Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3231332e3234312e302f32342d3234203d3e203230343733.roa
File: 3138352e3231332e3234312e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier: ME9v7cOeLgqdWL4SWS9m0HsfFEm4m9vPx70KgvsaHKM=
Subject key identifier: D8:9C:17:20:59:1F:EC:BE:FA:C3:D4:BF:02:4E:A5:AF:4D:51:B2:DF
Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Certificate serial: 163BEF5FBB399A3C2F30E34BFBD3650A138DE7AB
Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3231332e3234312e302f32342d3234203d3e203230343733.roa
Signing time: Wed 02 Sep 2026 07:57:43 +0000
ROA not before: Wed 02 Sep 2026 07:52:43 +0000
ROA not after: Wed 01 Sep 2027 07:57:43 +0000
asID: 20473
IP address blocks: 185.213.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft
rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:3b:ef:5f:bb:39:9a:3c:2f:30:e3:4b:fb:d3:65:0a:13:8d:e7:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Validity
Not Before: Sep 2 07:52:43 2026 GMT
Not After : Sep 1 07:57:43 2027 GMT
Subject: CN=D89C1720591FECBEFAC3D4BF024EA5AF4D51B2DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:aa:57:59:69:e6:03:91:0c:8b:f3:28:bc:7a:
3d:5c:a9:ca:77:d2:b4:a3:8f:63:7c:1a:e3:c1:9b:
41:04:3e:28:45:ea:83:ee:97:e2:2c:a3:bf:66:f9:
55:b3:27:57:18:b6:93:d4:06:26:93:f5:fe:12:4f:
8b:dd:f6:22:57:20:9c:ea:18:45:9b:06:25:43:a3:
7d:b6:f7:30:fb:a4:61:87:8d:c2:a5:15:94:9b:5c:
57:f7:cb:75:2a:24:b1:23:07:82:b9:6c:15:df:69:
24:af:e6:38:b4:5c:92:85:5c:8d:5b:58:7e:f8:00:
c1:7a:5e:58:c2:ef:31:e8:9a:89:4b:33:e8:42:0d:
f2:54:e2:f3:d8:e8:5c:bc:1c:60:19:cb:73:79:e2:
65:27:a9:f2:3b:a2:ea:d7:bd:5b:d9:4b:7d:a0:30:
5e:7b:bf:46:c0:73:6c:c0:c8:53:ff:93:d5:bb:76:
bd:bc:b5:fa:cb:09:46:c2:ed:f9:97:c2:75:46:c8:
3c:35:55:38:c6:3b:61:21:23:c2:a9:00:27:bf:cd:
5a:74:12:7c:c5:73:e3:3e:65:f6:02:f0:55:1d:76:
aa:c9:0f:43:4b:0e:48:f7:05:01:a9:7c:2f:01:42:
11:61:35:73:92:37:ad:e4:c3:f7:d4:a2:b2:25:d9:
79:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:9C:17:20:59:1F:EC:BE:FA:C3:D4:BF:02:4E:A5:AF:4D:51:B2:DF
X509v3 Authority Key Identifier:
keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3231332e3234312e302f32342d3234203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.241.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:3c:14:36:40:95:e6:c5:12:25:24:00:d4:6f:39:f1:dd:a2:
47:0e:7a:74:8b:38:a1:a8:56:1b:b0:a2:03:f5:19:8e:07:25:
21:ae:31:b7:1c:86:37:09:a0:84:01:94:63:3e:b8:be:a4:c8:
72:90:5f:40:eb:c0:bf:ee:42:6e:43:ce:a2:cc:b0:f5:a1:85:
99:2d:da:dd:4f:48:30:bb:6b:94:3c:89:3d:c8:6f:b1:13:a3:
95:8e:49:2c:14:c1:e9:0a:5e:85:5d:99:13:3c:9f:c4:da:b9:
eb:97:02:66:b5:6b:b2:c0:b5:35:70:e3:59:b6:92:d0:95:62:
69:be:e5:05:32:aa:b0:1d:69:4c:f6:27:a9:f9:14:e3:58:49:
92:62:d5:b0:55:e7:9f:13:e4:0c:ca:64:f6:a5:d9:80:3e:83:
f7:77:d1:59:4b:3d:bc:3f:de:a0:1e:8a:91:ac:42:17:99:c8:
bf:da:eb:af:14:5e:90:9d:b8:99:e5:a7:41:f2:c4:16:31:f6:
ce:ad:40:01:35:da:d7:cc:8c:95:47:e5:b0:ed:2e:41:c6:b6:
d6:4a:d0:22:f7:6c:c3:c2:c5:96:e4:9a:05:c7:05:71:a4:5f:
ae:58:cb:a5:3a:0c:ef:8c:b8:a4:4e:42:14:f3:3c:57:65:8d:
84:86:c9:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 00:48:50 2026 by rpki-client