Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3138352e3231322e3131332e302f32342d3234203d3e20313436383731.roa
File: 3138352e3231322e3131332e302f32342d3234203d3e20313436383731.roa (raw, json)
Hash identifier: 6q2pez/O7BGAp2GFm//j4qoEXFT0jcPAFXn0Os1NfJ8=
Subject key identifier: 49:7F:EB:3B:EE:5F:71:F8:2A:16:E0:83:B6:4E:03:FC:4F:FD:55:1E
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 46A7C60B284B84FA46519137ABE3852626ABE6D2
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3138352e3231322e3131332e302f32342d3234203d3e20313436383731.roa
Signing time: Mon 03 Aug 2026 09:49:22 +0000
ROA not before: Mon 03 Aug 2026 09:44:22 +0000
ROA not after: Mon 02 Aug 2027 09:49:22 +0000
asID: 146871
IP address blocks: 185.212.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:a7:c6:0b:28:4b:84:fa:46:51:91:37:ab:e3:85:26:26:ab:e6:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Aug 3 09:44:22 2026 GMT
Not After : Aug 2 09:49:22 2027 GMT
Subject: CN=497FEB3BEE5F71F82A16E083B64E03FC4FFD551E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:be:a3:5a:72:95:64:35:1d:63:ca:4c:6a:7c:
4b:58:b7:aa:6c:ce:ec:81:2a:61:df:36:d5:44:32:
29:48:cc:99:26:64:24:04:9d:03:7a:98:41:18:c2:
55:7c:0d:f9:4d:6e:29:33:09:98:b2:4d:51:01:6f:
19:a0:e4:5e:02:ae:61:60:29:c3:48:12:7c:ae:50:
e6:3b:c0:59:4d:7d:46:4c:2f:68:ea:17:22:98:83:
69:5c:c2:46:31:f7:96:c4:97:c7:fc:97:52:18:81:
60:21:a7:21:5e:15:54:c5:27:89:7a:87:13:fe:83:
1f:d4:c8:02:7a:ed:e7:1a:c3:83:22:5e:c6:3c:f1:
46:56:05:fe:a8:14:c9:59:d4:44:09:2c:47:e1:a8:
1c:a1:fc:e4:67:89:1d:26:0b:77:b8:53:d8:80:5c:
2a:3b:8f:13:a2:b3:7a:a2:05:86:63:c0:ca:f9:37:
98:61:30:c1:c5:7b:39:ed:af:71:09:9f:8b:44:b9:
a6:c9:df:30:bb:7a:06:24:1f:81:5c:ff:90:fa:a0:
87:d3:1c:ac:8c:8a:d5:f7:b4:0d:2a:2d:ab:f1:30:
94:98:ec:63:98:55:d9:03:d5:1a:4c:58:a9:e5:c2:
c3:c8:a3:b0:4c:97:63:bb:2e:50:16:a9:8b:1b:45:
6f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:7F:EB:3B:EE:5F:71:F8:2A:16:E0:83:B6:4E:03:FC:4F:FD:55:1E
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3138352e3231322e3131332e302f32342d3234203d3e20313436383731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.113.0/24
Signature Algorithm: sha256WithRSAEncryption
87:e2:0b:e0:39:4c:4c:a6:84:40:31:59:e9:61:f8:5c:5a:eb:
31:dd:1a:fa:8d:b9:d4:a5:37:03:74:7e:b7:7b:98:1f:a8:e7:
13:0f:aa:dc:f7:96:83:1f:a4:7b:8b:da:8d:55:cc:52:17:31:
d4:db:a3:3d:15:9a:9c:ef:52:1a:b8:26:b4:d7:45:80:d1:ba:
3d:13:73:47:75:44:99:5b:a7:4e:bd:2a:51:8d:e5:72:8d:7f:
2e:5a:65:87:24:a1:2f:1a:d5:22:3e:7a:f3:84:1b:29:13:01:
79:df:83:83:bc:c2:61:84:6c:66:57:66:c3:f4:75:20:dd:29:
63:b7:4b:23:16:12:9f:63:21:a2:1d:14:6e:09:23:85:85:f0:
3e:ae:6b:48:fb:29:82:ea:bf:cb:12:5e:d6:27:56:05:b8:71:
70:7b:88:34:3d:9c:f1:62:a8:e6:0c:16:b8:55:3d:32:40:bd:
01:89:7c:d0:b0:31:74:fd:c6:3f:bd:a5:a4:ec:1c:58:36:ff:
c4:0d:56:1c:0c:24:57:9c:ef:26:6a:74:63:a7:73:88:8b:01:
bd:a9:17:07:9e:e8:38:85:a4:55:2c:0a:3e:18:53:12:69:c7:
44:e4:bc:41:1c:7d:94:a8:fb:0d:98:58:2b:61:18:e4:a6:bb:
29:8c:8d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 12:19:02 2026 by rpki-client