Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3138352e3132332e3135372e302f32342d3234203d3e203133333335.roa
File: 3138352e3132332e3135372e302f32342d3234203d3e203133333335.roa (raw, json)
Hash identifier: etZX295Om7z5nM36qFCm/OuFaVbSdHRIoDsnpFO5H4E=
Subject key identifier: 12:23:99:46:8C:CC:70:5E:8A:D6:FE:12:8A:38:EE:EB:A5:F8:03:7E
Certificate issuer: /CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Certificate serial: 0350AAAED3338BB245CC00FDADA033B7C7EC1B11
Authority key identifier: E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3138352e3132332e3135372e302f32342d3234203d3e203133333335.roa
Signing time: Mon 28 Sep 2026 21:15:12 +0000
ROA not before: Mon 28 Sep 2026 21:10:12 +0000
ROA not after: Mon 27 Sep 2027 21:15:12 +0000
asID: 13335
IP address blocks: 185.123.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl
rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:50:aa:ae:d3:33:8b:b2:45:cc:00:fd:ad:a0:33:b7:c7:ec:1b:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Validity
Not Before: Sep 28 21:10:12 2026 GMT
Not After : Sep 27 21:15:12 2027 GMT
Subject: CN=122399468CCC705E8AD6FE128A38EEEBA5F8037E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:72:ad:3f:11:2f:b6:94:b0:a1:7e:f2:c6:fd:
c4:74:1b:b0:9d:60:b9:ba:fe:0e:03:b8:84:5b:18:
61:de:b1:f0:8b:41:f6:99:b7:00:67:93:d8:5f:42:
8e:57:e1:f2:52:7d:a8:bc:6f:af:7d:f7:8d:27:29:
61:67:7f:80:35:1e:95:cd:6c:d7:41:d0:a7:8d:30:
af:e5:e2:98:08:6d:7a:ee:61:6a:ef:ce:c7:9b:e5:
86:aa:b8:7d:4f:c9:7e:05:21:f9:e6:7c:69:2a:e2:
28:22:8a:57:f2:a5:cb:c7:b7:d8:19:99:fe:ac:32:
59:41:46:96:1a:04:d5:e8:9e:0e:7a:e6:ee:9f:e8:
84:f4:29:58:dc:a9:77:d5:ca:c4:3d:95:fc:89:da:
1f:e6:c4:c3:4d:b0:81:39:2a:d5:83:a7:69:60:45:
3e:db:0d:67:4c:1a:83:67:1f:19:70:17:c4:ec:ec:
7b:a4:54:9a:e4:2d:bb:ad:0f:ba:b1:4c:08:54:96:
6c:29:f4:9d:16:df:e8:0f:a7:2c:d2:96:d8:5f:1d:
76:78:aa:b7:ff:27:7c:e2:73:5a:61:57:e6:1e:59:
e7:6e:fc:6d:cf:70:4c:3c:2d:92:83:9a:65:44:a6:
b1:31:b1:ad:8e:22:fe:f2:d4:9c:48:f4:31:17:a3:
23:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:23:99:46:8C:CC:70:5E:8A:D6:FE:12:8A:38:EE:EB:A5:F8:03:7E
X509v3 Authority Key Identifier:
keyid:E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3138352e3132332e3135372e302f32342d3234203d3e203133333335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.123.157.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:38:50:12:8f:a1:41:8d:92:43:f6:aa:ec:f1:80:55:85:02:
17:dc:f1:1b:cf:9f:3d:ce:7a:03:34:3f:1e:ee:8d:4f:93:40:
bd:c7:d4:6b:4d:1f:f4:33:76:78:f1:3e:99:bc:d3:3b:6f:80:
35:41:2c:c4:01:95:12:2e:b2:a0:dd:87:da:1b:bd:b9:ed:4c:
bb:1e:82:33:41:3c:bf:78:3c:d6:59:95:7f:6a:47:da:98:b3:
5e:8c:2c:0a:07:8f:bc:8a:ba:de:38:cb:e5:d6:32:65:aa:c1:
46:5a:c6:84:03:92:b0:17:29:4c:71:85:ea:86:9f:8e:0b:3e:
51:91:68:d9:f5:61:84:db:ab:e2:8d:6c:65:df:39:f7:3f:f8:
f9:a7:3f:a3:26:5a:db:33:cf:b9:57:fd:15:6e:5c:9b:6b:16:
71:83:6d:cd:f3:5e:9e:64:14:ce:6f:42:cf:3a:3a:1e:e0:69:
25:bb:cc:38:b2:77:2d:3c:a1:8f:5f:d8:9d:b8:a1:d2:07:42:
78:90:36:31:8d:c5:67:aa:2f:77:61:e3:02:a7:80:2a:c4:e7:
9d:5d:52:d3:1e:81:1b:55:d0:15:7d:e4:5f:08:84:75:37:7f:
c8:34:71:54:bf:49:b8:60:55:70:7b:11:ea:c4:46:b0:f4:20:
63:50:ee:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 20:58:16 2026 by rpki-client