Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3138352e3136322e3137362e302f32342d3234203d3e20313938353636.roa
File: 3138352e3136322e3137362e302f32342d3234203d3e20313938353636.roa (raw, json)
Hash identifier: wdDoFtNGXJtx9AeIa/wBLVX+rkVY2r5hbgvzi0m8KQg=
Subject key identifier: E2:66:5A:71:67:52:F9:73:BA:34:13:74:F7:1E:97:0A:25:51:4F:A1
Certificate issuer: /CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Certificate serial: 1E7D5F7256A6D2A4C9EBF2FDA3863D0013C7AE24
Authority key identifier: E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3138352e3136322e3137362e302f32342d3234203d3e20313938353636.roa
Signing time: Mon 05 Oct 2026 09:04:36 +0000
ROA not before: Mon 05 Oct 2026 08:59:36 +0000
ROA not after: Mon 04 Oct 2027 09:04:36 +0000
asID: 198566
IP address blocks: 185.162.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl
rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 22:59:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:7d:5f:72:56:a6:d2:a4:c9:eb:f2:fd:a3:86:3d:00:13:c7:ae:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Validity
Not Before: Oct 5 08:59:36 2026 GMT
Not After : Oct 4 09:04:36 2027 GMT
Subject: CN=E2665A716752F973BA341374F71E970A25514FA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c3:37:a0:53:56:38:b4:32:ac:f8:f0:78:b4:
95:ff:a5:e9:f9:58:4a:60:ef:be:b8:c8:02:f4:31:
56:e0:eb:94:87:da:63:95:f8:1b:17:47:26:6e:7d:
6a:81:90:fb:55:2a:1b:05:89:76:5f:f7:5e:7e:65:
fd:b7:7f:21:9f:59:24:86:49:37:40:41:fd:d6:bc:
77:22:f5:87:a2:d7:61:cd:40:30:a2:1e:c0:40:c1:
cf:b6:3f:0f:cc:14:e9:5e:b7:9b:58:b1:53:8f:8e:
e4:c3:46:d0:0b:38:29:78:ff:96:be:ff:37:89:f5:
fc:4e:1c:8f:ae:7c:62:d3:18:ef:88:10:d7:c3:fd:
66:11:e8:b5:f4:5c:9f:9f:e9:5b:2c:68:41:28:93:
26:14:20:75:25:68:88:a6:98:0c:0d:01:84:6c:b8:
a8:c2:90:ca:ac:aa:a1:1a:96:87:39:72:25:f9:a3:
7e:96:a7:fc:8d:99:0b:26:00:e9:a6:54:7a:c8:b4:
f6:94:3e:8d:f8:20:4d:78:70:e3:e0:d9:a6:4c:d6:
e5:db:0a:16:f0:93:e2:1a:4d:24:cb:ec:b8:08:13:
b9:05:c2:d9:d2:64:3b:eb:9c:61:6e:a7:40:c9:cb:
2f:d0:53:e9:40:55:b9:04:cb:1b:16:6f:19:7c:bd:
52:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:66:5A:71:67:52:F9:73:BA:34:13:74:F7:1E:97:0A:25:51:4F:A1
X509v3 Authority Key Identifier:
keyid:E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3138352e3136322e3137362e302f32342d3234203d3e20313938353636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.176.0/24
Signature Algorithm: sha256WithRSAEncryption
71:96:9b:d4:d3:bd:89:4e:c4:ba:bd:39:ff:e0:52:aa:f3:09:
7b:d8:cc:5e:db:dd:34:8f:55:a4:2a:12:b7:6a:84:91:ec:02:
7f:f9:ca:d8:eb:06:95:6e:c8:2f:3b:d7:77:28:4c:27:16:d1:
d1:b8:c1:1a:c0:98:0b:d5:52:0f:04:42:69:64:08:33:a6:eb:
3c:e3:5c:ca:5f:c8:94:ee:79:98:a0:da:96:71:04:85:51:c9:
4e:4c:86:29:25:5d:61:1c:80:40:50:f4:ba:a4:d5:23:0b:a2:
3e:61:27:3c:5c:78:7d:f5:97:8f:a0:4f:7f:2f:86:b1:db:a6:
c1:b9:06:91:7f:8e:c4:98:d5:64:0f:ff:37:21:6f:f3:1f:06:
b8:77:a1:49:83:f6:9b:cc:f7:31:cd:ef:80:e8:e2:4f:a9:5d:
a6:66:d4:8d:3a:ef:dd:f7:8b:b5:8d:3f:36:83:67:29:41:06:
cc:48:50:29:f1:90:17:98:28:90:9d:19:88:b7:03:9f:d4:68:
22:60:5b:f6:2b:92:05:0d:ca:61:15:c2:2a:ed:1b:cc:df:ea:
02:91:35:ed:66:9a:e4:ea:85:61:a2:4e:25:92:52:7b:3f:37:
89:5d:95:ed:9f:80:28:3e:3e:94:06:d4:b3:ea:f5:5c:96:8d:
83:65:3b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:56:32 2026 by rpki-client