Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/3138352e3230302e3230392e302f32342d3234203d3e203137353631.roa
File: 3138352e3230302e3230392e302f32342d3234203d3e203137353631.roa (raw, json)
Hash identifier: v/h3hPmGhBgtKTeks7zrDtf9px5z2lni2/LbyukdUQ4=
Subject key identifier: E8:62:1F:5B:A5:52:C2:95:E4:A0:0B:DD:FA:8D:31:58:0F:5D:22:FC
Certificate issuer: /CN=fddee908a9ad2dfbe32ff35b402a5ab2198dc907
Certificate serial: 0A4844328FAE5490D8394F0DB7AC6DBE2D0B62D1
Authority key identifier: FD:DE:E9:08:A9:AD:2D:FB:E3:2F:F3:5B:40:2A:5A:B2:19:8D:C9:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_d7pCKmtLfvjL_NbQCpashmNyQc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/3138352e3230302e3230392e302f32342d3234203d3e203137353631.roa
Signing time: Tue 16 Jun 2026 16:31:28 +0000
ROA not before: Tue 16 Jun 2026 16:26:28 +0000
ROA not after: Tue 15 Jun 2027 16:31:28 +0000
asID: 17561
IP address blocks: 185.200.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.crl
rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.mft
rsync://rpki.ripe.net/repository/DEFAULT/_d7pCKmtLfvjL_NbQCpashmNyQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 15:30:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:48:44:32:8f:ae:54:90:d8:39:4f:0d:b7:ac:6d:be:2d:0b:62:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fddee908a9ad2dfbe32ff35b402a5ab2198dc907
Validity
Not Before: Jun 16 16:26:28 2026 GMT
Not After : Jun 15 16:31:28 2027 GMT
Subject: CN=E8621F5BA552C295E4A00BDDFA8D31580F5D22FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c2:26:15:2c:f6:86:91:15:26:69:53:dc:49:
f2:55:55:ad:0d:dc:4a:50:68:d5:6b:b6:72:d4:b9:
35:c0:57:98:14:8a:30:20:f2:dc:e9:ff:47:5f:f9:
62:12:bc:62:9d:e0:1e:ec:a3:e3:0b:a2:e0:67:a7:
87:6d:4c:8b:61:d5:f6:72:33:39:02:50:e3:c7:28:
5a:70:c8:24:eb:db:8a:6d:ba:74:9b:4f:3c:40:c7:
fa:9c:a5:0f:1b:a3:d7:65:38:2d:77:8c:54:43:e7:
6f:6a:d6:73:98:46:b5:14:3e:8d:0b:4f:40:b3:c1:
09:28:29:10:0d:f2:c2:bd:f9:bb:43:6f:0f:0e:0d:
ed:7b:80:c6:e8:22:af:4f:c2:e4:2b:5c:a7:8f:7a:
7d:84:4b:4b:d9:f0:c1:62:a7:73:f0:6f:eb:8b:58:
a9:47:2c:bd:a8:6f:a6:e5:07:31:07:08:41:38:02:
59:f1:71:9b:cc:4e:df:5d:7f:c6:be:f7:7b:0e:fd:
40:bb:cd:8a:a0:54:9e:99:15:2c:d6:89:99:0d:17:
c0:7c:5a:ee:28:63:dd:32:00:ac:13:c3:2f:ae:fa:
85:3d:30:77:2f:83:af:c5:63:a8:38:19:ab:71:65:
13:80:f0:1e:f7:56:ad:23:53:28:2c:1a:f6:97:99:
94:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:62:1F:5B:A5:52:C2:95:E4:A0:0B:DD:FA:8D:31:58:0F:5D:22:FC
X509v3 Authority Key Identifier:
keyid:FD:DE:E9:08:A9:AD:2D:FB:E3:2F:F3:5B:40:2A:5A:B2:19:8D:C9:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_d7pCKmtLfvjL_NbQCpashmNyQc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/3138352e3230302e3230392e302f32342d3234203d3e203137353631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.200.209.0/24
Signature Algorithm: sha256WithRSAEncryption
34:cf:79:6a:16:d0:e3:9f:de:07:95:ac:03:53:1e:e6:96:01:
00:f6:03:c4:d7:b7:59:37:e5:a3:fb:ee:dc:96:39:89:80:b8:
40:42:fe:26:08:84:59:09:a0:d9:5c:78:2f:cd:1b:5f:55:5e:
ef:82:bf:52:f4:06:1e:9b:40:00:74:e1:34:70:ef:ad:ea:9d:
eb:b4:ff:c5:6f:d7:ea:bd:fd:47:e4:3a:b8:73:e7:e4:d0:75:
de:77:88:2e:e1:ec:8a:26:99:99:c2:01:75:72:2b:0a:69:66:
ef:92:6a:a9:3a:e6:ca:1f:47:9d:80:5b:45:f0:45:2b:fc:d3:
11:e8:16:65:52:7e:72:8e:6f:20:e3:34:57:1f:cb:60:e6:f6:
0e:e2:1f:13:67:25:5f:4c:b0:26:49:0e:97:69:eb:9f:3b:03:
5f:9e:ef:b1:24:53:c9:d9:07:d9:d8:eb:8a:c5:74:77:e1:6a:
28:3c:43:9d:cd:56:fc:22:4a:31:16:e1:6b:c5:72:7c:67:ff:
7f:52:a8:6e:66:8c:d8:58:34:01:90:89:ea:a7:00:b6:02:5e:
c4:f7:74:79:32:30:8c:a8:c0:9c:2e:ed:30:c6:4f:c9:ad:7a:
78:39:15:67:be:92:e4:30:62:33:48:ff:57:d1:ce:35:c4:02:
a5:e3:40:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:30 2026 by rpki-client