Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3231332e3234322e302f32342d3234203d3e20383334.roa
File: 3138352e3231332e3234322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: M5wbVtJafF/FVhlMNRQX786VF8/2TDhV8E4iR6STWm8=
Subject key identifier: 18:11:67:3E:8D:EE:21:AD:15:F9:38:6B:38:1D:24:F6:3C:EA:72:C8
Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Certificate serial: 269D1FAD50DA03C583C1C380F008C5090C7E29E5
Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3231332e3234322e302f32342d3234203d3e20383334.roa
Signing time: Tue 10 Nov 2026 00:03:03 +0000
ROA not before: Mon 09 Nov 2026 23:58:03 +0000
ROA not after: Tue 09 Nov 2027 00:03:03 +0000
asID: 834
IP address blocks: 185.213.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft
rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:27:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:9d:1f:ad:50:da:03:c5:83:c1:c3:80:f0:08:c5:09:0c:7e:29:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Validity
Not Before: Nov 9 23:58:03 2026 GMT
Not After : Nov 9 00:03:03 2027 GMT
Subject: CN=1811673E8DEE21AD15F9386B381D24F63CEA72C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ac:86:a9:95:b0:81:83:88:58:00:c8:d8:98:
b5:5c:c7:a7:56:21:3b:55:be:75:14:95:c4:77:79:
47:0f:17:26:93:8c:e1:de:77:08:0f:14:01:e0:15:
bb:6d:0b:20:8f:34:e3:06:87:61:89:a7:20:af:1b:
a4:7d:41:57:0f:69:79:fa:9a:33:50:f6:90:a0:ff:
25:50:f7:17:bf:fa:a1:13:a2:9f:4e:1c:a9:99:fe:
b0:0e:a4:7f:6f:cc:58:48:7b:70:21:94:91:2f:6a:
f3:a9:8a:6a:03:1e:76:a8:61:65:c5:ff:3b:dc:ab:
55:33:82:8a:a6:13:4d:8d:84:1a:22:69:98:18:9d:
bc:e2:06:6c:3c:9f:54:3b:c3:8b:60:6e:af:39:db:
51:bf:29:e8:bd:67:97:b7:7c:4c:37:fa:24:33:60:
72:fb:ef:65:8a:d1:72:0d:df:6c:8b:7e:88:9e:52:
47:09:ab:fe:2a:bd:9f:36:12:f3:b9:f0:de:c9:fc:
fb:8a:75:d6:44:05:11:92:e5:87:d4:22:e9:50:87:
5f:27:c3:ca:0d:24:a4:db:91:51:69:85:04:0e:06:
1f:88:61:76:3a:7c:71:f0:97:15:f6:f8:99:9a:ab:
08:dc:86:82:79:e4:a9:97:34:65:28:4c:ad:64:14:
62:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:11:67:3E:8D:EE:21:AD:15:F9:38:6B:38:1D:24:F6:3C:EA:72:C8
X509v3 Authority Key Identifier:
keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3231332e3234322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.242.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:0c:f6:24:af:38:04:76:fa:b5:48:27:19:db:e1:29:72:b2:
3d:9f:51:c0:11:4f:83:f2:39:b8:1e:4a:c2:75:a9:18:82:df:
41:39:1f:c9:ac:38:65:b2:0a:af:08:94:ee:9e:df:9d:90:68:
6a:ea:7d:a1:31:ef:df:94:cc:d5:e1:ec:a4:d6:f4:25:70:ab:
42:61:e9:e2:bf:07:65:dc:76:84:23:07:f7:1e:7f:72:c4:0f:
b3:f3:47:5f:57:33:da:dc:d9:cb:6f:ab:bc:27:c0:3e:bc:57:
bb:dd:79:14:db:fc:5c:33:f5:f9:c7:09:51:34:b8:b1:32:d5:
94:9b:fd:67:30:fa:4d:90:a6:75:ee:92:32:38:39:38:e3:da:
17:22:ea:cb:f2:3a:bd:ff:54:a6:f9:8c:c3:3f:c8:b1:3e:c3:
91:fe:f9:da:64:f8:35:dc:9d:d7:94:c1:c6:27:8f:a3:c5:8d:
07:a2:ef:b2:12:bb:da:3f:2c:07:f0:0d:c8:74:d8:99:56:57:
e3:65:a7:c3:f5:14:c9:6f:e2:e3:88:f7:85:2d:87:25:59:cd:
43:0c:19:d0:ff:4e:94:eb:88:cd:97:5f:ba:64:61:f7:30:54:
bf:c6:22:cb:93:1f:16:7d:06:7f:62:c1:4f:24:7d:52:f3:9d:
49:63:13:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:05:29 2026 by rpki-client