Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3232392e3230302e302f32342d3234203d3e203235313938.roa
File: 3138352e3232392e3230302e302f32342d3234203d3e203235313938.roa (raw, json)
Hash identifier: TY0IBnEGyC+d5Or7tdvKYxnLm96FV392uvwD5Jbdhbw=
Subject key identifier: 57:E8:F9:F0:CB:BF:F8:06:73:E2:AF:39:85:B0:46:84:2B:6F:1A:D4
Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Certificate serial: 4C59046603689F7FCC0A0A08ED58102B195507DB
Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3232392e3230302e302f32342d3234203d3e203235313938.roa
Signing time: Fri 26 Jun 2026 13:59:09 +0000
ROA not before: Fri 26 Jun 2026 13:54:09 +0000
ROA not after: Fri 25 Jun 2027 13:59:09 +0000
asID: 25198
IP address blocks: 185.229.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft
rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 15:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:59:04:66:03:68:9f:7f:cc:0a:0a:08:ed:58:10:2b:19:55:07:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Validity
Not Before: Jun 26 13:54:09 2026 GMT
Not After : Jun 25 13:59:09 2027 GMT
Subject: CN=57E8F9F0CBBFF80673E2AF3985B046842B6F1AD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3e:4e:31:5d:c8:71:26:93:06:ab:9f:b1:b0:
93:bb:d5:70:b4:d3:78:ac:5c:76:e0:af:9f:4a:cd:
c4:d5:38:ed:9d:ef:68:44:fc:b5:81:45:55:72:14:
ba:1f:e2:72:d9:d4:6f:b0:93:67:df:bd:f7:ca:8f:
05:1f:c0:9a:7a:e8:d3:64:c0:48:a1:4d:88:38:d9:
fb:d6:f3:0f:77:59:f6:a1:90:84:d3:43:3a:b8:c4:
05:75:af:fc:ae:11:e8:07:1b:17:93:24:a8:85:e3:
c4:66:53:ce:06:6a:5c:52:6c:82:ae:d1:08:6b:09:
72:3b:8d:d5:21:38:cf:9e:9b:96:2a:ed:c0:74:f0:
b3:05:4b:4f:33:c6:15:03:ee:cc:56:41:88:78:b2:
d0:a0:9e:db:9b:17:4a:33:59:89:6d:6b:91:7b:1b:
52:67:ab:bb:e5:7a:ce:c9:59:1b:98:0f:7e:df:72:
4f:5c:88:aa:7f:86:fc:95:99:e0:10:9b:ee:13:86:
0e:4d:08:0f:01:2e:4f:92:23:3d:ef:a5:97:ca:43:
ce:0d:9a:0b:44:2b:9b:16:5f:0e:89:35:bb:34:b7:
54:16:ee:e0:98:56:73:98:b6:93:65:5f:2c:b1:56:
9c:a2:13:4a:e9:d9:34:81:7e:21:bf:f6:b6:73:1e:
97:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:E8:F9:F0:CB:BF:F8:06:73:E2:AF:39:85:B0:46:84:2B:6F:1A:D4
X509v3 Authority Key Identifier:
keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3232392e3230302e302f32342d3234203d3e203235313938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.200.0/24
Signature Algorithm: sha256WithRSAEncryption
81:bf:8f:0a:1a:8d:a1:a4:ea:d3:11:3e:21:63:b5:33:e3:64:
25:34:51:ba:74:67:29:98:c7:82:29:f3:20:82:17:47:ff:70:
98:a1:8a:90:84:e0:5f:9a:ac:ad:6c:c7:9c:f1:84:f8:4a:7f:
14:33:94:06:d3:ba:cc:5c:92:59:2a:19:7c:de:3d:79:87:d7:
6d:3c:1a:c6:05:cc:a7:88:f9:ec:91:df:7f:dd:38:fe:c8:ff:
32:49:bb:e2:36:69:08:90:da:bf:6a:ca:7f:e3:c1:26:7f:e8:
c4:c0:22:43:9a:b1:93:0b:c3:50:f1:e8:2b:50:bd:e7:dd:42:
5d:ba:b3:01:b7:49:7d:07:86:64:cc:03:58:18:2d:07:9c:61:
96:60:d4:0a:8d:4d:28:b2:0e:e7:77:fd:4f:f1:96:b9:14:86:
1c:a0:dd:33:a0:2c:61:dd:6e:7a:99:be:31:98:c3:c6:92:3b:
30:9c:e9:62:2c:3b:88:08:e8:7f:62:1b:77:a9:dc:bd:26:dd:
53:93:1d:71:90:ed:c2:4b:6b:67:d6:4c:5e:0a:a3:0c:62:a1:
41:a6:b7:26:db:f1:e3:4c:35:74:10:ff:27:7c:8d:78:14:2b:
f2:9c:55:08:7f:16:22:55:02:4b:0a:3e:6b:cd:83:e3:55:12:
8a:d0:a8:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:37:25 2026 by rpki-client