Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3139362e32322e302f32342d3234203d3e20323132323338.roa
File: 3138352e3139362e32322e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: prnqfVK98qWILdr7oZJxYpDSFks7RVQEFWm+paSL6zw=
Subject key identifier: CD:73:3D:BA:73:E5:98:83:04:E3:DC:70:59:8C:5B:D1:35:8C:96:D6
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 0613EE04F11725AB901F0642F4A7CBAE1E29D2B2
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3139362e32322e302f32342d3234203d3e20323132323338.roa
Signing time: Mon 02 Nov 2026 16:32:45 +0000
ROA not before: Mon 02 Nov 2026 16:27:45 +0000
ROA not after: Mon 01 Nov 2027 16:32:45 +0000
asID: 212238
IP address blocks: 185.196.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 03:20:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:13:ee:04:f1:17:25:ab:90:1f:06:42:f4:a7:cb:ae:1e:29:d2:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Nov 2 16:27:45 2026 GMT
Not After : Nov 1 16:32:45 2027 GMT
Subject: CN=CD733DBA73E5988304E3DC70598C5BD1358C96D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0e:47:81:fc:d6:fd:98:51:45:2b:65:94:dd:
d2:2b:9a:1a:2a:2c:dc:51:e4:d9:b7:55:c8:95:18:
ea:bd:67:b6:40:f5:67:1e:63:ad:f9:87:c6:80:2d:
98:16:b4:59:2c:d5:ea:57:59:52:6e:f3:ba:b7:45:
f2:cf:e1:80:25:02:f2:5a:e2:d7:3f:5f:fe:59:b8:
fe:43:ff:da:37:d3:ed:1b:f7:fb:25:b3:d0:58:02:
a4:28:ab:66:18:8e:bd:3e:6d:f3:19:c3:a2:95:c2:
97:29:7e:7d:06:55:1a:05:02:65:b5:b1:aa:4f:b9:
c1:44:ad:67:9c:4e:89:b0:10:81:49:56:f8:d2:c5:
31:24:4a:aa:dc:f9:78:91:83:0e:63:44:dd:e0:3f:
a8:79:ad:23:bc:86:24:7f:c4:7e:1b:33:13:51:da:
07:a6:d0:f9:67:d1:2e:f2:a4:f9:51:2e:44:0f:59:
c1:c3:fc:7d:07:bb:54:60:db:22:8a:bd:4f:8b:23:
65:5c:b0:d3:50:e6:c5:db:b6:31:8e:29:4e:46:c9:
31:36:7f:68:2c:d9:75:b9:1e:e7:01:21:6d:3f:6a:
4e:09:e3:fc:0d:a6:c9:a2:e6:3b:c1:46:02:fb:d2:
c7:6a:4b:d7:21:cc:a6:97:ff:ea:24:62:6d:8c:fd:
16:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:73:3D:BA:73:E5:98:83:04:E3:DC:70:59:8C:5B:D1:35:8C:96:D6
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3139362e32322e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.22.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:31:31:4b:c3:7a:9e:cb:a6:08:47:21:34:9b:10:08:64:11:
56:81:30:fc:98:e2:3e:9b:89:d0:f2:e7:45:92:8f:ae:4a:a2:
2d:2f:22:f4:9c:ab:3c:88:57:2c:be:1a:61:f8:e9:66:be:51:
fb:25:93:3e:7a:c0:1f:8d:29:ab:d2:f9:c4:d6:c0:e8:1e:42:
cc:64:b6:f7:0f:c7:30:42:ad:e1:09:d5:1c:0c:a2:f9:f6:c2:
ae:3c:0d:9d:9d:7f:a6:7e:1d:b2:c2:81:50:dd:6f:d8:4d:54:
1b:9c:ef:20:18:8e:95:ce:fc:46:27:cf:82:ad:f0:fa:a8:12:
c0:53:79:35:17:5c:cc:0c:38:ba:fa:8c:ed:ed:77:f9:6d:a8:
8c:49:3d:02:db:43:e2:d0:ce:d2:7f:a9:14:64:86:8c:44:68:
d7:25:96:9a:86:83:60:d1:fd:6b:a5:2a:55:b3:00:c3:b8:3b:
5c:0c:6f:e9:3a:ae:ab:f4:05:f6:02:6b:f2:0c:c6:e2:4c:bd:
e6:e3:e0:49:94:5c:d1:e0:0e:47:80:50:14:4b:e5:a3:95:13:
b3:31:9f:c0:8b:bb:4a:55:8f:92:31:02:04:3c:9d:b4:21:1d:
fb:4a:0c:fe:f2:ee:ec:9b:68:8d:52:9f:a5:b2:9e:14:55:0b:
5b:be:5d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 14:29:01 2026 by rpki-client