Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3138352e31332e3232372e302f32342d3234203d3e20323139303735.roa
File: 3138352e31332e3232372e302f32342d3234203d3e20323139303735.roa (raw, json)
Hash identifier: rZHA0UZyNZ5R7uvhzS0F/m2O4iaZav8bzKzxSw+K3e8=
Subject key identifier: A2:24:1B:CA:F5:B9:83:3C:5C:9D:6C:3C:EA:73:56:4E:C3:B8:8D:92
Certificate issuer: /CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Certificate serial: 44C1801DF8923C352FD2AD22ECD3CE64FF12B859
Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3138352e31332e3232372e302f32342d3234203d3e20323139303735.roa
Signing time: Tue 20 Oct 2026 12:12:05 +0000
ROA not before: Tue 20 Oct 2026 12:07:05 +0000
ROA not after: Tue 19 Oct 2027 12:12:05 +0000
asID: 219075
IP address blocks: 185.13.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl
rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft
rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:c1:80:1d:f8:92:3c:35:2f:d2:ad:22:ec:d3:ce:64:ff:12:b8:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Validity
Not Before: Oct 20 12:07:05 2026 GMT
Not After : Oct 19 12:12:05 2027 GMT
Subject: CN=A2241BCAF5B9833C5C9D6C3CEA73564EC3B88D92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9d:0a:c6:f0:f5:f0:b4:c4:80:30:f6:d3:7b:
79:95:cc:ae:6c:bd:f1:9b:af:61:fe:15:79:f2:da:
29:68:5b:aa:09:9f:bf:13:71:8c:8f:fb:f5:22:79:
e3:1d:e9:23:5e:be:7a:86:74:51:83:ff:bd:8e:fb:
db:52:2e:75:0b:ba:57:e5:91:4c:73:eb:f1:4c:b7:
f9:ff:74:50:4e:8a:75:ad:04:4b:d4:93:0f:1e:be:
9a:ab:66:45:c0:a6:9d:a7:6b:32:6c:94:0c:a1:1f:
b6:a2:1c:4a:99:1b:5f:7d:7d:32:3d:ff:58:67:0e:
05:d9:b2:e2:da:e4:45:d6:64:ca:3b:a8:80:41:0f:
88:49:0a:da:e4:2c:8e:09:b0:2d:00:c9:14:8a:ae:
8e:c2:e6:4e:31:34:54:96:b1:17:72:51:12:5a:ed:
75:13:2b:39:bc:5b:03:cf:71:92:e8:3c:e5:9d:ea:
fb:06:b4:af:49:88:d6:26:e5:f1:ba:ae:0a:43:34:
bb:b4:13:78:86:8c:55:3e:bb:b8:32:ee:ca:3f:5b:
22:03:bb:4a:20:6e:69:81:94:2a:35:1a:45:9f:60:
94:04:59:be:b0:47:df:7e:7e:89:36:fa:ad:a5:26:
11:b2:7c:d1:8a:01:f9:1c:be:2f:16:c7:6c:b1:37:
4e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:24:1B:CA:F5:B9:83:3C:5C:9D:6C:3C:EA:73:56:4E:C3:B8:8D:92
X509v3 Authority Key Identifier:
keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3138352e31332e3232372e302f32342d3234203d3e20323139303735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.13.227.0/24
Signature Algorithm: sha256WithRSAEncryption
99:5b:96:38:cf:c8:8d:86:f2:17:77:b2:51:da:ae:5c:67:d2:
6f:6a:9c:18:14:01:b4:6f:47:eb:bd:01:85:ed:fd:3f:cf:96:
00:f1:74:36:bf:d4:58:1b:d0:e5:28:d5:73:b1:1a:b8:85:cb:
38:85:4f:fe:14:77:73:d7:68:8e:2e:20:45:2c:35:92:11:c8:
0c:68:27:0d:0a:51:3b:0c:10:2d:88:c3:66:60:49:7a:07:a4:
db:08:09:94:b3:70:f8:8e:ed:cf:7b:bb:77:bd:30:3d:84:40:
98:e0:fa:7f:ef:bc:40:e7:74:60:fa:ea:3b:11:ff:1e:a9:ab:
b6:a9:02:10:77:2e:6f:a7:04:2a:5e:54:64:98:a0:25:7c:41:
12:cb:86:9d:3b:9e:ad:c1:ee:e9:6c:f2:96:17:20:91:47:db:
b6:73:63:c5:8f:35:da:45:70:df:48:b6:c7:6c:a4:f3:89:2a:
4c:c8:9b:5f:5f:73:91:5c:06:e6:cb:c6:5f:d7:80:1d:c0:64:
13:09:bb:e6:bf:30:38:f7:c6:7b:0b:33:2d:ae:f6:bd:39:96:
78:40:6f:16:8d:5c:73:5d:00:e9:0b:10:5f:af:e3:33:8f:00:
a0:e6:48:98:69:e1:b6:d4:f4:bb:37:e2:4d:3a:d6:76:d9:60:
14:ab:15:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:30:46 2026 by rpki-client