Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3232392e3230322e302f32342d3234203d3e20323130303330.roa
File: 3138352e3232392e3230322e302f32342d3234203d3e20323130303330.roa (raw, json)
Hash identifier: Iq7mX+2Gdzh11Cz+eab6E5JpoAS8/V5c+VHbjbSnpR0=
Subject key identifier: 0C:59:43:33:8F:9D:F7:51:D6:33:DF:13:D7:20:9F:DB:E6:DE:AD:2C
Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Certificate serial: 7DABEC956D845A8187E2EB30AFDC60AC5CEE4B25
Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3232392e3230322e302f32342d3234203d3e20323130303330.roa
Signing time: Tue 11 Aug 2026 16:49:26 +0000
ROA not before: Tue 11 Aug 2026 16:44:26 +0000
ROA not after: Tue 10 Aug 2027 16:49:26 +0000
asID: 210030
IP address blocks: 185.229.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft
rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:ab:ec:95:6d:84:5a:81:87:e2:eb:30:af:dc:60:ac:5c:ee:4b:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Validity
Not Before: Aug 11 16:44:26 2026 GMT
Not After : Aug 10 16:49:26 2027 GMT
Subject: CN=0C5943338F9DF751D633DF13D7209FDBE6DEAD2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e0:ae:15:36:82:e8:4a:dc:04:57:18:77:fd:
e5:2e:20:af:7c:03:da:cb:33:87:3b:d7:1b:02:fd:
9b:33:bf:f0:64:69:7c:c5:0e:ad:4a:5e:6f:2f:70:
57:37:97:fc:8a:80:f3:20:2e:a8:9b:f8:dd:60:42:
49:da:a4:dc:f9:0b:ff:32:e0:24:13:74:32:46:11:
a9:c2:ae:e2:cb:70:bf:2b:15:99:c5:c9:61:73:3b:
e3:c2:dc:59:11:f8:91:fe:ac:c6:29:eb:39:31:94:
c1:44:57:52:3c:18:7f:1a:47:bc:5f:53:65:4d:91:
11:1c:6b:aa:b8:7e:45:e1:7e:ab:7d:bb:23:14:a9:
87:d5:e7:77:9e:29:2a:fe:ed:4e:6d:bf:94:a0:a5:
48:56:e4:09:c8:3d:43:ec:5d:fb:50:e0:3f:4d:4f:
73:75:f6:90:0d:50:7c:b9:dc:d8:93:d6:53:0d:db:
8a:90:44:95:3a:de:aa:84:f2:0d:56:72:3e:bd:2f:
be:e8:8a:00:74:05:fb:a2:4f:03:b2:de:70:62:85:
b6:eb:52:fe:d7:d5:e4:bd:10:89:0f:2c:46:34:b8:
1c:0e:3f:39:cd:5c:d3:42:dc:42:d5:8b:d7:73:45:
d5:ab:a1:7f:a1:62:b2:10:74:53:82:d3:a4:ef:6a:
21:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:59:43:33:8F:9D:F7:51:D6:33:DF:13:D7:20:9F:DB:E6:DE:AD:2C
X509v3 Authority Key Identifier:
keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3232392e3230322e302f32342d3234203d3e20323130303330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.202.0/24
Signature Algorithm: sha256WithRSAEncryption
15:58:98:ac:1c:5b:d6:cb:c5:1d:81:78:cf:2f:d3:da:d0:bb:
81:46:24:30:2a:8f:fc:18:fe:6c:bd:c7:b1:73:c5:0b:3b:47:
d2:37:4b:e1:09:f0:7c:8a:b6:a8:22:d0:18:0b:06:3e:7f:99:
6d:d4:f8:28:3b:d7:1c:d6:47:2d:84:67:fb:45:c0:7e:5b:f3:
08:83:b6:6c:a9:aa:dd:bd:ba:ce:44:f8:64:a1:bb:50:7b:fa:
bb:1c:bd:f4:25:90:d4:7f:46:02:f9:a9:ed:6d:3f:a2:ba:36:
db:36:02:16:5d:5d:ad:8e:4b:73:b1:88:92:b7:0f:c3:f2:3d:
39:f6:eb:cb:7a:9c:70:6c:94:73:e1:12:43:f2:30:5a:d6:64:
c5:fa:0c:33:65:60:71:a6:d3:10:1d:6a:38:ec:dc:fd:d2:7d:
9b:52:95:6b:f5:0c:f6:db:4d:3c:a3:38:7b:86:cd:e5:e1:1c:
34:1f:92:46:ce:4a:de:47:34:78:0f:7a:f5:f7:d1:4f:05:0d:
dc:44:09:a1:f6:f0:73:d2:7f:f9:30:df:8c:eb:c6:63:3e:1d:
df:3e:b6:c6:f4:98:97:34:98:5d:ec:d4:08:75:20:8d:7e:26:
b2:6a:d3:bd:0d:97:ad:d3:6e:4a:ae:18:10:35:2d:a3:01:d1:
36:36:3c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:36:33 2026 by rpki-client