Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3231322e3131382e302f32342d3234203d3e20313336373837.roa
File: 3138352e3231322e3131382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: D8inCA/NifpM86JxlVUrjnG1hL26i9nRegWGk31FWPQ=
Subject key identifier: 2E:26:40:3B:09:2E:BF:0B:D9:CF:68:1B:15:3B:9C:1C:7B:49:3D:BD
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 52145ED08B719D07B578BE60F2025316E3750E81
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3231322e3131382e302f32342d3234203d3e20313336373837.roa
Signing time: Wed 29 Jul 2026 12:27:13 +0000
ROA not before: Wed 29 Jul 2026 12:22:13 +0000
ROA not after: Wed 28 Jul 2027 12:27:13 +0000
asID: 136787
IP address blocks: 185.212.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 13:35:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:14:5e:d0:8b:71:9d:07:b5:78:be:60:f2:02:53:16:e3:75:0e:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Jul 29 12:22:13 2026 GMT
Not After : Jul 28 12:27:13 2027 GMT
Subject: CN=2E26403B092EBF0BD9CF681B153B9C1C7B493DBD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f8:02:66:fb:32:a3:c1:33:46:ee:3c:1d:2f:
73:07:92:f5:f8:2a:d9:59:96:d3:7e:de:25:34:38:
e3:4f:b4:da:3b:5a:b9:a9:77:94:ee:72:5a:59:1b:
06:55:b7:15:59:1e:86:15:51:33:8b:eb:8b:89:a4:
87:bf:2b:69:f4:e4:91:54:d8:56:57:99:e3:26:1a:
6c:6e:a2:09:60:28:19:93:77:df:ad:92:86:15:c2:
3f:f4:65:00:d6:79:16:34:51:d3:d8:6d:5e:1b:e5:
88:3c:4b:b3:e3:5a:b2:a3:da:87:1b:87:97:8f:83:
92:83:25:03:6d:65:46:9f:14:0c:22:f2:b5:18:62:
fe:14:ec:0e:1d:fb:0f:86:49:1f:9f:3a:6b:85:04:
05:a5:0b:af:19:30:ad:10:b6:88:fb:a6:2c:60:0e:
3f:15:8f:7a:01:75:e1:24:67:99:2b:8b:32:35:74:
ca:e2:56:6d:72:ab:a1:84:b2:73:37:c4:02:7b:07:
1b:39:f2:36:f0:8d:a0:f8:6b:ef:5b:5d:54:55:bb:
68:06:28:5d:89:ed:9a:7b:85:fc:c4:7c:ad:20:16:
77:18:46:d2:87:d4:5a:66:a9:00:56:6d:50:c5:4b:
74:61:b3:f6:4e:b1:aa:dd:5a:39:53:18:22:58:5d:
f5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:26:40:3B:09:2E:BF:0B:D9:CF:68:1B:15:3B:9C:1C:7B:49:3D:BD
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3231322e3131382e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.118.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:8c:a0:ae:98:f0:98:9a:3f:c5:05:c0:42:78:b7:5a:f6:a4:
25:8e:8d:b9:20:3d:fb:4c:18:56:14:8a:77:df:ae:38:85:da:
fe:4c:49:51:13:bc:fa:29:6f:b9:de:21:9a:6d:ca:48:ef:6e:
7d:3f:0c:10:7f:0f:69:29:e3:96:11:95:7f:ea:b3:e8:0f:30:
fe:b0:38:ab:ac:90:ce:9b:46:01:25:87:d1:db:b9:ad:7a:3a:
5a:b1:99:6c:36:a1:14:08:e4:0b:3f:89:8b:ac:d8:ca:3a:32:
3b:d1:0f:09:be:13:51:4f:87:fc:fd:ab:97:80:da:a0:a2:fe:
0c:e8:ff:53:16:08:83:bd:a7:81:40:cc:33:c3:f9:fc:9f:04:
44:9e:b8:df:7b:8d:ac:8d:89:6f:91:36:f5:37:24:67:f5:73:
8f:69:17:31:63:79:6c:63:4e:1f:03:41:5b:19:a6:80:4f:5e:
7b:dd:ba:14:dc:64:47:3f:b4:06:b5:80:fa:b4:f7:a4:48:1f:
c2:ce:36:05:42:57:f7:f4:33:8d:d8:6a:18:90:d9:84:ca:6a:
eb:d1:ce:bc:25:3b:77:1f:53:bd:c2:c7:a6:34:9b:2f:7a:48:
71:4e:50:03:72:ad:74:a0:3b:71:13:10:74:75:10:04:91:82:
66:f5:66:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:19:09 2026 by rpki-client