Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/3138352e3131362e39302e302f32342d3234203d3e203235313938.roa
File: 3138352e3131362e39302e302f32342d3234203d3e203235313938.roa (raw, json)
Hash identifier: 7mQW7H94fRqr8LtsWV8dOnF1L4/JFOSxrGXn/+VeEzY=
Subject key identifier: 9A:3D:F3:CA:F8:A0:EC:DD:CB:5B:04:09:6A:A5:42:BF:03:6D:52:CD
Certificate issuer: /CN=d455dec4f1ebc2a64f5ccc2ee9292731eb82113d
Certificate serial: 200E9C1142C453B13477B93FB8B035E579549313
Authority key identifier: D4:55:DE:C4:F1:EB:C2:A6:4F:5C:CC:2E:E9:29:27:31:EB:82:11:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/3138352e3131362e39302e302f32342d3234203d3e203235313938.roa
Signing time: Sun 30 Aug 2026 00:03:37 +0000
ROA not before: Sat 29 Aug 2026 23:58:37 +0000
ROA not after: Sun 29 Aug 2027 00:03:37 +0000
asID: 25198
IP address blocks: 185.116.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft
rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 12:42:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:0e:9c:11:42:c4:53:b1:34:77:b9:3f:b8:b0:35:e5:79:54:93:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d455dec4f1ebc2a64f5ccc2ee9292731eb82113d
Validity
Not Before: Aug 29 23:58:37 2026 GMT
Not After : Aug 29 00:03:37 2027 GMT
Subject: CN=9A3DF3CAF8A0ECDDCB5B04096AA542BF036D52CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:48:9d:8d:e9:19:2c:e4:ee:65:91:39:59:a3:
4a:76:a6:04:48:f2:9a:09:25:9b:61:46:f1:74:11:
b0:be:29:1b:b1:21:79:c7:a6:a8:87:06:66:49:66:
df:00:60:62:d0:12:b5:d4:4c:65:73:ff:bf:e9:ce:
48:31:02:ac:f5:da:3a:1d:02:d4:6f:12:07:4f:2e:
0b:27:07:23:53:9e:ed:98:30:0a:31:5f:28:99:8f:
6f:b9:60:31:54:6e:4c:21:53:c5:d9:19:99:96:d4:
58:1b:e0:6b:cc:1a:40:96:46:a9:89:e9:75:dd:87:
09:7e:50:8c:3e:78:f1:90:64:a8:17:46:0a:fb:7e:
02:e5:7f:15:2e:96:43:8e:75:d6:8e:5a:f6:da:54:
0d:31:4a:a2:bc:60:36:e7:8f:2c:e0:24:34:d0:6c:
7a:c3:b5:18:1c:49:94:e5:84:2f:af:7b:55:61:c8:
6e:83:ea:5b:1c:b6:62:4b:43:d5:d9:db:19:85:b1:
41:c8:8e:14:3d:09:9d:e4:b6:89:23:7d:04:16:68:
6d:87:b8:30:5e:44:c0:73:b3:49:04:46:8a:fb:51:
58:20:0e:a2:43:70:c3:44:9c:7b:44:18:71:34:f9:
50:62:fa:b7:82:96:af:a5:7d:42:08:91:85:76:ea:
c2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:3D:F3:CA:F8:A0:EC:DD:CB:5B:04:09:6A:A5:42:BF:03:6D:52:CD
X509v3 Authority Key Identifier:
keyid:D4:55:DE:C4:F1:EB:C2:A6:4F:5C:CC:2E:E9:29:27:31:EB:82:11:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/3138352e3131362e39302e302f32342d3234203d3e203235313938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.116.90.0/24
Signature Algorithm: sha256WithRSAEncryption
55:12:b7:35:28:74:ac:31:7b:bf:f3:e9:32:65:f6:43:43:e7:
dd:c8:fe:eb:48:60:4a:77:ac:e3:70:5a:33:16:ed:6f:89:cf:
2d:53:98:59:9e:7a:64:5e:96:35:78:bf:9b:1f:e8:98:bd:63:
14:b0:62:14:c0:6f:87:48:ee:45:75:38:92:97:67:f5:c8:54:
cd:55:ae:eb:6f:f9:1d:41:59:84:01:e5:68:c2:01:56:f5:85:
f1:30:5e:7d:3c:0a:38:fb:73:ac:dc:4f:5f:f7:92:be:d9:92:
32:30:49:b4:1e:0d:c6:b5:e5:fb:71:8c:a7:95:95:2e:0d:25:
3e:a3:d6:7b:e5:9d:a6:45:b0:26:7a:6b:86:c5:b0:68:58:1c:
6e:7c:12:f0:4f:ad:72:18:03:6d:41:2d:c7:ef:7d:02:45:e4:
38:ab:88:4e:6f:11:41:cb:1d:cd:33:c8:fb:37:0a:c3:8c:db:
8f:a5:22:d4:5d:38:9d:88:8d:5b:cc:50:a7:9e:78:c0:88:d7:
1f:35:06:2a:11:6a:cb:75:01:6d:01:b7:99:91:74:32:00:27:
58:13:7b:d3:54:36:5f:4e:dd:4b:bf:f3:b3:5c:3e:35:c3:4e:
fd:5b:e3:a6:f5:21:09:fa:29:c2:7d:4f:44:94:25:82:5f:6b:
9f:c1:33:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:26:56 2026 by rpki-client