Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3138352e31332e3232352e302f32342d3234203d3e20323132323338.roa
File: 3138352e31332e3232352e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: CaXDOGgIurdmCZYqYQc0f2EZuaYMUeplqTDJnpRc1ZI=
Subject key identifier: 74:D3:2A:28:EF:5B:ED:77:8A:1C:DA:68:F5:FA:9B:57:F5:B2:62:80
Certificate issuer: /CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Certificate serial: 553E2994E38842AE553A3C6F9D543952B6C8F68F
Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3138352e31332e3232352e302f32342d3234203d3e20323132323338.roa
Signing time: Mon 19 Oct 2026 09:49:37 +0000
ROA not before: Mon 19 Oct 2026 09:44:37 +0000
ROA not after: Mon 18 Oct 2027 09:49:37 +0000
asID: 212238
IP address blocks: 185.13.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl
rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft
rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 00:34:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:3e:29:94:e3:88:42:ae:55:3a:3c:6f:9d:54:39:52:b6:c8:f6:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Validity
Not Before: Oct 19 09:44:37 2026 GMT
Not After : Oct 18 09:49:37 2027 GMT
Subject: CN=74D32A28EF5BED778A1CDA68F5FA9B57F5B26280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9c:1c:71:d3:71:4b:aa:09:20:34:c2:db:7f:
31:43:ef:54:f4:bb:71:82:06:cd:8f:15:a1:bc:09:
89:bf:b5:8a:14:99:35:0d:a9:50:78:25:45:33:5d:
9f:9f:2d:33:71:e9:5e:6f:86:3a:45:ca:f5:9c:da:
d3:82:8f:da:75:6b:3e:26:85:bb:37:31:e2:48:1d:
49:b9:e3:3e:dc:73:ed:3c:18:ff:99:62:4d:c8:51:
c5:5f:06:c0:03:2a:ae:d5:1e:73:da:fe:bb:0b:48:
93:aa:f2:9c:c0:85:be:15:2f:29:76:59:c5:5a:32:
06:33:74:05:49:73:aa:46:c5:9f:d7:38:86:73:a1:
03:38:ca:be:70:b4:21:62:2d:3c:48:a6:0a:8b:8e:
77:5c:dc:c0:2d:02:39:71:0b:fd:ae:d6:ec:b3:a2:
77:70:59:ad:b7:0f:b9:78:9d:be:4a:d1:ba:2c:6f:
73:fd:60:2a:f0:5f:90:d8:6b:32:cc:23:ac:7b:62:
87:5b:6e:5c:67:3e:4f:e0:2c:55:80:59:71:6b:e0:
76:14:eb:b4:57:0b:7b:0d:9c:41:ad:a8:db:c3:c2:
54:08:f0:30:f1:8f:d3:10:0c:d7:dd:91:89:fd:56:
17:49:31:f3:7d:ad:57:76:53:be:25:20:9f:08:df:
23:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D3:2A:28:EF:5B:ED:77:8A:1C:DA:68:F5:FA:9B:57:F5:B2:62:80
X509v3 Authority Key Identifier:
keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3138352e31332e3232352e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.13.225.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:53:f5:4b:fa:d5:af:6c:92:24:17:c7:9c:f0:9f:c4:d1:c1:
89:aa:f1:80:2a:95:2f:27:0c:a7:46:46:ac:d5:2d:34:c9:a9:
84:bc:3d:0b:f2:c3:7d:58:aa:4f:24:b9:0f:fc:29:e4:9f:d8:
05:85:44:12:eb:08:9d:cd:e3:ad:76:0d:95:ef:47:99:ab:32:
39:f7:73:67:f6:d7:09:93:97:ab:58:16:be:7e:f0:42:29:a0:
f4:0e:e3:ea:60:a3:7e:73:32:9a:0e:20:16:42:24:96:cd:25:
e6:32:d1:8a:37:c1:7b:4f:69:95:f4:e5:fb:b2:2b:ba:c7:e8:
13:a7:cc:a4:9d:af:67:35:69:40:de:9a:64:48:d3:14:88:ec:
e3:cb:ea:54:8e:9d:1a:f3:aa:18:da:ad:29:2b:df:53:bb:ac:
a2:6d:59:84:56:71:05:60:b3:cc:d4:1b:c1:40:3e:e0:01:d1:
56:d2:cb:6c:1a:ac:5c:ad:7f:f0:48:f0:da:22:3b:41:42:b8:
56:8d:46:bf:47:fd:86:58:95:1c:ee:c5:dd:b6:c6:83:b1:35:
32:1e:44:be:e2:27:d9:db:a3:5e:fc:64:8a:75:55:35:34:33:
a7:46:e5:b3:62:d5:cf:c6:77:0c:6d:47:2d:49:ad:64:c0:32:
fe:16:d2:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 11:21:31 2026 by rpki-client