Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3232392e3230302e302f32342d3234203d3e20383334.roa
File: 3138352e3232392e3230302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: GeFFzvt6Q/zjQpJ8DLO3Ri2bMdnOM5XsQZvzfBI3bRA=
Subject key identifier: B8:78:39:AC:4D:09:7D:4E:96:22:1B:FC:F4:19:FC:7C:D3:55:3B:4C
Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Certificate serial: 475FBF4592DE13FBD98CFB76967118E44B40D319
Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3232392e3230302e302f32342d3234203d3e20383334.roa
Signing time: Sun 26 Jul 2026 13:56:30 +0000
ROA not before: Sun 26 Jul 2026 13:51:30 +0000
ROA not after: Sun 25 Jul 2027 13:56:30 +0000
asID: 834
IP address blocks: 185.229.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft
rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 17:48:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:5f:bf:45:92:de:13:fb:d9:8c:fb:76:96:71:18:e4:4b:40:d3:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Validity
Not Before: Jul 26 13:51:30 2026 GMT
Not After : Jul 25 13:56:30 2027 GMT
Subject: CN=B87839AC4D097D4E96221BFCF419FC7CD3553B4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:80:67:f9:0b:60:a7:e5:7e:b2:b8:95:fe:40:
08:23:a5:d4:3e:8d:cc:a3:88:7c:8a:16:cb:42:6c:
4c:08:e4:bc:8c:fc:08:e5:33:ef:18:c7:f3:65:6e:
28:74:52:7f:39:2f:d7:47:b8:a2:7c:42:f3:76:27:
ee:ea:08:9e:2c:b1:05:b6:24:d6:a0:b0:dd:2c:8a:
94:d2:ba:5d:69:de:d3:d5:5d:4b:bc:f8:8c:e0:55:
2f:ce:41:86:18:f8:e4:a2:24:d1:f8:30:22:8b:c4:
24:e9:9e:94:6c:1b:e1:e4:4f:ca:c7:8f:68:9b:bc:
72:82:5c:ae:0a:2d:cd:87:ef:ac:1b:ec:fb:1f:4a:
c2:65:b8:5e:68:c6:27:ca:a8:6d:82:09:44:b3:c3:
63:59:05:c5:83:1e:fa:3c:2b:fb:1d:24:30:e3:79:
d7:f4:55:4a:8c:b6:fc:b8:cb:d7:6b:47:bb:7c:d9:
68:33:5a:c4:00:55:30:c9:ee:e3:9f:ca:78:fd:21:
6a:1d:92:8a:43:e3:b7:06:6c:c2:8a:6d:78:e1:32:
64:8b:9d:92:1a:9b:62:fd:79:90:00:28:aa:9b:91:
0a:9c:ab:84:92:58:c9:e4:00:49:fb:e8:20:58:25:
58:9c:43:ec:01:19:da:8a:cc:da:35:8e:62:19:9d:
7a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:78:39:AC:4D:09:7D:4E:96:22:1B:FC:F4:19:FC:7C:D3:55:3B:4C
X509v3 Authority Key Identifier:
keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3232392e3230302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.200.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:65:a1:28:0e:51:51:c6:df:69:ad:56:e1:23:f1:a2:27:58:
c7:61:53:62:6a:3f:df:c8:5c:eb:d4:0e:d4:8c:3f:1e:72:65:
d0:ae:bf:f4:8f:ca:ea:6d:9f:7b:4d:0b:b0:87:4d:d5:66:68:
bc:43:e2:58:da:6c:5b:13:7d:a2:79:5d:66:47:71:60:14:95:
d6:be:18:0c:32:9f:c7:bc:cc:4c:6a:8a:ee:bf:31:3a:ac:8d:
3c:10:23:41:4c:70:d6:47:05:e4:83:e7:85:4e:ec:2c:1d:82:
a7:0c:f0:2f:42:6a:94:d4:78:0f:76:33:73:1d:1a:ab:2c:a1:
7c:69:d6:23:87:78:31:35:f5:b4:76:ae:df:3c:d5:18:b7:0f:
f2:01:e5:ad:68:2b:12:81:18:2d:27:1c:e9:b2:87:85:b9:35:
8c:4c:d7:1d:16:ff:db:e7:6d:f7:4c:c6:11:c5:9a:cf:13:24:
5a:92:cd:be:7b:06:65:69:a6:77:dc:d2:26:7e:e0:ef:c2:e8:
af:b0:e9:64:34:7f:2c:d8:be:be:f9:ad:0e:38:90:09:38:54:
c9:74:d3:95:4f:ac:ca:d9:0d:df:fb:f5:a5:ba:c6:60:ad:0e:
a8:46:67:b2:cc:82:db:ff:19:c8:23:6b:49:c5:15:36:36:f5:
03:df:13:2a
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUR1+/RZLeE/vZjPt2lnEY5EtA0xkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2U4NzBiOWE3MDAzYzRmZDljNTFiZDM1NGE5ZGVmYTNm
Yjc3YjRhOTAeFw0yNjA3MjYxMzUxMzBaFw0yNzA3MjUxMzU2MzBaMDMxMTAvBgNV
BAMTKEI4NzgzOUFDNEQwOTdENEU5NjIyMUJGQ0Y0MTlGQzdDRDM1NTNCNEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKgGf5C2Cn5X6yuJX+QAgjpdQ+
jcyjiHyKFstCbEwI5LyM/AjlM+8Yx/Nlbih0Un85L9dHuKJ8QvN2J+7qCJ4ssQW2
JNagsN0sipTSul1p3tPVXUu8+IzgVS/OQYYY+OSiJNH4MCKLxCTpnpRsG+HkT8rH
j2ibvHKCXK4KLc2H76wb7PsfSsJluF5oxifKqG2CCUSzw2NZBcWDHvo8K/sdJDDj
edf0VUqMtvy4y9drR7t82WgzWsQAVTDJ7uOfynj9IWodkopD47cGbMKKbXjhMmSL
nZIam2L9eZAAKKqbkQqcq4SSWMnkAEn76CBYJVicQ+wBGdqKzNo1jmIZnXpPAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUuHg5rE0JfU6WIhv89Bn8fNNVO0wwHwYDVR0j
BBgwFoAUPocLmnADxP2cUb01Sp3vo/t3tKkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzVkMThlODItNGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQy
Mjc5LzAvM0U4NzBCOUE3MDAzQzRGRDlDNTFCRDM1NEE5REVGQTNGQjc3QjRBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1BvY0xtbkFEeFAyY1ViMDFTcDN2b190
M3RLay5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYzVkMThlODIt
NGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQyMjc5LzAvMzEzODM1MmUzMjMyMzkyZTMy
MzAzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALnl
yDANBgkqhkiG9w0BAQsFAAOCAQEA0WWhKA5RUcbfaa1W4SPxoidYx2FTYmo/38hc
69QO1Iw/HnJl0K6/9I/K6m2fe00LsIdN1WZovEPiWNpsWxN9onldZkdxYBSV1r4Y
DDKfx7zMTGqK7r8xOqyNPBAjQUxw1kcF5IPnhU7sLB2CpwzwL0JqlNR4D3Yzcx0a
qyyhfGnWI4d4MTX1tHau3zzVGLcP8gHlrWgrEoEYLScc6bKHhbk1jEzXHRb/2+dt
90zGEcWazxMkWpLNvnsGZWmmd9zSJn7g78Lor7DpZDR/LNi+vvmtDjiQCThUyXTT
lU+sytkN3/v1pbrGYK0OqEZnssyC2/8ZyCNrScUVNjb1A98TKg==
-----END CERTIFICATE-----
Generated at Mon Jul 27 09:25:08 2026 by rpki-client