Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3231332e3234312e302f32342d3234203d3e203334393839.roa
File: 3138352e3231332e3234312e302f32342d3234203d3e203334393839.roa (raw, json)
Hash identifier: mQmGEEXr89HBDmkjFNZLHNK7pM62O1lg+l7f+8asfF8=
Subject key identifier: 51:0D:DF:28:39:1E:95:E1:07:28:7F:43:19:16:56:E1:D7:A8:D2:B4
Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Certificate serial: 4B93578D374E9CEFE6C947B324E1C7019D34DBB2
Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3231332e3234312e302f32342d3234203d3e203334393839.roa
Signing time: Tue 23 Jun 2026 20:44:45 +0000
ROA not before: Tue 23 Jun 2026 20:39:45 +0000
ROA not after: Tue 22 Jun 2027 20:44:45 +0000
asID: 34989
IP address blocks: 185.213.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft
rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 13:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:93:57:8d:37:4e:9c:ef:e6:c9:47:b3:24:e1:c7:01:9d:34:db:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Validity
Not Before: Jun 23 20:39:45 2026 GMT
Not After : Jun 22 20:44:45 2027 GMT
Subject: CN=510DDF28391E95E107287F43191656E1D7A8D2B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:49:f0:f3:9a:83:e6:0c:8c:e7:85:c1:51:4e:
88:ce:00:05:b7:8c:36:71:6d:a5:8a:4a:2e:fb:81:
d0:75:17:21:03:29:86:90:16:cc:50:15:8c:0d:8c:
a7:bd:5c:90:2a:2c:1f:1f:ba:58:2a:dd:6e:ce:fc:
52:b0:48:db:cf:c7:7b:b9:b9:5f:ed:f5:b9:58:2a:
49:fe:23:31:c4:a2:fe:a5:a9:2f:99:5f:df:fa:7b:
32:e9:3c:e6:6d:89:0c:e4:84:da:af:fa:63:ed:66:
dc:70:8e:0c:fb:60:5f:28:4c:e7:b2:66:16:85:94:
74:e8:87:f5:b7:43:c0:a7:54:5d:60:b7:2c:e5:40:
9a:23:55:8b:ef:59:fe:c7:0d:7a:37:14:b1:33:18:
37:a4:bf:32:9e:55:15:b2:60:7c:8c:d6:23:64:3d:
4f:f3:5c:ae:67:7c:32:bd:46:ed:93:2f:9c:0e:10:
38:a4:3d:a9:56:df:0b:e3:b0:e8:22:cb:c0:c7:9e:
d8:4b:66:3c:f1:0c:d7:75:28:c3:04:76:69:17:b4:
25:55:8b:b7:cd:0e:c4:e3:f3:ce:e2:df:78:d0:0a:
50:3a:b9:8e:41:a9:73:f2:ec:86:ee:0e:15:b1:9d:
a2:22:17:8a:a2:e1:24:c7:68:63:4c:ce:89:67:fd:
d7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:0D:DF:28:39:1E:95:E1:07:28:7F:43:19:16:56:E1:D7:A8:D2:B4
X509v3 Authority Key Identifier:
keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3231332e3234312e302f32342d3234203d3e203334393839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.241.0/24
Signature Algorithm: sha256WithRSAEncryption
48:71:5a:5d:89:51:68:a2:88:8f:41:66:02:ad:4d:d8:46:2d:
d6:a8:53:04:1e:60:c0:22:21:a1:ea:20:ce:8c:83:ca:d3:a0:
0b:5e:1a:a0:fc:d7:94:f0:5e:20:8d:35:73:23:5a:44:82:8c:
5d:75:c1:73:d6:17:38:c2:fd:ce:cb:98:b4:85:3a:c4:a2:00:
6c:51:f9:07:14:ce:f6:87:b0:c7:7f:16:07:c9:14:74:45:0c:
32:8e:bb:2a:2b:8b:bd:cf:0d:cf:19:f6:25:bd:65:fc:e1:1d:
a5:94:05:35:24:21:7a:e4:0a:65:9d:1f:1b:8a:a0:9a:59:a0:
26:9f:66:e3:32:22:92:c2:d3:57:b0:2e:60:6e:4e:53:87:e0:
a7:ef:97:f2:a3:5d:9f:2f:13:6c:82:29:73:14:9e:bc:f6:f5:
b7:c0:99:f3:97:88:3d:76:36:b1:70:2c:14:12:5e:ec:ee:b2:
8e:1d:3d:18:ac:ac:e1:ed:cc:c4:84:31:71:11:13:3d:20:33:
96:0b:fb:6c:51:dd:1b:e5:6b:fa:91:1e:93:f6:8d:1a:f7:41:
9d:3f:73:67:02:96:a0:7b:9d:d7:99:27:f2:d6:18:7a:ce:eb:
f5:e5:9d:2e:d8:3d:71:75:b4:13:ca:23:c1:61:1b:94:d4:a7:
59:ad:e3:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 21:01:54 2026 by rpki-client