Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3231332e3234312e302f32342d3234203d3e20323031393037.roa
File: 3138352e3231332e3234312e302f32342d3234203d3e20323031393037.roa (raw, json)
Hash identifier: H+hJVSb3SoCTrrahZtJtGrpdA3V7alBDYoRJDY20rZ8=
Subject key identifier: 50:63:6A:0F:34:CB:C4:BD:B7:61:FB:24:51:06:7A:EF:24:78:52:13
Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Certificate serial: 2A5B31394F6BDBBFF1D12475CBA322CC77589ED8
Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3231332e3234312e302f32342d3234203d3e20323031393037.roa
Signing time: Wed 02 Sep 2026 07:57:43 +0000
ROA not before: Wed 02 Sep 2026 07:52:43 +0000
ROA not after: Wed 01 Sep 2027 07:57:43 +0000
asID: 201907
IP address blocks: 185.213.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft
rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:5b:31:39:4f:6b:db:bf:f1:d1:24:75:cb:a3:22:cc:77:58:9e:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Validity
Not Before: Sep 2 07:52:43 2026 GMT
Not After : Sep 1 07:57:43 2027 GMT
Subject: CN=50636A0F34CBC4BDB761FB2451067AEF24785213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f9:a8:71:1c:4b:5e:28:11:e5:30:b0:05:ef:
ff:2f:ac:cc:1b:54:74:8a:35:19:f4:f1:aa:85:84:
d0:a4:ae:78:b6:5f:a7:d9:ac:dd:76:46:fa:f6:c4:
cf:5f:60:0b:de:72:80:86:bf:9a:52:6c:e1:17:67:
a8:4d:db:01:61:db:b0:b9:dd:3e:fb:e7:80:ef:7c:
d6:75:72:b2:29:e3:c8:77:cc:f5:b8:07:43:90:a1:
91:0f:d0:65:d0:c4:38:38:88:17:ea:d3:64:bf:02:
5c:4e:d4:86:70:f0:94:65:a1:aa:97:b3:3e:bc:e2:
58:e6:cc:ff:75:9b:0b:12:7b:6b:2c:33:10:26:4c:
0c:cc:d7:ac:07:3c:42:5c:f1:2f:62:4f:94:4c:41:
f1:bb:c4:4d:8c:3b:fc:3f:d5:ad:9e:a9:8a:1c:6f:
35:27:2d:80:0d:4a:b0:4e:04:b3:0f:98:a5:db:6a:
f9:38:28:9f:93:ee:81:d9:1d:68:86:f1:2b:c8:96:
23:df:44:95:04:3c:16:00:cc:d0:27:2c:00:41:a5:
9b:d3:6c:71:13:77:67:e7:dc:a3:34:0c:27:0c:f7:
02:9e:17:a0:72:87:59:cc:7e:8c:7d:d4:32:1c:f0:
0d:f5:ed:e8:42:c3:ff:ac:27:85:91:e4:8a:eb:e5:
86:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:63:6A:0F:34:CB:C4:BD:B7:61:FB:24:51:06:7A:EF:24:78:52:13
X509v3 Authority Key Identifier:
keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3231332e3234312e302f32342d3234203d3e20323031393037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.241.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:82:4c:0b:20:6f:c9:fb:00:4a:10:cf:2d:a1:b7:7b:af:5e:
dc:b5:d3:1a:43:62:9b:43:64:c0:b2:10:fc:72:ec:b7:d0:e8:
8f:cf:b3:43:c0:a3:9f:84:76:a1:b1:fa:64:01:98:f4:b5:94:
fb:aa:78:20:13:7e:80:b7:e2:e7:84:4f:e7:6c:8f:84:e2:00:
5c:ee:3f:80:ad:77:f1:b3:0f:19:4e:42:55:ff:01:64:e1:84:
25:61:13:f5:8e:76:13:af:88:19:7c:84:b0:a1:19:a3:bf:77:
68:dc:01:b0:57:de:1d:a2:a2:44:6e:8d:da:4e:18:34:e7:03:
83:69:0e:13:e5:a6:88:1d:47:ee:59:e2:6d:d5:b3:4d:28:27:
82:5d:d8:b1:ac:b4:1c:e7:62:c4:f8:bb:21:18:e5:26:16:41:
23:a9:81:80:84:0c:a8:3f:68:c1:88:0c:f1:e9:c9:7a:12:af:
71:fd:7b:32:e8:eb:12:fa:54:b6:05:e8:18:e5:f7:a8:02:5b:
8b:ae:e9:9d:64:b7:c3:36:dd:5b:39:7c:70:48:c7:fb:15:7a:
0d:5f:59:bf:72:b1:65:d4:14:fc:76:7f:c2:74:47:80:25:ea:
46:03:aa:49:74:d1:e2:07:b5:58:04:e4:ee:62:16:66:9e:49:
41:3e:44:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:59:29 2026 by rpki-client