Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3232392e3230302e302f32342d3234203d3e20323037303139.roa
File: 3138352e3232392e3230302e302f32342d3234203d3e20323037303139.roa (raw, json)
Hash identifier: 1bceaNlyoOp1upDNmtgefthFRPSg/dp+QwWX8BNP7X8=
Subject key identifier: C0:E5:62:49:78:8F:1B:AF:34:16:01:40:82:DC:E6:13:3B:49:F3:B2
Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Certificate serial: 609887A26807810CCFFC1C3DF02E07B175DDA285
Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3232392e3230302e302f32342d3234203d3e20323037303139.roa
Signing time: Sun 26 Apr 2026 11:24:44 +0000
ROA not before: Sun 26 Apr 2026 11:19:44 +0000
ROA not after: Sun 25 Apr 2027 11:24:44 +0000
asID: 207019
IP address blocks: 185.229.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft
rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 05:11:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:98:87:a2:68:07:81:0c:cf:fc:1c:3d:f0:2e:07:b1:75:dd:a2:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Validity
Not Before: Apr 26 11:19:44 2026 GMT
Not After : Apr 25 11:24:44 2027 GMT
Subject: CN=C0E56249788F1BAF3416014082DCE6133B49F3B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b7:2a:c2:79:21:a2:40:db:55:b0:06:8b:2d:
8a:af:7b:00:da:94:b5:93:30:b7:6d:7e:63:d8:95:
b4:b0:24:e2:b0:b6:32:ef:b6:c5:6c:b9:cf:b4:23:
80:f1:dc:9b:ac:d3:a8:c0:19:b4:4f:8a:9f:cd:86:
6b:b5:69:45:18:85:a0:d4:57:1a:a2:42:55:59:00:
22:ff:71:02:c5:ab:6d:75:b4:ee:0f:19:81:25:2f:
94:48:36:35:e2:bf:f0:4c:26:db:2c:e9:34:f0:3c:
ee:25:cb:c3:cb:55:82:9f:71:9a:23:5a:36:d5:20:
94:07:e4:bf:19:20:55:32:0a:f8:af:3a:c6:fc:53:
66:45:1e:4a:a3:d6:75:90:2b:4e:d9:5b:9f:05:7b:
06:d5:fc:25:99:b0:a3:6a:e5:b5:c9:40:b6:0a:33:
23:fd:a1:aa:ec:80:8b:04:d9:38:23:83:c7:18:27:
ad:ec:16:0f:54:36:d1:31:19:08:9f:2f:ca:76:73:
2a:b0:cc:01:aa:62:09:d4:a3:90:08:2b:0c:ad:1d:
d5:15:83:04:93:56:f9:9e:97:a8:fb:30:81:12:c2:
0e:52:9d:a2:4e:2e:a6:a2:c2:cc:9a:6d:b6:18:63:
f6:a5:6d:7e:4c:c6:66:9e:18:fa:e2:ab:b2:1b:c9:
1d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E5:62:49:78:8F:1B:AF:34:16:01:40:82:DC:E6:13:3B:49:F3:B2
X509v3 Authority Key Identifier:
keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3232392e3230302e302f32342d3234203d3e20323037303139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.200.0/24
Signature Algorithm: sha256WithRSAEncryption
55:b7:f1:04:71:92:6f:4d:90:23:1a:d6:b4:fb:64:cd:44:3c:
77:50:06:50:99:88:94:98:b3:1a:14:dd:fa:9e:ba:dc:c5:38:
4c:88:28:76:70:0e:5a:5d:28:2a:a8:ee:1f:78:42:74:1e:b6:
f7:05:6a:00:99:80:4d:18:a7:3c:3a:75:12:d1:82:92:4a:f9:
79:88:6f:68:9a:81:3c:4c:94:f8:76:91:83:c8:b5:74:b0:91:
3d:1f:17:7d:c3:1f:ef:67:60:ea:14:fd:18:d7:93:4d:f7:d6:
f6:39:b4:3f:ad:4d:2f:27:d4:93:67:8f:4b:f2:b1:5c:6e:79:
c3:27:03:bb:58:76:22:29:e5:8f:c3:61:f8:2e:4e:75:cb:76:
27:1d:c0:16:1c:a4:27:5f:6c:13:47:fc:11:16:02:f9:c4:2c:
59:e3:e9:80:a0:7c:9c:56:dd:7a:75:ce:0a:d1:56:2d:cf:e3:
d8:6c:2d:25:20:42:f9:dd:01:71:a9:da:70:8a:fc:8d:e2:e3:
e8:20:65:30:da:ab:89:ab:31:66:0f:4c:59:c4:0a:b4:7a:df:
42:37:dc:69:4e:15:48:d9:6a:ee:08:55:69:14:f4:cb:fd:7b:
58:86:49:63:26:74:16:84:ff:e7:50:90:4f:d3:db:ae:fa:f0:
0e:29:05:e6
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUYJiHomgHgQzP/Bw98C4HsXXdooUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2U4NzBiOWE3MDAzYzRmZDljNTFiZDM1NGE5ZGVmYTNm
Yjc3YjRhOTAeFw0yNjA0MjYxMTE5NDRaFw0yNzA0MjUxMTI0NDRaMDMxMTAvBgNV
BAMTKEMwRTU2MjQ5Nzg4RjFCQUYzNDE2MDE0MDgyRENFNjEzM0I0OUYzQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCytyrCeSGiQNtVsAaLLYqvewDa
lLWTMLdtfmPYlbSwJOKwtjLvtsVsuc+0I4Dx3Jus06jAGbRPip/Nhmu1aUUYhaDU
VxqiQlVZACL/cQLFq211tO4PGYElL5RINjXiv/BMJtss6TTwPO4ly8PLVYKfcZoj
WjbVIJQH5L8ZIFUyCvivOsb8U2ZFHkqj1nWQK07ZW58FewbV/CWZsKNq5bXJQLYK
MyP9oarsgIsE2Tgjg8cYJ63sFg9UNtExGQifL8p2cyqwzAGqYgnUo5AIKwytHdUV
gwSTVvmel6j7MIESwg5SnaJOLqaiwsyabbYYY/albX5MxmaeGPriq7IbyR0JAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUwOViSXiPG680FgFAgtzmEztJ87IwHwYDVR0j
BBgwFoAUPocLmnADxP2cUb01Sp3vo/t3tKkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzVkMThlODItNGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQy
Mjc5LzAvM0U4NzBCOUE3MDAzQzRGRDlDNTFCRDM1NEE5REVGQTNGQjc3QjRBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1BvY0xtbkFEeFAyY1ViMDFTcDN2b190
M3RLay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYzVkMThlODIt
NGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQyMjc5LzAvMzEzODM1MmUzMjMyMzkyZTMy
MzAzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzNzMwMzEzOS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEALnlyDANBgkqhkiG9w0BAQsFAAOCAQEAVbfxBHGSb02QIxrWtPtkzUQ8d1AG
UJmIlJizGhTd+p663MU4TIgodnAOWl0oKqjuH3hCdB629wVqAJmATRinPDp1EtGC
kkr5eYhvaJqBPEyU+HaRg8i1dLCRPR8XfcMf72dg6hT9GNeTTffW9jm0P61NLyfU
k2ePS/KxXG55wycDu1h2Iinlj8Nh+C5Odct2Jx3AFhykJ19sE0f8ERYC+cQsWePp
gKB8nFbdenXOCtFWLc/j2GwtJSBC+d0BcanacIr8jeLj6CBlMNqriasxZg9MWcQK
tHrfQjfcaU4VSNlq7ghVaRT0y/17WIZJYyZ0FoT/51CQT9PbrvrwDikF5g==
-----END CERTIFICATE-----
Generated at Mon Apr 27 20:59:28 2026 by rpki-client