Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3138352e3132332e3135392e302f32342d3234203d3e20333936333536.roa
File: 3138352e3132332e3135392e302f32342d3234203d3e20333936333536.roa (raw, json)
Hash identifier: oKlOYt/ivogY03DODAeqT+usA/kmhETdr3gop9LZK2c=
Subject key identifier: 8F:02:F6:D7:7B:6A:F4:32:FD:70:BF:75:B8:97:70:A8:5B:55:9B:F3
Certificate issuer: /CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Certificate serial: 6747407580CF1EE3C820CC98A05BACA93A0E3EEB
Authority key identifier: E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3138352e3132332e3135392e302f32342d3234203d3e20333936333536.roa
Signing time: Fri 29 May 2026 16:47:18 +0000
ROA not before: Fri 29 May 2026 16:42:18 +0000
ROA not after: Fri 28 May 2027 16:47:18 +0000
asID: 396356
IP address blocks: 185.123.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl
rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 11:38:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:47:40:75:80:cf:1e:e3:c8:20:cc:98:a0:5b:ac:a9:3a:0e:3e:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Validity
Not Before: May 29 16:42:18 2026 GMT
Not After : May 28 16:47:18 2027 GMT
Subject: CN=8F02F6D77B6AF432FD70BF75B89770A85B559BF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:93:f5:39:22:da:82:88:90:91:a4:ef:09:de:
4d:6f:44:d1:3a:52:0c:ad:7a:72:b1:e6:01:ef:e3:
5d:2e:39:83:ef:b6:6a:e6:cd:29:bf:89:55:f7:49:
b2:ba:7e:ce:55:a8:41:5a:2b:de:d3:c3:ac:ec:d3:
08:ac:6b:fa:e6:80:22:a5:7c:96:7c:ec:1b:2d:0f:
c7:d6:2e:1a:bc:e4:1f:14:6f:03:3c:e3:2a:52:0d:
70:ad:6f:e7:58:7f:56:9f:f0:77:13:ba:6c:16:af:
aa:c2:1a:df:0e:80:da:35:a5:4a:21:43:0e:0a:64:
af:a8:09:f2:23:70:ad:39:66:b9:36:41:08:dd:62:
01:2a:32:32:02:d6:00:47:44:65:c1:ab:ca:da:8d:
f2:f1:94:00:1f:5c:54:08:0d:ca:d7:80:ec:a8:cd:
92:27:09:d0:9e:06:97:6d:54:f4:36:4c:cc:17:44:
46:43:59:c0:55:b6:e1:f7:8e:db:ea:2f:3f:58:58:
95:69:63:d9:6e:54:ae:83:98:bd:20:7a:a8:d8:78:
31:84:77:3f:3e:ba:03:0f:d2:ab:5c:6f:5e:54:d8:
a8:49:a9:79:65:e1:1b:9d:55:d3:21:79:09:db:a5:
0d:a9:c9:e4:36:e6:ed:90:b3:d3:08:ad:29:69:ee:
bb:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:02:F6:D7:7B:6A:F4:32:FD:70:BF:75:B8:97:70:A8:5B:55:9B:F3
X509v3 Authority Key Identifier:
keyid:E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3138352e3132332e3135392e302f32342d3234203d3e20333936333536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.123.159.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:f5:e6:a9:3c:1c:de:32:87:fe:00:e4:67:7e:41:3e:92:ba:
0a:cb:c3:d4:99:bb:77:41:ea:ae:b9:a6:1f:25:3b:09:1a:70:
94:5d:1c:20:68:11:1d:0b:de:d5:ac:ba:16:85:41:6c:11:e9:
a8:bf:af:1d:99:bb:83:91:d3:31:47:9d:44:e6:1d:f9:d7:02:
2e:03:92:26:16:a4:c1:e6:93:14:77:f1:fd:ee:c2:a0:5a:a6:
ab:7f:f1:03:7b:0c:bb:57:20:31:21:b9:c4:43:7e:32:7c:eb:
cb:2e:6d:44:23:38:0e:a1:20:e9:63:16:4c:ed:06:24:d3:99:
b5:f5:f7:73:85:09:0b:60:eb:fa:d4:92:9e:bd:49:ae:93:cc:
04:30:7b:a2:d9:f4:b3:84:bd:c8:22:87:e4:48:f2:f9:0a:d2:
03:e9:10:6c:7b:d2:93:b7:2b:fa:7b:fb:6e:d2:e4:2c:7c:b4:
35:5b:7a:a3:19:45:04:03:9e:02:b3:c2:10:fe:47:0f:dd:7a:
e4:e8:59:e0:d9:f2:78:66:85:19:10:8f:6b:21:d1:e9:eb:99:
b9:93:9b:3a:d0:87:e8:40:09:73:12:12:7b:ca:9a:49:8f:6d:
a4:a9:ee:03:25:6a:73:d3:82:35:50:68:51:92:53:db:e4:93:
37:30:bd:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:54:29 2026 by rpki-client