Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3138352e3231322e3131332e302f32342d3234203d3e20343032343837.roa
File: 3138352e3231322e3131332e302f32342d3234203d3e20343032343837.roa (raw, json)
Hash identifier: DKQ8fDDGReS+JOIxFDjkCtMI1t8g7ETCjLBAcPOqjzM=
Subject key identifier: 25:F3:07:D1:E4:8D:DB:5F:1D:7A:9E:6B:BB:A7:BE:C0:92:D9:89:D1
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 017E11AD426031AA92031899F8FC2BB604471A12
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3138352e3231322e3131332e302f32342d3234203d3e20343032343837.roa
Signing time: Sat 01 Aug 2026 06:50:58 +0000
ROA not before: Sat 01 Aug 2026 06:45:58 +0000
ROA not after: Sat 31 Jul 2027 06:50:58 +0000
asID: 402487
IP address blocks: 185.212.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Aug 2026 03:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:7e:11:ad:42:60:31:aa:92:03:18:99:f8:fc:2b:b6:04:47:1a:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Aug 1 06:45:58 2026 GMT
Not After : Jul 31 06:50:58 2027 GMT
Subject: CN=25F307D1E48DDB5F1D7A9E6BBBA7BEC092D989D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:6b:34:f1:b5:37:e6:b9:b3:50:07:7d:aa:03:
aa:be:4b:85:bf:eb:5e:36:9a:a0:33:66:53:c9:77:
a8:74:66:0c:29:ac:35:7d:f8:8c:f5:4c:f2:80:08:
1f:32:69:96:24:87:98:f5:f0:16:98:63:3d:19:54:
af:5d:bc:13:7a:19:16:60:81:bc:bc:9f:49:9b:39:
fe:48:e1:6a:b5:be:90:00:89:62:38:94:06:38:f2:
82:66:a7:0c:82:42:70:f3:11:47:d4:14:b9:20:16:
07:17:99:97:6e:9b:44:19:37:b1:e4:6b:1c:a6:75:
15:34:f8:66:64:05:bb:58:bb:90:0a:e1:a3:df:ab:
50:a5:50:af:14:06:7c:ff:ae:c9:b9:c7:a0:85:20:
67:97:28:a7:1f:7b:2e:51:5c:f0:94:6e:2e:65:67:
1b:b4:fb:85:6f:e7:c6:b8:f4:4b:0e:28:91:b8:09:
a0:84:00:ee:53:ca:c5:9d:f9:b3:8c:e4:35:b4:c2:
d3:02:c9:d3:8d:ba:1f:3e:f5:71:72:84:69:f9:ef:
8e:50:84:f5:a4:d9:db:66:29:35:ab:e9:b8:8a:9a:
11:a3:12:11:ce:79:b2:9f:bd:54:9b:bc:04:cc:3f:
57:8d:6b:fa:17:8d:dd:f0:0b:49:9f:f4:84:16:25:
30:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F3:07:D1:E4:8D:DB:5F:1D:7A:9E:6B:BB:A7:BE:C0:92:D9:89:D1
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3138352e3231322e3131332e302f32342d3234203d3e20343032343837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.113.0/24
Signature Algorithm: sha256WithRSAEncryption
47:52:ca:22:14:9e:64:8d:22:0c:90:e3:b5:d2:36:d4:e5:6a:
92:e9:f1:69:6b:20:4e:15:b2:be:91:69:f2:c4:18:8c:47:f5:
f9:c1:40:29:f8:9e:95:08:d5:04:1f:f0:67:c4:79:85:50:24:
2a:b5:6c:82:d7:c4:34:e5:cc:39:db:ca:b0:50:1b:f2:54:8c:
bf:88:26:ce:ad:e0:61:48:04:b5:42:c8:45:9e:8c:ba:a3:22:
f2:ee:08:4c:28:17:7a:98:bd:ff:0c:1f:55:48:0f:b8:54:1a:
f0:ce:bd:15:80:3a:21:2f:dc:bb:26:67:52:24:f6:60:7b:9d:
fe:8e:45:ed:cb:bb:19:39:12:a0:b9:2f:50:ef:9a:a0:7d:99:
df:6d:9c:70:a3:e3:1e:c7:94:95:bc:34:5c:65:33:13:92:d2:
e7:4f:88:f8:71:5c:d6:c2:df:9b:ad:b5:67:4e:76:d1:d1:35:
0e:9f:27:5b:5c:8d:ce:5f:61:be:f8:7b:e6:ee:f1:7b:5a:68:
00:54:bf:da:fc:bc:a5:7f:80:a1:e6:18:3e:d3:f8:8c:0b:86:
0c:c3:ca:88:85:63:60:67:10:bd:65:bb:b5:79:86:65:10:1a:
9c:8d:b7:97:4c:96:6d:d7:96:a5:ec:93:ba:3d:d2:67:f7:f7:
d0:01:04:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 2 07:58:41 2026 by rpki-client