d:7f:a4:fb:f0:
bb:ae:e8:e5:ad:9a:ff:cd:84:ce:b5:8c:68:74:68:78:80:81:
fa:49:a9:bf:d4:84:88:07:5d:b8:5a:f2:0e:5b:5c:cc:37:25:
c7:3c:2b:58:ea:70:05:fa:c0:fc:03:9e:06:cc:ce:ec:aa:3c:
43:bf:ac:2b:6b:1f:ac:bb:6a:2b:a9:ab:85:dc:e5:1b:27:b8:
af:2e:e1:86:bf:de:b1:06:fc:12:c5:d5:b2:a6:8b:c2:6e:0b:
ca:7c:cb:49:37:da:fe:7d:0b:00:ac:c5:df:a4:a9:c8:99:35:
2d:c6:9d:c9
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUKt9k9yVFNQe2coLVNI8WYnlt2x8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZmRkZWU5MDhhOWFkMmRmYmUzMmZmMzViNDAyYTVhYjIx
OThkYzkwNzAeFw0yNjA2MTYxNjI2NDhaFw0yNzA2MTUxNjMxNDhaMDMxMTAvBgNV
BAMTKDgyRjBCRDEwQTMwMkQ1RDcyMzU3NkE1NzQzRjM5NDU5NkE2REQwRkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCREbOi72FiYNwVufnE+opRDOiU
Z4HyP0hG1wdbi0hg5BKPa2ue+72DHJJz3L6tjIe7fV23mnStDRPCoUtSL9bX4+ja
jCk/sRQ99Dp7jAQI6mUeaJ6Q+z4GQg+MCfQC3v46W16wjIpr5goHCiMnhVym7pRG
6uJYo7IM5yoGwjDCTnKpXr5Z7hPFzVmK63dYI/oybTHJdBLUzAtAzjJUI6Enntsx
SnRxpPUpENP00GRanweGbumC5Sp63CpjCEMXRoXOdyhzJzbip+eGlmylMuAgGiNh
u8XxLGq0+qX7qdIiFhHGVxZzQHMT1VbtzbkiVAuC7z1JOjkQys2N8hmlPEnjAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUgvC9EKMC1dcjV2pXQ/OUWWpt0P4wHwYDVR0j
BBgwFoAU/d7pCKmtLfvjL/NbQCpashmNyQcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYmU0MTcwNGYtNzgxNS00ZjJjLWE1MDMtNThhZTA4ZTU1
NmI2LzMvRkRERUU5MDhBOUFEMkRGQkUzMkZGMzVCNDAyQTVBQjIxOThEQzkwNy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL19kN3BDS210TGZ2akxfTmJRQ3Bhc2ht
TnlRYy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYmU0MTcwNGYt
NzgxNS00ZjJjLWE1MDMtNThhZTA4ZTU1NmI2LzMvMzEzODM1MmUzMjMwMzAyZTMy
MzAzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzczNTM2MzEucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAC5yNAwDQYJKoZIhvcNAQELBQADggEBAEF1GYHY6OtFufVoIXqyfDIbk7Nfl7GH
Hld3qevVBO0Vojxns02jEbRS151urrKF/W/Tsxvkk29P566tJ1sz3H0FPcDHRMx3
IuGbJh60x2grx5hoVeDGYjhgoQC3nhdGcQAFY8whmKSwUv7lS4/n7acoEupvJSOD
OXe+xn1n8VD2Ql1P+2UGf8hDaZdtf6T78Luu6OWtmv/NhM61jGh0aHiAgfpJqb/U
hIgHXbha8g5bXMw3Jcc8K1jqcAX6wPwDngbMzuyqPEO/rCtrH6y7aiupq4Xc5Rsn
uK8u4Ya/3rEG/BLF1bKmi8JuC8p8y0k32v59CwCsxd+kqciZNS3Gnck=
-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:30 2026 by rpki-client