Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/3138352e3230302e3231302e302f32342d3234203d3e203137353631.roa
File: 3138352e3230302e3231302e302f32342d3234203d3e203137353631.roa (raw, json)
Hash identifier: BOK4lpEyVH5XXI/b4WZkHrSllPabXtlg/aEfwPwNvEg=
Subject key identifier: 09:87:7D:7E:CC:2C:7C:D1:DD:CD:9C:23:67:DC:02:D2:FF:A4:CF:9E
Certificate issuer: /CN=fddee908a9ad2dfbe32ff35b402a5ab2198dc907
Certificate serial: 2B32C066BC574656EBF9EF115336A7425DB9EEE2
Authority key identifier: FD:DE:E9:08:A9:AD:2D:FB:E3:2F:F3:5B:40:2A:5A:B2:19:8D:C9:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_d7pCKmtLfvjL_NbQCpashmNyQc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/3138352e3230302e3231302e302f32342d3234203d3e203137353631.roa
Signing time: Tue 16 Jun 2026 16:31:30 +0000
ROA not before: Tue 16 Jun 2026 16:26:30 +0000
ROA not after: Tue 15 Jun 2027 16:31:30 +0000
asID: 17561
IP address blocks: 185.200.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.crl
rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.mft
rsync://rpki.ripe.net/repository/DEFAULT/_d7pCKmtLfvjL_NbQCpashmNyQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 15:30:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:32:c0:66:bc:57:46:56:eb:f9:ef:11:53:36:a7:42:5d:b9:ee:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fddee908a9ad2dfbe32ff35b402a5ab2198dc907
Validity
Not Before: Jun 16 16:26:30 2026 GMT
Not After : Jun 15 16:31:30 2027 GMT
Subject: CN=09877D7ECC2C7CD1DDCD9C2367DC02D2FFA4CF9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:16:a2:c3:c3:f2:3c:c5:2a:05:e4:12:b9:e7:
81:08:36:1f:71:8e:20:76:bd:cd:35:63:9a:1e:f6:
d4:f3:37:c0:64:8b:0e:90:f8:9e:49:66:20:96:7c:
65:ce:35:d4:77:ce:2c:83:8a:4d:a1:4b:90:9a:d4:
7f:92:99:fe:58:ba:5b:ac:6e:7a:53:48:5e:c6:a2:
df:a5:2d:27:5b:b1:59:04:73:7f:23:8b:fd:66:5e:
80:f3:d1:8a:88:36:3e:9f:94:6b:28:df:26:69:f3:
92:96:79:74:b4:24:bc:a5:5e:a3:56:e0:42:6b:42:
aa:3c:a1:48:c8:ce:47:ad:81:0e:78:ac:37:8f:ae:
28:1d:c9:95:0c:40:0d:bc:32:32:ff:41:d7:63:d5:
ca:cb:d1:29:b4:f3:92:c6:03:db:bc:cf:a6:20:69:
8d:75:83:b2:c0:46:95:bd:ff:16:c4:31:e0:6f:0f:
d0:65:c0:f4:a0:d2:cb:61:ed:73:80:0f:f3:aa:e7:
fd:57:6f:6f:9a:e5:7b:c3:88:81:3d:b8:71:77:16:
a9:2c:ff:66:be:5c:f7:f0:9e:ef:53:09:d3:52:2e:
d6:72:41:fc:4e:f4:19:f7:16:35:50:ee:6e:9f:ec:
51:6b:13:cd:56:76:23:5b:b4:76:ef:f7:33:f0:31:
c3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:87:7D:7E:CC:2C:7C:D1:DD:CD:9C:23:67:DC:02:D2:FF:A4:CF:9E
X509v3 Authority Key Identifier:
keyid:FD:DE:E9:08:A9:AD:2D:FB:E3:2F:F3:5B:40:2A:5A:B2:19:8D:C9:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_d7pCKmtLfvjL_NbQCpashmNyQc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/3138352e3230302e3231302e302f32342d3234203d3e203137353631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.200.210.0/24
Signature Algorithm: sha256WithRSAEncryption
24:f6:86:54:50:30:5a:9b:8f:11:2d:b4:46:fb:7c:70:b6:53:
8e:b4:02:39:96:fd:cd:d5:38:6b:43:4e:d8:4f:ba:b3:c2:1a:
00:54:54:55:e4:f1:8b:7f:93:d8:57:b8:4a:a7:fb:e7:32:aa:
2d:2f:02:9c:ac:27:b8:a6:b7:33:c9:27:85:97:61:ca:81:15:
67:b8:b8:18:28:2e:7e:86:3a:28:c6:d6:1f:5c:2b:1b:60:fb:
0c:b1:86:fb:3c:45:ff:2f:ac:5c:0a:43:42:c5:7a:3a:43:7e:
84:2c:61:2b:dd:41:0c:db:82:7e:b7:1e:1b:2a:58:da:16:1b:
ce:01:ce:9e:30:2b:52:c7:91:85:91:a2:10:94:b3:ff:f8:5a:
c2:6d:fa:27:21:f6:3b:ea:6d:af:5a:3e:0f:35:23:9a:8b:0f:
cc:f9:11:f0:2b:f5:4e:d6:3c:20:c2:e4:ae:42:b4:0b:25:78:
81:24:fb:a6:a7:e2:39:94:5c:79:67:91:b7:89:dd:3a:7d:79:
b2:73:13:15:56:b8:8b:d5:59:ff:e3:b9:09:40:4d:21:12:4e:
02:bc:bf:df:b1:f1:5f:15:af:1a:7f:b5:86:83:9e:f6:eb:fe:
d9:36:20:c9:7c:1c:dc:31:35:25:25:94:0f:18:be:3a:e4:ec:
8f:82:0f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:46:25 2026 by rpki-client