Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3138352e31332e3232372e302f32342d3234203d3e20323138393131.roa
File: 3138352e31332e3232372e302f32342d3234203d3e20323138393131.roa (raw, json)
Hash identifier: Slf2vGqQS/62E7ptDEE0+E4kft71NUs7UJMlpNExNI4=
Subject key identifier: D3:4D:AE:DF:03:AF:B2:CA:8A:DE:A9:0E:48:9D:81:50:68:9F:47:D8
Certificate issuer: /CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Certificate serial: 7689780FB590726925517E57B896EB2E4DBB78CE
Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3138352e31332e3232372e302f32342d3234203d3e20323138393131.roa
Signing time: Tue 20 Oct 2026 12:12:05 +0000
ROA not before: Tue 20 Oct 2026 12:07:05 +0000
ROA not after: Tue 19 Oct 2027 12:12:05 +0000
asID: 218911
IP address blocks: 185.13.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl
rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft
rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 20:14:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:89:78:0f:b5:90:72:69:25:51:7e:57:b8:96:eb:2e:4d:bb:78:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Validity
Not Before: Oct 20 12:07:05 2026 GMT
Not After : Oct 19 12:12:05 2027 GMT
Subject: CN=D34DAEDF03AFB2CA8ADEA90E489D8150689F47D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:db:10:e5:93:ba:b7:08:28:d5:54:28:b3:06:
8f:bc:2f:d3:67:79:3f:1c:53:9d:dc:8d:cd:7e:6b:
c1:14:96:81:6f:6a:1e:f1:c4:51:81:89:73:41:93:
ea:67:41:d8:77:2e:65:a6:85:63:66:43:94:ab:a5:
18:30:53:b0:45:d3:7b:10:87:64:25:e2:09:4d:be:
a5:82:14:00:36:3d:25:12:6a:89:d0:7e:d6:c9:bb:
1c:11:ab:cc:7f:29:8f:07:b2:67:d6:6d:be:27:60:
72:62:ca:d5:88:2e:4b:bf:9a:a5:99:96:82:3b:b4:
66:08:76:39:ba:c2:4a:a3:6a:1e:e3:14:1f:c6:79:
d1:79:3c:1c:41:f5:27:b2:8f:3f:ba:22:ca:6b:95:
d5:dc:40:d5:f7:be:35:57:2e:0d:c0:fa:6d:74:ff:
ca:51:ae:05:ec:b1:88:c9:67:9d:bc:03:ca:01:1f:
58:8d:58:cc:38:76:1e:14:70:33:d5:66:1a:a4:ba:
e2:b0:ac:f1:17:08:9a:f3:39:d1:42:44:94:29:36:
10:03:1e:f0:dd:ce:48:9f:59:9a:83:28:4a:8d:0f:
95:23:ed:de:f5:c7:cd:b1:78:2e:f6:75:90:95:77:
9b:87:86:06:d6:e7:5b:00:38:07:f1:35:d1:74:c3:
b9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:4D:AE:DF:03:AF:B2:CA:8A:DE:A9:0E:48:9D:81:50:68:9F:47:D8
X509v3 Authority Key Identifier:
keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3138352e31332e3232372e302f32342d3234203d3e20323138393131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.13.227.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:4f:00:7c:bf:98:cc:a4:5d:86:dd:5e:30:d6:3e:f2:91:37:
aa:5a:32:da:f6:4a:6a:85:fd:ab:de:7c:13:bc:34:f4:45:ce:
f7:c9:e5:95:62:88:d7:b5:ed:87:c6:68:10:90:8a:af:52:1a:
4c:22:73:4f:a7:a1:29:47:31:cc:c2:df:7f:ac:f0:ca:80:c6:
bd:0a:4b:92:7d:62:b7:b2:04:2c:d9:60:ff:93:40:64:80:31:
d4:c0:87:15:a5:50:cf:f7:91:6d:fe:77:d6:33:ec:b0:90:f4:
45:fe:c7:e3:29:d1:cc:d2:d6:71:06:d4:f6:84:7d:29:df:a8:
f5:a0:2a:bb:4c:b7:1f:88:0e:59:ce:95:11:31:97:1c:46:05:
52:32:6e:3f:12:d1:44:02:af:85:fd:4d:15:f4:52:6b:a3:9c:
99:e2:f8:b9:5a:bf:c8:69:44:58:8b:80:8a:17:5b:c0:29:88:
9e:0b:81:62:13:ca:30:d5:05:73:38:b7:bf:7a:33:20:3c:ee:
dc:40:8f:a9:0d:18:5b:81:5c:c4:66:29:f5:c5:6b:c9:2c:47:
d2:2c:ea:91:c2:ec:24:4c:99:3b:59:43:94:40:31:6e:f1:e3:
4f:a8:7f:f2:9a:7b:73:2f:bc:e4:33:07:26:96:68:af:be:99:
30:95:70:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:20:49 2026 by rpki-client