Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3234342e39352e302f32342d3234203d3e203330303538.roa
File: 3138352e3234342e39352e302f32342d3234203d3e203330303538.roa (raw, json)
Hash identifier: 18I/ng9HI5XuObuxE8W3wRTkaWJpr3T1qz3Rt9UUAds=
Subject key identifier: CD:73:67:F5:DF:0F:2E:CC:B8:90:07:99:E2:A6:FE:F4:AD:6B:86:2B
Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Certificate serial: 1A574F31332297143BD510974F80F32AD54204F5
Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3234342e39352e302f32342d3234203d3e203330303538.roa
Signing time: Thu 13 Aug 2026 05:39:39 +0000
ROA not before: Thu 13 Aug 2026 05:34:39 +0000
ROA not after: Thu 12 Aug 2027 05:39:39 +0000
asID: 30058
IP address blocks: 185.244.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft
rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:57:4f:31:33:22:97:14:3b:d5:10:97:4f:80:f3:2a:d5:42:04:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Validity
Not Before: Aug 13 05:34:39 2026 GMT
Not After : Aug 12 05:39:39 2027 GMT
Subject: CN=CD7367F5DF0F2ECCB8900799E2A6FEF4AD6B862B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b6:c4:87:c4:76:08:a3:2d:9b:35:72:ca:ee:
5e:fe:c1:31:97:6d:ed:18:2d:97:10:94:c5:2f:81:
59:14:34:02:c5:b3:e9:a2:bb:71:3c:80:0d:b2:60:
d9:cc:20:e7:14:0d:fa:8e:06:c1:a7:87:ca:16:7a:
66:34:55:c1:5d:68:60:2b:ac:b1:5a:d2:f7:cf:b9:
4a:56:fd:2d:7a:14:0d:61:89:da:2d:3b:b2:14:37:
e9:9e:70:6b:f8:8d:e2:ce:aa:b3:b4:07:71:69:9a:
cd:15:2a:b4:db:7f:76:1b:2a:db:d2:13:0a:56:e5:
8c:fd:8e:45:c6:5b:81:3b:b2:3e:90:64:2d:e1:e6:
f2:2a:ff:37:01:ee:a0:36:da:90:2a:20:be:a3:31:
a0:e2:ae:29:c7:15:cf:f4:e2:22:4f:be:11:4d:8a:
62:24:40:bf:0f:80:33:cf:72:00:ab:59:b3:e6:43:
59:6c:6b:af:e9:13:3c:c0:0a:63:f0:0e:84:cd:f2:
4c:76:5a:d8:90:55:e0:aa:59:f2:9f:63:1d:50:a3:
c5:30:d6:62:88:22:d0:3c:bd:c8:1b:ad:6c:81:6a:
db:96:59:c9:7c:4b:8c:f3:48:0d:9c:d6:91:bf:35:
2f:2b:46:12:e0:6e:12:78:61:26:b3:73:7d:0e:aa:
74:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:73:67:F5:DF:0F:2E:CC:B8:90:07:99:E2:A6:FE:F4:AD:6B:86:2B
X509v3 Authority Key Identifier:
keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3234342e39352e302f32342d3234203d3e203330303538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.95.0/24
Signature Algorithm: sha256WithRSAEncryption
82:8f:de:94:65:17:19:51:24:b2:b3:97:20:1b:a9:23:2c:a0:
ce:3a:17:4b:37:e1:8d:fa:5e:83:f6:a5:75:c2:e4:35:8e:c7:
01:e7:39:f4:f7:e5:b2:65:77:0d:1e:aa:7e:fd:7e:f1:70:c2:
f8:6d:c2:ac:31:e4:f0:0f:fd:4e:35:35:28:b3:d9:ce:01:9a:
19:c0:0b:81:d2:c5:72:b7:5e:59:a4:33:f5:f7:de:67:2b:0e:
eb:25:78:a9:54:58:58:ef:ff:8e:b9:fc:68:6c:5c:86:ab:3e:
40:de:9e:8f:a5:6c:3f:f4:e1:c7:c5:8f:8e:67:1d:66:f8:4b:
a3:6d:88:aa:e3:aa:bd:19:bc:12:2e:e6:34:77:15:4a:d5:62:
0c:97:b0:b3:08:6d:96:0c:fa:c2:c0:67:7f:59:bb:ef:89:2a:
b2:8a:7d:bf:e7:e2:5c:4a:dd:90:89:3f:ac:9e:05:17:bb:e2:
64:1a:5f:55:9e:36:49:46:49:58:53:25:dd:b7:94:60:dc:99:
86:f8:97:4d:7f:43:a2:6c:3a:f1:ba:90:d1:7a:0a:95:13:ff:
0d:90:66:0c:80:dd:fd:10:69:01:9a:8e:0e:36:0e:d1:80:8e:
7a:25:ad:94:f0:b6:d2:19:11:00:ee:ef:d3:9d:6d:90:e8:6c:
c5:04:ea:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:43 2026 by rpki-client