Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3138352e3134342e31322e302f32342d3234203d3e20323134313433.roa
File: 3138352e3134342e31322e302f32342d3234203d3e20323134313433.roa (raw, json)
Hash identifier: ZJ7wXNKH0K37X3MGyr0SJdcUUdR6ACeqPfjfmTPWr9U=
Subject key identifier: 15:60:4F:AA:83:97:8D:AF:53:25:E9:F9:65:CA:2F:07:C6:24:61:36
Certificate issuer: /CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Certificate serial: 14141D34EAA8D34DB3EC20FCFAF1E0266D1FAD0B
Authority key identifier: E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3138352e3134342e31322e302f32342d3234203d3e20323134313433.roa
Signing time: Thu 22 Oct 2026 15:55:14 +0000
ROA not before: Thu 22 Oct 2026 15:50:14 +0000
ROA not after: Thu 21 Oct 2027 15:55:14 +0000
asID: 214143
IP address blocks: 185.144.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl
rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:14:1d:34:ea:a8:d3:4d:b3:ec:20:fc:fa:f1:e0:26:6d:1f:ad:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Validity
Not Before: Oct 22 15:50:14 2026 GMT
Not After : Oct 21 15:55:14 2027 GMT
Subject: CN=15604FAA83978DAF5325E9F965CA2F07C6246136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:03:ff:62:df:3d:78:6d:50:a8:af:9b:00:fd:
52:e7:05:54:fe:27:e6:9f:c3:b9:09:39:8b:02:08:
63:31:74:cb:aa:92:cf:1a:f1:db:fc:08:36:e0:e1:
a3:1a:56:1b:7e:32:7f:76:e6:19:b7:81:22:f2:4d:
bd:f9:1b:5a:83:2a:b3:9c:57:5d:c6:7a:2c:c2:d7:
91:b0:bb:fe:1b:73:c0:2c:ee:79:42:fa:2a:0b:74:
86:46:54:27:d3:f6:64:8e:46:9b:b2:92:69:03:8d:
29:f9:6d:4a:96:a2:6c:77:77:72:2d:89:92:59:d9:
33:20:ee:de:b0:51:e3:ad:a0:10:df:dd:ce:21:35:
5d:21:57:2a:fc:42:63:63:12:bc:e8:58:48:9d:54:
d7:07:fc:2a:eb:33:3f:c3:5b:91:e6:5f:df:f8:78:
95:fc:cb:f2:cf:c7:77:ff:37:08:0c:4a:c2:91:d4:
6d:15:d5:82:e1:fc:15:19:32:16:11:31:e9:8e:73:
8b:7e:0d:c5:c2:91:48:d7:12:09:be:27:4b:01:e1:
f5:40:88:7e:44:d2:2e:be:93:b9:6b:91:cf:34:4a:
e4:a8:64:ae:1d:81:10:25:74:cb:84:95:71:42:05:
83:d4:17:15:0f:9f:d2:95:b4:57:18:9c:6e:88:7f:
e2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:60:4F:AA:83:97:8D:AF:53:25:E9:F9:65:CA:2F:07:C6:24:61:36
X509v3 Authority Key Identifier:
keyid:E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3138352e3134342e31322e302f32342d3234203d3e20323134313433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.144.12.0/24
Signature Algorithm: sha256WithRSAEncryption
54:bb:ca:c4:ba:a7:7e:ab:17:e0:f0:66:c1:54:cb:b5:3b:85:
4e:d8:81:88:2c:d0:5d:6f:4b:9a:7b:af:69:aa:43:eb:c9:91:
7c:3d:63:45:a5:6e:bd:43:8e:8e:75:f3:0d:df:1e:eb:89:d6:
da:36:a4:40:23:3d:32:77:01:ee:9b:93:41:72:c2:86:21:6a:
2d:b3:c0:59:42:8b:fa:bb:8c:81:0e:44:5c:62:40:ec:e2:e3:
88:78:a4:4b:7d:ba:9f:1e:d2:68:f9:17:67:2c:89:79:2f:10:
84:9e:e6:fa:30:5c:08:9e:dd:81:fd:cf:7e:f7:1e:92:1e:38:
1d:0a:39:03:0e:d8:ea:c2:68:e0:2a:66:7a:ff:84:44:ba:88:
3d:30:ec:2a:ba:b7:ff:77:4d:97:97:f2:30:32:af:b4:86:e5:
7b:0d:5d:6f:6e:4f:7a:56:9e:8c:49:33:39:7b:d2:f9:13:3f:
38:af:39:d1:db:68:05:68:d6:fe:aa:d7:16:ca:82:8b:12:74:
79:af:67:2e:39:bc:b3:46:bd:11:1b:e5:bc:ff:ce:a3:a9:ea:
c4:44:ba:0c:88:eb:7e:39:3d:c4:b9:28:6b:8f:49:25:1f:95:
4e:72:00:41:07:a3:23:b6:f9:b2:10:4d:96:e2:19:d0:17:91:
66:65:d1:fd
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUFBQdNOqo002z7CD8+vHgJm0frQswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZTFmMzUxMmY1MWRjNDJiYjllYjEyYWJjMGJiNTI5NjY4
YjJlZGVlNDAeFw0yNjEwMjIxNTUwMTRaFw0yNzEwMjExNTU1MTRaMDMxMTAvBgNV
BAMTKDE1NjA0RkFBODM5NzhEQUY1MzI1RTlGOTY1Q0EyRjA3QzYyNDYxMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiA/9i3z14bVCor5sA/VLnBVT+
J+afw7kJOYsCCGMxdMuqks8a8dv8CDbg4aMaVht+Mn925hm3gSLyTb35G1qDKrOc
V13GeizC15Gwu/4bc8As7nlC+ioLdIZGVCfT9mSORpuykmkDjSn5bUqWomx3d3It
iZJZ2TMg7t6wUeOtoBDf3c4hNV0hVyr8QmNjErzoWEidVNcH/CrrMz/DW5HmX9/4
eJX8y/LPx3f/NwgMSsKR1G0V1YLh/BUZMhYRMemOc4t+DcXCkUjXEgm+J0sB4fVA
iH5E0i6+k7lrkc80SuSoZK4dgRAldMuElXFCBYPUFxUPn9KVtFcYnG6If+I/AgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUFWBPqoOXja9TJen5ZcovB8YkYTYwHwYDVR0j
BBgwFoAU4fNRL1HcQruesSq8C7UpZosu3uQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZTNjZGM2NDgtZDIwMy00NjJhLWJkMGYtZWMxYjYwZDg3
OWE3LzAvRTFGMzUxMkY1MURDNDJCQjlFQjEyQUJDMEJCNTI5NjY4QjJFREVFNC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRmTlJMMUhjUXJ1ZXNTcThDN1VwWm9z
dTN1US5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZTNjZGM2NDgt
ZDIwMy00NjJhLWJkMGYtZWMxYjYwZDg3OWE3LzAvMzEzODM1MmUzMTM0MzQyZTMx
MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzQzMTM0MzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAC5kAwwDQYJKoZIhvcNAQELBQADggEBAFS7ysS6p36rF+DwZsFUy7U7hU7YgYgs
0F1vS5p7r2mqQ+vJkXw9Y0Wlbr1Djo518w3fHuuJ1to2pEAjPTJ3Ae6bk0FywoYh
ai2zwFlCi/q7jIEORFxiQOzi44h4pEt9up8e0mj5F2csiXkvEISe5vowXAie3YH9
z373HpIeOB0KOQMO2OrCaOAqZnr/hES6iD0w7Cq6t/93TZeX8jAyr7SG5XsNXW9u
T3pWnoxJMzl70vkTPzivOdHbaAVo1v6q1xbKgosSdHmvZy45vLNGvREb5bz/zqOp
6sREugyI6345PcS5KGuPSSUflU5yAEEHoyO2+bIQTZbiGdAXkWZl0f0=
-----END CERTIFICATE-----
Generated at Mon Oct 26 00:52:35 2026 by rpki-client