Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3138352e31332e3232372e302f32342d3234203d3e2039333034.roa
File: 3138352e31332e3232372e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier: K2jdp87W7OWk11i68RJYc6WUM+0fdCVTP9+PN22bU6U=
Subject key identifier: CC:76:92:3B:7F:03:F6:A5:F0:51:48:D9:08:DC:03:B8:FA:C3:70:5B
Certificate issuer: /CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Certificate serial: 26840A3ABE0E087D514EAA7D1B9668D0B93452C3
Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3138352e31332e3232372e302f32342d3234203d3e2039333034.roa
Signing time: Sat 25 Oct 2025 12:26:05 +0000
ROA not before: Sat 25 Oct 2025 12:21:05 +0000
ROA not after: Sat 24 Oct 2026 12:26:05 +0000
asID: 9304
IP address blocks: 185.13.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl
rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft
rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 02:44:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:84:0a:3a:be:0e:08:7d:51:4e:aa:7d:1b:96:68:d0:b9:34:52:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Validity
Not Before: Oct 25 12:21:05 2025 GMT
Not After : Oct 24 12:26:05 2026 GMT
Subject: CN=CC76923B7F03F6A5F05148D908DC03B8FAC3705B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2e:85:86:06:fb:2a:3b:9b:57:53:55:24:c3:
75:f0:37:ca:65:6e:67:f2:45:bc:38:cf:c7:c1:22:
db:23:93:79:05:7c:99:56:e9:fc:ad:44:85:90:e9:
ae:14:7c:aa:62:af:b5:3d:45:98:34:ed:64:05:c3:
20:e0:6e:e2:43:8c:cd:2f:8a:a4:52:45:30:60:5b:
70:95:2e:2d:52:32:52:b9:a8:d7:a1:27:b8:b2:f4:
d0:89:1f:f6:f6:53:1a:74:0b:9b:ad:86:b4:b2:5d:
83:42:c4:a1:18:cc:2b:e5:bb:be:b0:d5:b2:5c:be:
48:4f:70:8a:f6:19:6a:72:c2:d7:6a:f2:5d:8e:f6:
8d:64:82:19:71:20:8c:9e:b6:b6:4d:8b:1a:29:0f:
9f:a4:ae:d5:78:26:a5:0f:39:51:b8:cf:19:5a:57:
6b:26:86:69:b7:1a:af:d5:9b:4a:8d:c4:7d:e5:f9:
fe:1d:fe:43:34:12:79:b4:ec:64:af:04:00:4a:b0:
00:fa:5f:11:5c:9d:37:db:ca:e0:f6:51:73:24:85:
91:5b:fb:ac:2d:c5:a3:65:9f:e6:20:3e:f3:ac:c7:
cd:b5:a7:e5:cf:dc:61:3a:c8:54:c8:18:db:af:dd:
6e:61:cb:82:ea:a8:01:6c:45:16:66:45:66:0c:6a:
fa:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:76:92:3B:7F:03:F6:A5:F0:51:48:D9:08:DC:03:B8:FA:C3:70:5B
X509v3 Authority Key Identifier:
keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3138352e31332e3232372e302f32342d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.13.227.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:fe:83:f5:4d:4c:c0:f3:b4:16:8a:0a:54:99:cc:6c:80:34:
a2:c8:1a:18:d0:fd:9f:c6:32:26:2e:fb:79:c9:1d:c1:fb:a3:
0d:31:53:42:fc:d3:2b:4d:09:de:83:af:22:4b:e1:9c:df:a0:
8b:0f:2a:3a:71:e2:27:75:b5:c0:41:ee:9e:c1:7c:85:f1:be:
79:6b:b6:2a:34:b3:cb:dc:8e:c5:b8:d3:3e:65:8c:de:78:97:
60:bb:e2:7e:e0:a9:1a:c3:be:3f:15:c7:9d:dc:0a:5a:62:eb:
d5:1e:52:6b:c2:4b:91:e2:7b:d0:56:82:a6:78:78:21:85:a5:
45:d6:07:c5:48:89:4d:e9:d7:cb:1d:63:94:40:6b:ad:49:ff:
b9:95:47:5f:8e:77:c2:bd:a3:99:d0:d3:a5:e0:ae:f3:d8:09:
ff:29:6f:16:d5:ae:fd:d4:a5:30:c7:ee:02:84:e4:ce:af:6b:
18:de:4d:36:5a:04:fa:91:8e:6c:58:8b:a8:37:8f:5c:76:19:
d2:4d:bb:6f:c1:8d:65:e9:81:79:65:85:b5:85:fa:a0:1f:9e:
50:ea:e9:dc:04:d7:ce:c0:c9:18:57:b1:8c:3d:7c:a2:80:a0:
b8:d3:6d:06:76:24:aa:94:9e:ca:75:29:8c:38:11:68:1e:44:
fd:a5:64:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 09:44:01 2025 by rpki-client