Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3231332e3234312e302f32342d3234203d3e203235313938.roa
File: 3138352e3231332e3234312e302f32342d3234203d3e203235313938.roa (raw, json)
Hash identifier: /VSRAbQWRdnISeNPCesTwz43zE7GsIAapcnfDbJ/Ckc=
Subject key identifier: A7:69:2A:CC:95:96:D0:01:6C:87:C7:E9:66:7C:CD:43:AC:E2:A7:B4
Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Certificate serial: 07B93CC40BB5283779C4208639E9DD404D11D064
Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3231332e3234312e302f32342d3234203d3e203235313938.roa
Signing time: Sat 25 Jul 2026 12:51:38 +0000
ROA not before: Sat 25 Jul 2026 12:46:38 +0000
ROA not after: Sat 24 Jul 2027 12:51:38 +0000
asID: 25198
IP address blocks: 185.213.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft
rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 17:48:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:b9:3c:c4:0b:b5:28:37:79:c4:20:86:39:e9:dd:40:4d:11:d0:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Validity
Not Before: Jul 25 12:46:38 2026 GMT
Not After : Jul 24 12:51:38 2027 GMT
Subject: CN=A7692ACC9596D0016C87C7E9667CCD43ACE2A7B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:96:29:2a:48:66:66:eb:de:57:38:e4:71:02:
a6:16:7b:ed:04:d1:51:a4:b8:8e:65:a1:7c:8f:93:
22:10:43:9c:e0:33:ab:9d:d7:67:23:fd:e3:65:02:
0b:aa:be:69:0f:7d:73:18:f0:83:11:18:d2:51:3f:
a6:40:17:93:7b:17:bd:3c:6b:b7:63:0b:67:8e:2e:
79:74:eb:c6:d9:71:7e:1f:e8:36:38:46:fd:83:57:
14:ba:07:f0:81:1a:86:66:90:87:d6:c4:1e:88:0f:
93:f7:27:f3:90:f2:26:81:b8:cc:d4:50:6b:20:f8:
54:0f:cf:a1:d5:49:6e:b2:77:66:4b:db:77:4c:3a:
39:fd:2d:93:a4:66:ad:a9:53:8c:a2:d3:5e:81:99:
8e:08:b7:95:b3:2d:77:87:65:91:7e:a5:bc:75:05:
31:ba:e3:02:60:06:07:d4:84:53:2a:e9:d0:06:cf:
07:b5:79:4f:8f:68:cc:9b:1e:8a:c1:67:cd:74:bd:
d7:70:7e:43:67:7e:1d:33:46:64:ca:cd:b7:36:46:
33:48:c2:7c:4b:41:e8:cb:88:e1:a3:56:2f:0c:f4:
52:6b:30:53:a6:bf:ed:94:07:ca:5f:4e:da:81:e1:
8c:ac:19:ff:32:59:eb:fe:ae:c1:d6:b0:f1:a1:ad:
2b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:69:2A:CC:95:96:D0:01:6C:87:C7:E9:66:7C:CD:43:AC:E2:A7:B4
X509v3 Authority Key Identifier:
keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3231332e3234312e302f32342d3234203d3e203235313938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.241.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:02:2d:7d:93:b9:9e:f9:c8:fb:5b:81:9e:32:e5:bb:fd:a9:
2a:29:4a:c6:72:4c:98:45:38:c8:81:d5:b0:5b:28:aa:be:54:
3d:a6:e4:b8:34:90:0e:5c:aa:23:6b:26:df:51:b8:81:b3:c0:
7c:2b:bc:d1:d5:87:07:f2:30:c5:bb:40:f3:81:09:83:13:11:
41:58:fa:09:60:7f:5f:6f:c3:99:ed:aa:a7:e1:68:6e:6c:dd:
0d:0f:23:a9:06:52:a1:ad:54:38:95:28:29:11:cf:87:c4:6b:
7a:87:d6:58:89:b7:8e:84:66:3e:25:ef:d5:c0:47:27:be:35:
18:fc:50:58:30:f1:2d:37:7d:a3:6a:f6:7d:71:ae:a8:22:17:
99:5d:f6:4f:72:ef:80:02:60:4a:a4:1b:37:a4:d8:49:50:65:
dc:a4:32:c7:92:d0:97:de:21:ad:e2:be:61:bd:88:3e:14:45:
61:33:3c:08:66:8a:18:b3:09:fd:03:9f:4f:81:1b:29:db:6c:
db:5b:53:69:2c:ff:45:26:ee:6e:08:58:27:e4:c4:c3:60:9d:
ae:dc:c6:12:95:90:15:99:3e:dd:0d:b1:18:22:92:ce:d3:81:
22:6e:54:b6:18:28:0e:3c:94:cb:9a:66:f0:da:a6:26:d9:8e:
1a:4f:1a:21
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUB7k8xAu1KDd5xCCGOendQE0R0GQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2U4NzBiOWE3MDAzYzRmZDljNTFiZDM1NGE5ZGVmYTNm
Yjc3YjRhOTAeFw0yNjA3MjUxMjQ2MzhaFw0yNzA3MjQxMjUxMzhaMDMxMTAvBgNV
BAMTKEE3NjkyQUNDOTU5NkQwMDE2Qzg3QzdFOTY2N0NDRDQzQUNFMkE3QjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCilikqSGZm695XOORxAqYWe+0E
0VGkuI5loXyPkyIQQ5zgM6ud12cj/eNlAguqvmkPfXMY8IMRGNJRP6ZAF5N7F708
a7djC2eOLnl068bZcX4f6DY4Rv2DVxS6B/CBGoZmkIfWxB6ID5P3J/OQ8iaBuMzU
UGsg+FQPz6HVSW6yd2ZL23dMOjn9LZOkZq2pU4yi016BmY4It5WzLXeHZZF+pbx1
BTG64wJgBgfUhFMq6dAGzwe1eU+PaMybHorBZ810vddwfkNnfh0zRmTKzbc2RjNI
wnxLQejLiOGjVi8M9FJrMFOmv+2UB8pfTtqB4YysGf8yWev+rsHWsPGhrSsvAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUp2kqzJWW0AFsh8fpZnzNQ6zip7QwHwYDVR0j
BBgwFoAUPocLmnADxP2cUb01Sp3vo/t3tKkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzVkMThlODItNGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQy
Mjc5LzAvM0U4NzBCOUE3MDAzQzRGRDlDNTFCRDM1NEE5REVGQTNGQjc3QjRBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1BvY0xtbkFEeFAyY1ViMDFTcDN2b190
M3RLay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYzVkMThlODIt
NGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQyMjc5LzAvMzEzODM1MmUzMjMxMzMyZTMy
MzQzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzUzMTM5Mzgucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAC51fEwDQYJKoZIhvcNAQELBQADggEBAMMCLX2TuZ75yPtbgZ4y5bv9qSopSsZy
TJhFOMiB1bBbKKq+VD2m5Lg0kA5cqiNrJt9RuIGzwHwrvNHVhwfyMMW7QPOBCYMT
EUFY+glgf19vw5ntqqfhaG5s3Q0PI6kGUqGtVDiVKCkRz4fEa3qH1liJt46EZj4l
79XARye+NRj8UFgw8S03faNq9n1xrqgiF5ld9k9y74ACYEqkGzek2ElQZdykMseS
0JfeIa3ivmG9iD4URWEzPAhmihizCf0Dn0+BGynbbNtbU2ks/0Um7m4IWCfkxMNg
na7cxhKVkBWZPt0NsRgiks7TgSJuVLYYKA48lMuaZvDapibZjhpPGiE=
-----END CERTIFICATE-----
Generated at Mon Jul 27 09:25:03 2026 by rpki-client