Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3138352e33332e32362e302f32342d3234203d3e20323132363039.roa
File: 3138352e33332e32362e302f32342d3234203d3e20323132363039.roa (raw, json)
Hash identifier: StvUkxWAE+cFieU3uToD4GXXDDAlKXKMH9/0h+2uU3s=
Subject key identifier: 00:60:30:CA:4C:BC:19:89:72:67:C8:AB:B9:0A:57:76:CE:F2:D0:C1
Certificate issuer: /CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Certificate serial: 683A7448F1DD789403FC471669717B1E28424438
Authority key identifier: E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3138352e33332e32362e302f32342d3234203d3e20323132363039.roa
Signing time: Fri 29 May 2026 13:47:18 +0000
ROA not before: Fri 29 May 2026 13:42:18 +0000
ROA not after: Fri 28 May 2027 13:47:18 +0000
asID: 212609
IP address blocks: 185.33.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl
rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 11:38:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:3a:74:48:f1:dd:78:94:03:fc:47:16:69:71:7b:1e:28:42:44:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Validity
Not Before: May 29 13:42:18 2026 GMT
Not After : May 28 13:47:18 2027 GMT
Subject: CN=006030CA4CBC19897267C8ABB90A5776CEF2D0C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ad:22:d7:c2:00:5c:cc:b7:f0:40:b0:64:08:
4f:05:19:7e:66:f8:68:0b:55:21:25:c3:64:5b:0f:
bf:d4:70:5f:8e:29:33:d9:8d:71:f2:08:fa:04:c1:
60:53:46:62:a4:71:3f:32:a0:df:57:82:ae:7f:c3:
f7:28:9a:50:7b:5c:03:0f:e6:62:5c:7a:7f:89:7e:
8a:04:2d:24:6b:96:db:0b:5d:e4:81:eb:6d:62:cc:
df:2d:af:5e:2a:db:bc:d0:ee:7b:87:d2:89:3f:45:
b2:42:5d:08:b3:40:3e:84:1c:19:0d:05:44:6b:23:
45:a9:c0:7e:c8:72:5c:f5:e6:5d:fc:24:20:26:79:
7b:38:bc:4a:eb:37:35:fc:23:09:e7:c6:bf:d6:d0:
52:f2:20:3c:9a:48:cc:dd:22:b3:12:81:e7:67:32:
cd:73:fe:14:8d:50:9a:0e:ce:a2:61:93:1b:ca:97:
64:9d:89:29:e6:99:90:95:2e:79:00:73:b8:52:95:
55:5d:b5:98:0b:8b:c3:8d:98:dc:42:21:50:0d:0e:
ce:af:36:e7:96:17:c1:13:de:96:8f:05:47:ad:7d:
29:d7:7b:84:ac:c2:ef:fa:ae:67:89:a0:ae:62:f0:
53:f1:85:b1:24:22:e5:85:6b:d3:e9:5a:fc:f5:11:
b6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:60:30:CA:4C:BC:19:89:72:67:C8:AB:B9:0A:57:76:CE:F2:D0:C1
X509v3 Authority Key Identifier:
keyid:E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3138352e33332e32362e302f32342d3234203d3e20323132363039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.33.26.0/24
Signature Algorithm: sha256WithRSAEncryption
50:99:ef:d5:3b:66:df:60:95:b0:40:b1:5d:41:d7:e6:ec:7b:
b5:37:a6:69:5b:da:af:8f:c1:0d:d4:a9:0c:93:1e:d4:d1:cc:
f6:ba:d3:70:63:bc:a9:fe:21:f3:e9:4d:1c:72:65:28:c4:39:
96:a1:cd:65:74:0b:cc:30:3b:97:c3:cf:85:a1:47:5c:23:29:
c7:d5:70:4a:5a:ab:ac:40:94:9b:59:2c:6d:1a:0a:e8:7e:5c:
8f:bd:12:ad:fb:f2:e5:55:6f:52:fd:c4:47:a4:b3:e8:75:7b:
f5:1e:cc:d4:df:8e:ed:63:bc:ee:7c:0c:b3:59:b0:6c:39:d8:
6e:b0:49:5f:97:d2:73:ea:17:6f:8a:e1:64:05:91:03:f2:ac:
d3:9c:dc:63:12:6c:b4:c2:ca:96:a0:bb:e6:61:12:b0:0d:d3:
1c:34:51:da:c1:a7:ab:90:74:24:bc:52:b7:85:31:c4:01:a9:
bd:f2:c3:68:71:7a:6f:2d:00:a9:bc:be:be:82:ee:20:df:6b:
56:2e:da:4c:89:fb:da:1c:1a:a4:81:ce:8d:d3:73:00:cd:ff:
ec:bf:c6:d7:52:33:e8:e8:88:7d:16:a7:68:d5:17:5d:25:1f:
83:ba:7e:97:c8:4b:e7:84:95:48:99:2c:a1:1e:3a:69:94:85:
52:20:dc:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:53:59 2026 by rpki-client