Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3234342e39352e302f32342d3234203d3e203235313938.roa
File: 3138352e3234342e39352e302f32342d3234203d3e203235313938.roa (raw, json)
Hash identifier: HsifrjJ4DOl71iVVQ76HW5E2rbqdGN877lYZkYfualI=
Subject key identifier: 5B:91:4D:E3:50:2E:E4:5F:6E:E1:53:A6:8F:E0:90:4F:38:14:3C:D3
Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Certificate serial: 2BAD2DD0A08F349994DAFD239E6FF2E71D5B3CB8
Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3234342e39352e302f32342d3234203d3e203235313938.roa
Signing time: Fri 26 Jun 2026 13:59:08 +0000
ROA not before: Fri 26 Jun 2026 13:54:08 +0000
ROA not after: Fri 25 Jun 2027 13:59:08 +0000
asID: 25198
IP address blocks: 185.244.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft
rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 15:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:ad:2d:d0:a0:8f:34:99:94:da:fd:23:9e:6f:f2:e7:1d:5b:3c:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Validity
Not Before: Jun 26 13:54:08 2026 GMT
Not After : Jun 25 13:59:08 2027 GMT
Subject: CN=5B914DE3502EE45F6EE153A68FE0904F38143CD3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e0:19:26:c5:c9:79:e7:27:aa:17:ec:6d:68:
cf:8f:4d:99:e9:69:fe:8d:db:29:f7:e5:df:48:f7:
c4:b5:7e:5c:0e:e9:ec:ae:fb:fa:0c:fe:a4:eb:a3:
28:6e:f0:5e:88:e5:20:ad:87:f7:0a:bb:49:d5:dd:
0a:84:20:7c:f5:90:cf:c7:ad:8e:45:b5:1e:77:09:
6a:96:f7:e7:0a:4a:70:aa:ee:da:cb:08:3e:aa:72:
0b:e2:21:16:2e:2f:44:eb:4e:28:34:4b:bb:b2:a1:
26:92:39:60:10:2b:b6:a1:0d:77:0a:08:d3:74:41:
a3:ac:76:2b:ab:f7:6a:7c:34:69:19:2f:c4:86:9b:
00:ba:bd:46:5a:c3:24:79:19:b0:97:0a:5f:59:a4:
f0:85:1a:0c:4c:92:fc:de:07:fc:79:4d:bf:57:4f:
c3:ae:ed:8f:31:63:21:ce:b7:ce:d9:8b:31:c3:7e:
b6:65:ba:93:0e:88:f9:8e:b6:81:53:f9:75:cd:79:
ae:f3:7b:6e:59:bc:c2:95:e8:42:15:ec:5b:0f:9f:
1d:e4:f8:64:ab:c8:e5:8e:9b:59:84:fa:fb:92:94:
17:dc:b9:78:e7:18:28:0e:6a:51:f6:19:57:61:79:
f9:b0:e9:12:eb:ee:4e:d3:55:4d:bd:ec:21:7a:7c:
a8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:91:4D:E3:50:2E:E4:5F:6E:E1:53:A6:8F:E0:90:4F:38:14:3C:D3
X509v3 Authority Key Identifier:
keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3234342e39352e302f32342d3234203d3e203235313938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.95.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:db:76:95:5e:ca:c5:86:4c:3d:f8:b4:4c:b7:ba:a2:e2:c9:
a0:bf:74:ca:5e:64:5d:65:86:1a:f6:ae:1d:62:96:fe:81:6e:
e5:c0:77:23:5c:fb:04:26:3a:5f:79:1b:dc:f5:3d:82:d8:60:
27:68:f4:ff:50:6b:82:5b:2a:76:99:1f:3c:97:31:b3:48:f2:
5d:25:39:43:28:41:df:d4:18:61:4d:76:39:12:a9:4f:05:4e:
6b:c2:09:04:2a:b2:8d:e9:22:c0:70:39:62:8f:af:13:c2:c2:
b8:0d:ab:60:d2:f6:cf:cc:d5:da:cc:d3:f9:07:8e:9c:8e:3f:
1b:e0:c3:19:78:42:c8:f6:e3:eb:ef:62:4a:43:fe:68:5c:7e:
7d:37:df:83:5e:9d:fe:83:d4:70:4d:90:67:a0:82:31:b4:8d:
fa:60:70:62:43:3c:34:61:71:00:bc:73:7e:fc:0b:5c:e4:39:
f5:64:2a:5c:0b:a8:5a:28:d6:56:1e:37:93:97:fe:d6:e5:f8:
ff:28:97:57:89:34:f1:d0:66:fd:32:8c:bc:2d:f7:f5:3f:a5:
96:44:99:7d:52:76:e9:d8:e2:73:23:1f:ee:a0:ae:93:6f:93:
b8:34:4d:a2:ed:3e:e6:cb:6d:c0:15:31:03:d4:77:56:4a:04:
83:13:f5:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:37:25 2026 by rpki-client