Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3231332e3234312e302f32342d3234203d3e20333935343730.roa
File: 3138352e3231332e3234312e302f32342d3234203d3e20333935343730.roa (raw, json)
Hash identifier: YhzV2KtcuLsnnub8luasZeZrUhyCrUUtZDrQmh3b0AM=
Subject key identifier: CF:DE:CB:86:B1:D0:B4:85:2A:1F:A3:21:A1:18:65:24:0B:A6:AC:57
Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Certificate serial: 40460C353C5436FB27CE81C1A739B1B2B29B714A
Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3231332e3234312e302f32342d3234203d3e20333935343730.roa
Signing time: Tue 21 Apr 2026 08:25:27 +0000
ROA not before: Tue 21 Apr 2026 08:20:27 +0000
ROA not after: Tue 20 Apr 2027 08:25:27 +0000
asID: 395470
IP address blocks: 185.213.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft
rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 05:11:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:46:0c:35:3c:54:36:fb:27:ce:81:c1:a7:39:b1:b2:b2:9b:71:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Validity
Not Before: Apr 21 08:20:27 2026 GMT
Not After : Apr 20 08:25:27 2027 GMT
Subject: CN=CFDECB86B1D0B4852A1FA321A11865240BA6AC57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d7:f3:43:2c:06:96:3e:e4:42:0b:5b:24:53:
23:7e:87:b0:ca:a4:3b:33:a5:cb:51:0c:6d:46:ba:
2d:02:c9:ae:fb:45:11:1e:70:92:2a:c0:de:ff:5d:
69:8e:98:65:f1:4c:ed:cb:45:02:1c:be:44:c2:a1:
72:8e:3a:4d:ef:2b:96:70:6a:82:05:55:57:d6:91:
28:35:79:43:ec:04:17:28:ae:10:4e:df:7f:a0:a7:
6b:b1:5c:2f:09:e4:99:7a:0f:5c:11:78:ae:2a:3e:
97:35:f3:ac:f6:f6:87:cc:0a:25:8f:07:e2:ad:0f:
d1:ec:cb:d2:5a:23:24:74:69:eb:54:ab:6c:82:84:
f7:96:45:5a:c2:87:42:84:8d:e7:4d:e1:1d:c4:54:
76:11:87:55:c2:22:fe:0f:c1:08:66:1c:ef:95:bf:
63:c0:f1:45:25:15:5b:44:7f:5c:67:e7:43:6f:41:
fe:a1:c4:05:d7:15:d9:b8:70:05:fc:ec:a2:fa:89:
a5:31:6f:af:cf:fe:a4:64:a4:ae:44:45:2b:50:94:
62:27:24:fb:49:2e:e2:27:25:aa:70:cd:30:6c:12:
c4:91:39:51:6f:77:03:5a:e4:cf:0c:46:04:ff:3e:
79:ae:89:a7:fb:8e:54:bd:2b:dd:98:f7:04:c8:4f:
e8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:DE:CB:86:B1:D0:B4:85:2A:1F:A3:21:A1:18:65:24:0B:A6:AC:57
X509v3 Authority Key Identifier:
keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3231332e3234312e302f32342d3234203d3e20333935343730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.241.0/24
Signature Algorithm: sha256WithRSAEncryption
11:74:77:e2:f0:a3:39:b2:9f:29:17:5a:54:be:6f:05:79:da:
0e:96:0b:1f:5c:27:8c:32:c7:d4:ce:cc:21:e7:c4:c8:fb:02:
32:d7:84:f1:2b:28:c0:f0:c5:33:a7:df:35:10:76:62:c2:d4:
66:e6:b2:bb:9c:49:c3:37:29:19:16:eb:f7:6c:55:0b:63:78:
03:5c:c0:08:2a:19:09:7e:77:97:56:39:d0:cf:c8:a3:4d:71:
82:6f:bb:2e:bf:38:5b:88:70:e9:9f:2a:86:21:10:e4:b6:c5:
4b:ab:5e:e8:6d:c8:e2:ea:02:9d:34:ba:97:31:e8:b3:6d:57:
aa:f9:ca:00:4c:c0:c3:98:72:51:27:de:f8:aa:ca:8b:90:22:
84:4f:bd:71:60:2e:90:c6:ba:3b:67:b4:45:ff:39:be:0d:dd:
e7:be:05:4d:94:8c:0e:cb:4e:38:81:f8:8a:05:d6:3f:1e:21:
3b:2f:ed:10:18:d9:8a:57:02:4f:a5:d0:f2:76:73:e6:7b:28:
8f:07:3e:5b:72:ed:ff:fb:f7:be:e6:e0:08:4b:ce:98:d3:b6:
6f:0f:51:43:94:36:9a:70:4f:38:60:2f:9b:a4:11:48:e6:b7:
aa:e0:e7:be:62:4e:b1:cc:1f:f7:c5:80:17:27:33:49:96:cd:
4b:5d:eb:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 20:59:28 2026 by rpki-client