Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3232392e3230302e302f32342d3234203d3e2039333034.roa
File: 3138352e3232392e3230302e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier: Msloifrt/kLCe0SjqxgGF92lnUxKU95znivEpNjSmVE=
Subject key identifier: BC:C3:E0:7C:79:CF:FE:48:05:F1:A1:F3:5E:07:B0:83:FE:1E:CA:07
Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Certificate serial: 605EA4E330BD0F64A05526DF439E97F3689A87B3
Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3232392e3230302e302f32342d3234203d3e2039333034.roa
Signing time: Tue 08 Sep 2026 06:25:22 +0000
ROA not before: Tue 08 Sep 2026 06:20:22 +0000
ROA not after: Tue 07 Sep 2027 06:25:22 +0000
asID: 9304
IP address blocks: 185.229.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft
rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:5e:a4:e3:30:bd:0f:64:a0:55:26:df:43:9e:97:f3:68:9a:87:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Validity
Not Before: Sep 8 06:20:22 2026 GMT
Not After : Sep 7 06:25:22 2027 GMT
Subject: CN=BCC3E07C79CFFE4805F1A1F35E07B083FE1ECA07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ba:70:40:17:29:44:e9:59:f0:6d:4a:19:a8:
57:0f:a2:25:ff:2f:96:23:00:1b:1d:2e:72:8f:69:
f9:94:be:65:37:19:03:69:a1:ab:71:14:59:48:72:
4e:68:b0:58:af:bc:b2:fe:55:6c:3e:2f:92:01:36:
45:7e:24:db:d5:68:ed:82:a3:f4:8a:1a:a6:1f:6e:
17:1b:d6:1b:fd:cc:3d:22:e1:eb:da:ec:d9:1b:d6:
7f:0c:27:34:d3:8e:32:45:fb:14:9a:76:75:ab:7f:
61:4b:54:65:7f:e2:68:06:27:e4:69:af:29:1a:0c:
75:46:cd:0d:22:ff:95:f6:a9:54:6b:0c:28:e9:bf:
20:24:f0:bd:e4:22:f2:93:90:41:fb:a6:a5:b8:f1:
cf:32:84:17:e0:79:ff:cc:97:40:3d:cd:1a:50:d2:
de:a2:71:c9:ff:24:4c:80:11:59:64:94:36:c3:4e:
17:4a:b1:8b:7a:72:19:b2:f0:59:04:03:8b:8f:e4:
9b:47:03:85:78:9b:31:43:72:96:03:68:bd:12:67:
99:21:9b:94:ee:f3:43:f2:e7:a5:4a:e6:7a:3b:7c:
0e:81:97:7a:41:48:04:31:49:41:b2:d1:ba:3d:06:
86:cb:2f:de:58:97:fa:eb:a6:55:bc:28:54:a9:ae:
20:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C3:E0:7C:79:CF:FE:48:05:F1:A1:F3:5E:07:B0:83:FE:1E:CA:07
X509v3 Authority Key Identifier:
keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3232392e3230302e302f32342d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.200.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:3c:12:1b:e3:bc:dc:ab:f6:9a:6e:4f:44:ee:6a:21:fd:d3:
1c:47:b3:04:bd:c6:04:8a:50:a1:e9:87:2a:f1:e5:1d:2d:73:
03:28:f6:c6:bf:6b:c2:2a:b9:d8:fc:02:1b:f5:7c:d6:73:43:
56:f6:29:6c:36:da:3d:44:03:e6:40:28:87:6b:70:05:bd:ad:
40:01:84:35:d2:46:aa:ac:66:75:de:2d:d5:ba:f0:6f:58:17:
f1:77:fe:e7:fa:02:78:b1:28:68:a3:ad:a2:8f:30:f0:ce:df:
d7:dc:c4:dc:10:d6:27:2b:31:e8:74:ce:f6:16:00:4a:5f:a6:
71:14:18:2f:f3:cb:a0:6d:33:2e:23:c8:2f:ee:35:62:40:58:
67:80:87:f7:65:9a:7d:7f:d1:93:45:a1:1f:3f:4f:5f:6e:96:
bb:07:60:a0:45:0c:44:1b:f2:6e:01:ab:9b:93:80:4c:c3:07:
d3:a8:85:d3:b5:6d:87:e1:6c:f3:d2:34:cf:a6:c8:c2:0a:f7:
6f:c3:7b:e1:22:26:cf:74:9e:f2:4b:21:1d:d9:c7:7b:f6:cb:
63:59:49:ed:5e:07:3b:67:86:fd:3c:65:92:70:4e:26:09:4d:
e0:19:4c:96:69:4b:cf:66:38:69:22:a7:be:43:4f:05:39:b7:
2f:b3:a4:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:32:24 2026 by rpki-client