Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3231332e3234312e302f32342d3234203d3e20313938393639.roa
File: 3138352e3231332e3234312e302f32342d3234203d3e20313938393639.roa (raw, json)
Hash identifier: arMan30Pwjm+vSmHPbVurL3FVQfk93jH/QNSshjzWhE=
Subject key identifier: 93:75:72:BE:59:D1:E4:08:91:F0:48:08:D8:4B:58:07:64:AA:F1:76
Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Certificate serial: 03D9B3DDCE6F0B6F7A92B1F50479C635E430B1C1
Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3231332e3234312e302f32342d3234203d3e20313938393639.roa
Signing time: Mon 26 Oct 2026 15:02:58 +0000
ROA not before: Mon 26 Oct 2026 14:57:58 +0000
ROA not after: Mon 25 Oct 2027 15:02:58 +0000
asID: 198969
IP address blocks: 185.213.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft
rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 16:18:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:d9:b3:dd:ce:6f:0b:6f:7a:92:b1:f5:04:79:c6:35:e4:30:b1:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Validity
Not Before: Oct 26 14:57:58 2026 GMT
Not After : Oct 25 15:02:58 2027 GMT
Subject: CN=937572BE59D1E40891F04808D84B580764AAF176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:8c:d4:87:c6:e9:62:f1:06:ff:c8:0f:f5:18:
62:af:94:a9:29:e1:24:f8:43:f9:43:cd:bf:2c:76:
93:67:3a:63:57:d0:37:4c:e4:22:16:d2:56:81:f4:
69:51:ac:13:e2:98:b0:fc:62:a0:f6:ed:af:35:3b:
04:ab:1f:f7:b3:85:5e:fb:c5:83:85:7f:1a:c8:30:
a7:7f:73:ef:4b:dc:9c:32:7e:af:78:80:69:63:b9:
1e:0d:91:ec:33:f7:95:c7:a3:ba:60:8e:12:d0:59:
5d:d5:1a:98:a6:e6:bb:c9:0a:fd:f0:da:3b:b3:32:
be:e8:98:0c:fa:fa:a2:5a:e4:17:3a:08:7e:0d:c6:
69:bc:59:55:9e:e2:fe:b2:bd:5d:af:9b:73:fd:e6:
33:f8:b9:c9:d5:bc:fe:36:2f:03:0c:99:fd:b9:40:
cd:7c:e8:17:47:43:b8:ec:f7:a9:e4:d7:b1:8d:1e:
82:21:65:18:e8:5f:99:29:c6:1d:dd:c7:28:ef:1e:
bd:dc:93:95:1e:fe:e4:ce:28:51:fe:8c:87:86:20:
95:28:e3:6f:f6:10:c4:ba:8c:63:2e:cf:8e:c7:23:
59:6a:6f:21:ab:61:48:7a:11:e1:36:ca:fa:10:a5:
df:bc:51:21:a1:d1:aa:9e:93:d1:02:96:d9:f0:14:
6b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:75:72:BE:59:D1:E4:08:91:F0:48:08:D8:4B:58:07:64:AA:F1:76
X509v3 Authority Key Identifier:
keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3231332e3234312e302f32342d3234203d3e20313938393639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.241.0/24
Signature Algorithm: sha256WithRSAEncryption
74:8f:a4:f7:ea:5a:44:f0:3c:00:c0:15:be:21:c5:24:5f:f5:
e4:06:7d:aa:bd:b3:20:ab:21:fb:28:e1:48:07:48:8b:fc:17:
1c:66:25:cc:ad:de:c3:f2:6c:7a:48:57:d6:18:4e:3c:f3:18:
0a:2b:88:b1:b5:03:b2:4b:75:09:67:11:d7:ac:f3:e0:49:8a:
da:a7:d9:d9:73:88:ad:f3:1e:5d:7c:00:10:ac:dc:26:d6:96:
7b:2a:08:9d:5f:19:ec:ec:73:68:ab:24:e9:6a:36:96:df:fc:
b6:26:69:f5:77:bf:96:01:ec:ef:cc:5d:87:e6:1f:b7:27:e7:
31:30:9f:1a:e1:7c:a6:5e:08:19:da:de:6b:6d:f8:8f:3d:5d:
2b:e8:b5:be:9e:bc:d5:55:1f:ba:e0:48:7e:18:b9:61:a8:82:
c8:bb:c2:d1:2d:c5:d6:54:fd:64:0d:98:d6:3f:bc:53:52:a0:
dd:27:5b:f1:5c:7b:32:99:9f:39:f4:5f:bb:87:f6:5e:c6:6e:
49:d2:bb:b9:55:23:2c:5f:c5:92:1b:c9:d7:23:67:1f:9f:e8:
a3:bb:0f:74:4f:fb:32:bb:3d:84:a4:d9:c5:ae:8c:34:82:3d:
b5:4e:5d:7c:24:6a:7a:17:d1:25:50:ea:8d:ca:f2:aa:2c:55:
0a:65:65:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:14:23 2026 by rpki-client