Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3138352e3136322e3137372e302f32342d3234203d3e203330303538.roa
File: 3138352e3136322e3137372e302f32342d3234203d3e203330303538.roa (raw, json)
Hash identifier: glvI8KA5Mlz1qugjW7p3hT+2BSoQqvSz/4XgBMswo28=
Subject key identifier: 67:61:17:3F:C6:25:30:E9:30:69:F4:8D:8C:87:30:43:B1:4C:F7:F6
Certificate issuer: /CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Certificate serial: 43DE8C567EEB14A384EC0AB36A2BA2E7372C7E35
Authority key identifier: E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3138352e3136322e3137372e302f32342d3234203d3e203330303538.roa
Signing time: Wed 27 May 2026 19:39:07 +0000
ROA not before: Wed 27 May 2026 19:34:07 +0000
ROA not after: Wed 26 May 2027 19:39:07 +0000
asID: 30058
IP address blocks: 185.162.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl
rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 14:34:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:de:8c:56:7e:eb:14:a3:84:ec:0a:b3:6a:2b:a2:e7:37:2c:7e:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Validity
Not Before: May 27 19:34:07 2026 GMT
Not After : May 26 19:39:07 2027 GMT
Subject: CN=6761173FC62530E93069F48D8C873043B14CF7F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:36:4e:2d:a8:63:d8:41:ec:2f:54:e9:7b:c6:
8f:d1:33:7b:f2:9b:15:3f:79:1b:d8:21:8b:d0:ae:
f7:53:99:75:db:4d:32:5b:fb:0c:15:1f:a7:c6:26:
a2:37:88:79:fb:c2:48:0c:c4:74:10:16:16:1d:f6:
6a:61:f3:aa:ed:12:5c:ae:25:6d:ac:47:f8:97:39:
64:f0:61:7c:f3:46:d5:9b:2a:9c:a0:19:63:30:81:
a9:78:23:f8:59:64:6a:17:cb:d2:a1:7b:cb:7f:78:
4b:98:04:93:d0:ae:a9:04:b5:96:32:a6:ba:9c:85:
2e:62:f0:ea:bb:ad:b5:3c:e2:72:85:51:77:8f:12:
88:b0:18:b2:17:31:b6:67:fb:10:a3:3e:61:5b:54:
67:a8:aa:bc:f9:7c:6d:78:4f:e6:a6:49:9e:6e:c2:
7c:9d:5b:e7:74:71:31:be:f5:f1:9b:c3:2d:92:79:
41:5a:52:99:68:34:46:3f:a1:6d:ce:3f:a5:0c:ef:
a1:48:36:35:bc:f4:ac:72:74:6a:36:92:cc:39:d2:
94:07:97:c9:8c:94:df:51:c6:eb:25:7d:c1:76:88:
98:83:98:26:90:ba:7b:cb:be:d2:2e:72:4d:e8:4b:
6b:a6:99:54:ee:64:05:57:22:e8:23:2d:ab:b2:6d:
f7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:61:17:3F:C6:25:30:E9:30:69:F4:8D:8C:87:30:43:B1:4C:F7:F6
X509v3 Authority Key Identifier:
keyid:E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3138352e3136322e3137372e302f32342d3234203d3e203330303538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.177.0/24
Signature Algorithm: sha256WithRSAEncryption
02:b7:41:e3:1b:b4:4d:84:40:2f:d7:b8:4f:3f:e2:1d:dd:a0:
55:e6:49:cb:69:f4:3a:ae:bd:7b:61:5a:c5:3d:52:9c:a8:55:
e7:dc:cc:7e:ae:11:ab:07:9d:98:b7:4c:6b:84:c6:8a:fd:a4:
d6:e3:f4:1c:da:99:42:f0:6d:6d:1f:53:40:70:42:21:18:3b:
8d:3a:77:88:ef:48:8e:f9:39:9e:2e:32:de:09:99:ef:40:89:
54:d2:3c:1c:0a:0b:7a:03:cd:ea:65:7a:fd:9d:d2:b1:e5:d0:
b8:ac:1d:1b:00:3b:dc:6b:49:d8:fa:67:80:89:53:f9:ce:76:
49:23:33:b9:8f:d8:df:70:e8:e1:fa:6f:45:87:f5:9f:b5:30:
b7:4b:2d:ba:52:ff:68:68:99:c4:a6:b8:a7:ce:c7:31:a1:0a:
9a:8e:e2:07:28:8a:7c:34:a8:99:0e:f9:9d:f1:d5:f0:3e:e1:
5a:92:a9:7b:cf:a4:4c:84:d1:80:20:43:ca:12:9a:a8:b8:26:
5a:9d:45:ae:39:76:eb:f4:ec:26:fe:76:65:4d:65:39:36:ac:
ca:8a:d0:92:bf:b0:26:6b:60:8b:47:d7:8b:10:d2:ec:f4:2d:
7e:aa:2b:c6:8a:b7:f1:4d:cb:61:5f:1e:f3:97:40:88:9e:1c:
f1:16:60:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 23:33:07 2026 by rpki-client