Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3138352e3231322e3131332e302f32342d3234203d3e20343032323135.roa
File: 3138352e3231322e3131332e302f32342d3234203d3e20343032323135.roa (raw, json)
Hash identifier: EDeF9+tsFwuqPWdNzyw3pRsVO1vNfrLgo1kh37eKpdc=
Subject key identifier: CC:A7:C7:A9:41:09:F1:D7:D2:21:4A:41:0E:57:08:05:E2:6F:4F:9C
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 019FAB5F2B6232B34935B8271FB56188EBF80224
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3138352e3231322e3131332e302f32342d3234203d3e20343032323135.roa
Signing time: Mon 10 Aug 2026 09:00:52 +0000
ROA not before: Mon 10 Aug 2026 08:55:52 +0000
ROA not after: Mon 09 Aug 2027 09:00:52 +0000
asID: 402215
IP address blocks: 185.212.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Aug 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:5f:2b:62:32:b3:49:35:b8:27:1f:b5:61:88:eb:f8:02:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Aug 10 08:55:52 2026 GMT
Not After : Aug 9 09:00:52 2027 GMT
Subject: CN=CCA7C7A94109F1D7D2214A410E570805E26F4F9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:86:67:18:61:ac:f1:6a:d7:9c:5e:0f:fa:4f:
e3:31:14:ad:d8:5e:73:ac:1c:02:a2:62:91:65:af:
4d:4c:9c:0c:1a:c6:0c:31:ec:58:2a:ce:d8:40:44:
b5:8c:6c:a1:05:69:14:ae:e0:a1:f7:e2:75:49:75:
f4:26:a2:39:38:70:55:e5:de:5d:de:a4:87:22:89:
74:45:07:9c:f3:c5:0a:6a:c0:67:92:66:85:d9:a2:
7c:d4:f1:3d:95:a4:70:19:c5:44:1a:24:e3:9a:c8:
57:bf:43:96:ed:c9:fa:e4:30:46:41:c1:4f:79:29:
b9:aa:e2:2a:69:13:6d:5f:6d:4f:73:1e:ce:ae:e7:
52:be:dc:58:4c:60:b8:3b:ca:5b:8f:dc:18:4a:d7:
58:ee:00:86:b3:42:8f:f4:fc:9e:5c:02:25:ab:21:
c8:47:ae:1c:a5:a7:cc:3a:0f:8c:fc:4d:a8:7c:bd:
7d:4c:35:66:36:34:35:99:0b:82:78:b5:36:c3:48:
c1:93:13:44:b6:21:fc:30:4a:9b:68:2a:a2:7f:39:
6d:94:f3:72:8b:b8:b9:61:16:4a:dc:98:4d:d3:52:
b2:db:fa:0d:c6:9a:4c:95:bb:95:bb:3e:3c:40:7a:
f1:d7:ab:2c:87:94:a7:ff:82:35:4f:f3:1d:d8:8e:
2e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:A7:C7:A9:41:09:F1:D7:D2:21:4A:41:0E:57:08:05:E2:6F:4F:9C
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3138352e3231322e3131332e302f32342d3234203d3e20343032323135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.113.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:d3:65:6e:d0:a5:5f:93:24:f3:3a:15:32:04:7b:07:37:a6:
61:fd:48:c6:7d:f3:11:29:a2:51:4b:ad:9c:c2:01:ac:85:b1:
73:9a:ac:ee:6f:fd:3f:32:97:c4:28:b3:6f:86:f2:ae:bc:47:
cb:8c:aa:46:a3:dc:d0:a6:12:3e:aa:a7:34:cb:a9:3e:64:2b:
45:5c:a9:30:98:fd:5c:d6:27:ad:1b:eb:78:e6:a3:ff:b8:cd:
c8:17:53:e8:e2:b0:f5:06:a3:bb:26:c5:8e:ef:d6:b5:75:bd:
cf:57:c5:89:34:66:93:87:b7:f0:a0:3e:15:72:af:a7:f2:31:
24:94:8d:1a:9f:33:73:52:70:01:75:0b:1a:36:ab:3b:d3:3a:
79:3b:94:0c:66:69:90:06:e0:a4:79:6c:4a:f3:79:ef:87:39:
b3:e7:a4:78:e5:a8:3e:ef:cc:d2:d1:ee:1f:30:85:6e:2d:9b:
8a:63:89:0a:bd:ce:04:20:9c:b0:61:94:44:7d:93:ff:1e:ea:
bd:db:53:74:05:80:7a:6a:f1:1c:c2:2c:0d:bc:08:0c:f7:3c:
35:af:42:74:52:b9:1c:0c:37:3c:15:9c:8c:44:d4:30:5b:e3:
f2:0d:34:de:a8:d4:79:15:c8:ad:3d:57:16:c6:94:02:95:68:
2a:a7:8d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 11 10:39:00 2026 by rpki-client