Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/3138352e3131362e39302e302f32342d3234203d3e20383334.roa
File: 3138352e3131362e39302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: PcpRQkHklydDYh0ikvD8BrehCjftj4u4y29GAVlP3DA=
Subject key identifier: 42:D4:DB:41:07:B9:98:F4:C3:F4:E2:DB:39:A6:A5:7D:2C:62:A9:92
Certificate issuer: /CN=d455dec4f1ebc2a64f5ccc2ee9292731eb82113d
Certificate serial: 2522AC20FF35C4B46AB3F575F4D0D2497F10DED6
Authority key identifier: D4:55:DE:C4:F1:EB:C2:A6:4F:5C:CC:2E:E9:29:27:31:EB:82:11:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/3138352e3131362e39302e302f32342d3234203d3e20383334.roa
Signing time: Wed 30 Sep 2026 00:08:14 +0000
ROA not before: Wed 30 Sep 2026 00:03:14 +0000
ROA not after: Wed 29 Sep 2027 00:08:14 +0000
asID: 834
IP address blocks: 185.116.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft
rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 02:23:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:22:ac:20:ff:35:c4:b4:6a:b3:f5:75:f4:d0:d2:49:7f:10:de:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d455dec4f1ebc2a64f5ccc2ee9292731eb82113d
Validity
Not Before: Sep 30 00:03:14 2026 GMT
Not After : Sep 29 00:08:14 2027 GMT
Subject: CN=42D4DB4107B998F4C3F4E2DB39A6A57D2C62A992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:fb:7f:0f:c1:8d:e5:d6:78:55:19:03:c6:24:
a6:79:13:b0:8c:0c:6b:02:b5:79:bf:2f:47:db:ba:
16:a1:11:1a:82:20:60:1c:e3:cf:2c:9a:f3:23:28:
cb:e2:d3:b2:0a:c9:bb:36:b4:dc:17:68:93:f0:15:
d0:5f:6e:aa:ea:32:0d:a7:14:50:62:0d:66:6a:53:
62:72:f3:9a:6e:a4:7b:82:ed:fd:3a:e0:ca:4a:61:
a2:76:f6:bd:6f:87:6e:e7:19:c4:07:1a:70:2b:88:
f8:5b:fe:0b:49:f3:21:72:11:10:dd:c6:fa:28:5d:
7f:b3:4f:48:b2:01:25:9d:10:2f:08:a2:8f:35:0f:
af:a4:31:d8:e2:3b:14:99:a5:24:a2:f5:0a:a0:9e:
01:fa:33:c3:46:36:f0:13:af:da:15:da:bf:df:44:
38:2b:7b:76:58:a6:c7:25:d6:7f:68:5f:68:f0:e7:
55:19:31:b6:37:ad:d0:40:ca:fb:2b:61:ef:8d:9f:
b6:fd:a9:8d:3e:30:5a:59:c6:99:f6:98:e0:b3:aa:
f7:bf:e7:7a:18:77:9f:ee:b1:45:56:2d:e6:4f:9b:
13:44:dd:81:dc:da:64:69:84:bb:78:77:33:e6:1a:
a3:6b:8f:2f:ab:c2:25:2d:5a:e7:cc:1c:c1:8d:1c:
a3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D4:DB:41:07:B9:98:F4:C3:F4:E2:DB:39:A6:A5:7D:2C:62:A9:92
X509v3 Authority Key Identifier:
keyid:D4:55:DE:C4:F1:EB:C2:A6:4F:5C:CC:2E:E9:29:27:31:EB:82:11:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/3138352e3131362e39302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.116.90.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:ef:e6:a2:63:d0:2a:cb:06:94:87:cd:80:81:54:4b:4a:f6:
a6:9f:14:2b:57:16:99:2b:53:56:a7:42:3a:8e:f9:fd:3c:dc:
d2:8e:a4:10:91:dd:c1:bb:79:df:1b:14:7a:3e:dc:e0:93:f8:
f8:7f:0b:f0:a4:d1:b4:ce:c5:b6:4d:0e:8e:7b:a9:b1:fc:5c:
79:9a:64:6a:01:32:de:84:fe:da:3f:15:8f:26:2c:f2:f5:64:
9d:bb:de:e9:2d:a6:12:50:f4:b5:16:0d:d5:6f:8f:6a:3c:ec:
a2:73:1a:84:1b:26:1b:e7:78:19:32:45:53:20:5b:89:d9:56:
20:ef:a0:6b:09:53:26:ec:3d:70:50:e3:02:28:ea:9c:1d:7e:
a3:6b:c8:88:5a:eb:67:a7:8b:2c:3f:1a:c3:8a:30:fc:27:94:
2d:7f:8a:f9:7d:77:ae:41:96:f1:18:1f:23:0b:ce:da:60:aa:
1c:74:75:b0:2c:3a:fb:f0:03:96:f8:63:ae:ee:30:23:01:d2:
a7:9d:6e:e6:10:c0:a1:c4:58:15:23:13:a1:41:bc:60:51:1f:
9e:e4:7e:19:5e:dd:75:7f:36:fd:76:b3:fb:4e:ce:c7:51:e2:
67:ac:67:0c:71:42:04:79:06:b3:29:11:a0:6b:fb:6f:76:61:
c9:e2:dc:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 15:14:34 2026 by rpki-client