Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/3138352e3234322e3138322e302f32342d3234203d3e203431373230.roa
File: 3138352e3234322e3138322e302f32342d3234203d3e203431373230.roa (raw, json)
Hash identifier: KGBdO03qyyafMOxo4U+d/wPS0xbGpENnx76PaW6XZ3w=
Subject key identifier: 98:93:CA:C4:48:F2:B8:10:7E:67:A6:1B:98:45:85:21:8A:C7:0B:59
Certificate issuer: /CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
Certificate serial: 12FBD254E23170674A308F7FBC3AC6F1CBA58F99
Authority key identifier: 88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/3138352e3234322e3138322e302f32342d3234203d3e203431373230.roa
Signing time: Sun 11 Oct 2026 11:42:24 +0000
ROA not before: Sun 11 Oct 2026 11:37:24 +0000
ROA not after: Sun 10 Oct 2027 11:42:24 +0000
asID: 41720
IP address blocks: 185.242.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl
rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 20:50:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:fb:d2:54:e2:31:70:67:4a:30:8f:7f:bc:3a:c6:f1:cb:a5:8f:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
Validity
Not Before: Oct 11 11:37:24 2026 GMT
Not After : Oct 10 11:42:24 2027 GMT
Subject: CN=9893CAC448F2B8107E67A61B984585218AC70B59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:52:b9:17:a5:f9:c1:90:22:3c:eb:4d:a7:ea:
42:27:b0:c4:36:ba:79:8f:48:47:ad:b8:f7:13:ae:
c7:4d:c5:17:41:74:82:76:30:b2:20:45:6e:f1:ab:
ac:9a:8d:53:85:b6:fc:f3:74:23:8d:eb:1b:ff:b6:
4f:02:6b:f5:47:9a:80:46:0f:e3:1b:c4:4c:84:35:
5b:b4:03:a5:56:8e:38:7a:cd:84:31:79:9d:c1:e0:
7c:26:5a:b7:49:ac:7f:1a:13:2a:ed:e9:33:d4:cf:
d4:0a:5e:b9:5b:b9:72:ea:41:da:ff:2a:50:39:a5:
6d:0e:90:d6:68:09:1c:93:e6:9d:4e:5f:74:04:c7:
84:c2:1a:f6:7a:f3:43:75:3a:79:73:80:52:b1:20:
e4:b0:bd:e6:b4:30:c7:7a:7c:19:fa:2e:bd:d0:38:
1f:d5:ef:dd:88:2a:39:10:ec:93:79:be:1d:8d:ee:
e3:f8:84:a9:c0:b5:2b:e9:f1:01:78:9a:08:5b:d4:
c3:2d:27:94:4d:dc:a9:a4:f1:87:7a:ec:15:c8:15:
76:2c:0c:0e:c4:44:4a:97:59:57:4a:53:e9:58:d5:
b9:63:60:d9:1e:dd:1a:6c:0a:46:8c:5d:dc:03:90:
3f:12:ce:8c:0a:a3:3b:6c:9c:dc:8e:91:18:6b:74:
f3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:93:CA:C4:48:F2:B8:10:7E:67:A6:1B:98:45:85:21:8A:C7:0B:59
X509v3 Authority Key Identifier:
keyid:88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/3138352e3234322e3138322e302f32342d3234203d3e203431373230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.182.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:1c:ff:d2:67:2d:1c:1c:8a:7b:a8:a1:42:d9:3f:df:fe:e5:
a4:2f:23:ef:6b:6f:05:fd:21:63:be:36:78:79:a4:fe:f4:ce:
85:13:a4:5e:24:cc:94:b4:48:9a:ba:49:0d:9f:37:f4:fa:ac:
b9:d5:be:75:cb:4e:d5:7c:c0:85:dd:a7:af:84:59:f5:a6:72:
52:f4:ad:c2:56:29:a0:28:fe:d2:9e:19:f7:b3:23:2b:00:ed:
d1:9c:3a:3f:ff:1f:22:4b:19:bc:29:8f:02:da:8b:ff:9f:2f:
d0:66:d9:93:53:8e:f2:cc:14:83:55:ac:53:f8:52:6b:1e:8f:
38:ee:0d:79:e6:0f:c3:5b:cb:11:2c:ef:bb:53:b3:c4:6f:58:
dd:b8:b7:63:61:10:50:c7:bd:79:e2:d9:65:22:e4:de:66:7c:
f1:c1:04:f0:3e:a8:70:79:47:8f:52:0c:2e:e1:fb:22:71:89:
16:84:b2:f3:70:79:de:b0:e7:06:9f:48:c9:e0:b6:f8:a5:29:
02:fa:64:e1:62:d9:af:33:8a:3f:86:97:a7:5d:5d:40:a6:d0:
ed:be:13:5d:d4:d1:2d:f4:e1:7f:b7:2c:9f:b6:ee:3d:18:42:
30:30:37:f3:50:c4:c4:4c:f4:17:e5:71:88:ee:12:74:ff:53:
bb:3d:cb:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 13:54:41 2026 by rpki-client