Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3138352e3235312e32332e302f32342d3234203d3e20323030303137.roa
File: 3138352e3235312e32332e302f32342d3234203d3e20323030303137.roa (raw, json)
Hash identifier: OQXHvkMUYk1QDZhR0DoeAz0QI4bv3B7tsWGIo840D3k=
Subject key identifier: E0:0D:9A:72:1D:C7:68:32:EF:13:F5:9E:58:D5:C2:A0:09:5E:9C:BB
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 42208DED189B7240E500D05FA4BE872086B76E43
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3138352e3235312e32332e302f32342d3234203d3e20323030303137.roa
Signing time: Thu 13 Aug 2026 08:49:28 +0000
ROA not before: Thu 13 Aug 2026 08:44:28 +0000
ROA not after: Thu 12 Aug 2027 08:49:28 +0000
asID: 200017
IP address blocks: 185.251.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 03:48:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:20:8d:ed:18:9b:72:40:e5:00:d0:5f:a4:be:87:20:86:b7:6e:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Aug 13 08:44:28 2026 GMT
Not After : Aug 12 08:49:28 2027 GMT
Subject: CN=E00D9A721DC76832EF13F59E58D5C2A0095E9CBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c7:1c:88:7c:91:94:5a:bf:92:33:b4:a9:d3:
55:8e:dd:96:bb:a4:5f:bb:d6:af:5a:b9:bd:b2:b1:
fb:a1:c6:2e:cf:eb:01:f2:ea:8f:4a:54:d0:b2:81:
18:8f:d0:af:c2:06:2b:22:34:bf:b6:1f:45:b3:b5:
d2:dc:fb:f1:26:e1:f2:86:04:ae:39:fc:8c:f4:05:
ff:1c:06:17:dd:92:62:94:13:09:00:15:4c:6c:f0:
e4:42:d5:94:e3:cf:28:40:e3:0a:92:53:f9:cb:d5:
5e:8c:d2:9b:e4:8e:2b:c9:3e:7c:af:60:0b:2a:ef:
84:4a:fe:b5:47:bd:d7:d5:c2:bd:a4:a5:e3:2b:ed:
9a:84:b1:6f:19:55:d7:7d:0f:91:c5:86:43:4e:b4:
2b:3d:93:f4:0a:6d:b2:e4:a9:2e:fd:6f:3f:40:5d:
ae:72:46:7e:4e:94:d1:87:b0:41:ee:00:32:d5:15:
37:0a:8e:0f:a9:de:b6:66:16:82:4a:84:23:d4:4c:
2f:94:85:75:35:28:c4:4a:df:46:d8:0c:04:d2:c4:
10:6c:60:30:37:d9:be:3c:61:92:13:49:40:fa:3d:
a6:c7:39:6f:8a:04:3d:ef:37:f9:5a:f7:83:11:ff:
91:95:0d:c2:d5:a2:96:42:3b:ec:26:bf:68:e9:26:
b6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:0D:9A:72:1D:C7:68:32:EF:13:F5:9E:58:D5:C2:A0:09:5E:9C:BB
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3138352e3235312e32332e302f32342d3234203d3e20323030303137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.23.0/24
Signature Algorithm: sha256WithRSAEncryption
95:87:66:03:12:40:52:7a:8b:c1:38:6c:5a:c5:24:af:db:4d:
41:2d:ce:1d:83:1a:65:ba:36:d4:8e:8f:50:c3:49:d0:58:36:
85:f1:ae:21:d8:bf:6d:09:95:6b:c4:13:8d:c0:d6:04:18:19:
50:99:b4:e9:f5:65:02:cf:a7:47:fe:f1:7c:a6:c1:70:7d:47:
d4:1c:95:36:43:3f:71:af:d4:3e:78:54:5a:d6:23:21:a3:36:
a5:a1:32:75:bc:75:25:03:b9:9b:f6:40:46:7e:41:d1:79:0a:
3c:70:a5:a1:d0:98:ea:3b:09:b4:34:6b:5e:e6:59:06:fc:07:
c6:b3:bb:0e:de:86:58:03:97:16:f0:e1:97:8d:8f:80:ff:13:
2a:99:bf:2c:e9:99:e6:da:2d:a1:0d:3d:f9:30:b9:89:d7:b3:
c1:fa:62:69:1d:7c:a5:d4:30:26:40:14:7b:62:94:c8:0b:8c:
dd:d7:53:3a:fa:5a:a8:22:ea:a3:fe:c0:32:5c:3e:cd:62:93:
5a:23:28:e0:bd:7e:19:91:45:69:9c:4d:7b:1f:e3:d9:6b:ef:
e4:6e:37:39:d5:4b:08:92:8d:65:7d:65:2b:83:e3:1e:6f:c4:
ec:8c:36:18:03:21:19:61:23:07:86:da:02:0a:8d:a7:3c:99:
1b:cd:c5:ef
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUQiCN7RibckDlANBfpL6HIIa3bkMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoY2VmY2U0NDliZWE4ZGVhZWRiMTgwNGRiYTI1YzU4NGRm
NTg3M2RjNDAeFw0yNjA4MTMwODQ0MjhaFw0yNzA4MTIwODQ5MjhaMDMxMTAvBgNV
BAMTKEUwMEQ5QTcyMURDNzY4MzJFRjEzRjU5RTU4RDVDMkEwMDk1RTlDQkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2xxyIfJGUWr+SM7Sp01WO3Za7
pF+71q9aub2ysfuhxi7P6wHy6o9KVNCygRiP0K/CBisiNL+2H0WztdLc+/Em4fKG
BK45/Iz0Bf8cBhfdkmKUEwkAFUxs8ORC1ZTjzyhA4wqSU/nL1V6M0pvkjivJPnyv
YAsq74RK/rVHvdfVwr2kpeMr7ZqEsW8ZVdd9D5HFhkNOtCs9k/QKbbLkqS79bz9A
Xa5yRn5OlNGHsEHuADLVFTcKjg+p3rZmFoJKhCPUTC+UhXU1KMRK30bYDATSxBBs
YDA32b48YZITSUD6PabHOW+KBD3vN/la94MR/5GVDcLVopZCO+wmv2jpJrYZAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQU4A2ach3HaDLvE/WeWNXCoAlenLswHwYDVR0j
BBgwFoAUzvzkSb6o3q7bGATbolxYTfWHPcQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDFiMzVmOGItNmY0OC00YmFkLWIxODUtNWMxZGFhOGFj
ZGE5LzAvQ0VGQ0U0NDlCRUE4REVBRURCMTgwNERCQTI1QzU4NERGNTg3M0RDNC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p2emtTYjZvM3E3YkdBVGJvbHhZVGZX
SFBjUS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZDFiMzVmOGIt
NmY0OC00YmFkLWIxODUtNWMxZGFhOGFjZGE5LzAvMzEzODM1MmUzMjM1MzEyZTMy
MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzAzMDMxMzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAC5+xcwDQYJKoZIhvcNAQELBQADggEBAJWHZgMSQFJ6i8E4bFrFJK/bTUEtzh2D
GmW6NtSOj1DDSdBYNoXxriHYv20JlWvEE43A1gQYGVCZtOn1ZQLPp0f+8XymwXB9
R9QclTZDP3Gv1D54VFrWIyGjNqWhMnW8dSUDuZv2QEZ+QdF5CjxwpaHQmOo7CbQ0
a17mWQb8B8azuw7ehlgDlxbw4ZeNj4D/EyqZvyzpmebaLaENPfkwuYnXs8H6Ymkd
fKXUMCZAFHtilMgLjN3XUzr6Wqgi6qP+wDJcPs1ik1ojKOC9fhmRRWmcTXsf49lr
7+RuNznVSwiSjWV9ZSuD4x5vxOyMNhgDIRlhIweG2gIKjac8mRvNxe8=
-----END CERTIFICATE-----
Generated at Mon Aug 17 11:07:29 2026 by rpki-client