Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3231332e3234332e302f32342d3234203d3e20323034393238.roa
File: 3138352e3231332e3234332e302f32342d3234203d3e20323034393238.roa (raw, json)
Hash identifier: uCL1WpQqTZHx28v635AJc2UxBy3JsNUOhCCjsYiSzdI=
Subject key identifier: 68:9B:04:A8:03:A7:DE:A2:05:B6:AF:AC:A7:38:BB:08:3C:65:CA:D0
Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Certificate serial: 299C7E494AD9CF9FF3FB1C8013C7B52DED33DFE2
Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3231332e3234332e302f32342d3234203d3e20323034393238.roa
Signing time: Thu 03 Sep 2026 08:49:32 +0000
ROA not before: Thu 03 Sep 2026 08:44:32 +0000
ROA not after: Thu 02 Sep 2027 08:49:32 +0000
asID: 204928
IP address blocks: 185.213.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft
rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:9c:7e:49:4a:d9:cf:9f:f3:fb:1c:80:13:c7:b5:2d:ed:33:df:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Validity
Not Before: Sep 3 08:44:32 2026 GMT
Not After : Sep 2 08:49:32 2027 GMT
Subject: CN=689B04A803A7DEA205B6AFACA738BB083C65CAD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b3:f8:13:7a:a5:8e:7c:8c:3b:b7:db:40:c1:
64:4d:e3:c2:a4:58:27:04:1d:a6:47:55:9e:c1:ac:
5c:31:ab:74:6d:b3:ae:e8:06:28:96:c8:92:bc:07:
d7:de:a0:02:77:43:0f:3b:96:38:f4:70:2f:49:d7:
94:9b:a4:ed:11:6b:52:cf:8c:3e:ac:f6:03:cd:fc:
14:d1:f8:11:b9:e3:c6:de:98:cc:f5:a2:0d:7a:42:
ce:66:f1:31:2c:9f:1a:4a:5f:04:35:e1:75:72:af:
1f:d9:3c:c3:24:99:69:e5:c0:d4:b4:60:00:0e:b6:
e1:53:98:46:a0:aa:9f:dd:4f:e9:6d:9b:39:d9:cf:
77:92:ed:f6:5b:79:e4:02:a7:c5:80:87:7a:63:aa:
7d:83:bd:e3:e5:5f:8e:a3:3c:44:aa:bf:41:ae:a6:
be:e3:a5:93:79:1b:6b:40:f3:58:04:00:fc:62:02:
92:a8:ad:01:ea:c6:59:fd:6e:58:f3:f4:b9:b9:a4:
1a:ef:99:78:ef:e8:9b:6a:32:0d:c5:70:9d:0d:e7:
80:bb:ce:59:32:ab:5f:2a:fc:d5:0a:7b:45:c1:cc:
d4:45:73:dc:94:e9:6d:5c:7a:8b:c4:6c:da:ed:ff:
33:1d:bd:13:fa:a2:8b:03:5d:e9:21:df:c3:06:57:
dc:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:9B:04:A8:03:A7:DE:A2:05:B6:AF:AC:A7:38:BB:08:3C:65:CA:D0
X509v3 Authority Key Identifier:
keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3231332e3234332e302f32342d3234203d3e20323034393238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.243.0/24
Signature Algorithm: sha256WithRSAEncryption
95:3b:ad:e6:38:6c:3b:57:0f:57:d2:dd:e1:02:3e:df:11:72:
26:3c:86:00:60:b4:59:fe:f7:7b:88:e0:b1:4f:91:24:91:f5:
f8:52:94:7d:ba:78:1c:46:b8:fb:c4:9b:bb:f5:5a:d2:fc:af:
fa:95:73:93:ca:cc:f1:94:9e:8b:da:65:81:4f:98:fc:71:ff:
01:c7:16:a1:63:77:bd:d7:b1:d0:5e:ad:db:41:dd:38:bd:b2:
a8:c3:5b:80:32:7c:0d:e6:cf:6e:c1:7d:45:c9:67:24:51:4e:
b3:5a:9a:d1:1c:5c:42:32:6d:b8:6f:33:9c:ba:e7:e3:23:74:
f3:72:ff:5a:ec:ce:e3:6c:56:08:2c:bf:f5:55:44:d1:79:7e:
e4:e7:39:1a:7f:cc:c0:b4:57:71:9e:10:d8:a8:dc:14:c7:ec:
44:db:0c:5e:c5:02:82:45:3b:2a:15:38:1a:9c:3e:e0:63:37:
a1:7f:70:e7:a2:c8:f4:16:f9:6e:47:5e:f3:c0:ca:b5:7a:9f:
e8:a0:72:35:70:e2:6c:73:dd:8d:2e:5d:dc:e9:f2:23:ab:77:
cc:8e:de:02:0c:40:d4:03:f3:a6:f4:a4:74:2e:01:fc:bd:56:
64:e9:16:2a:41:ec:49:f6:e8:4b:d6:db:54:83:9e:9d:00:ae:
68:96:44:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:42:01 2026 by rpki-client