Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3139372e32392e302f32342d3234203d3e20313938373533.roa
File: 3138352e3139372e32392e302f32342d3234203d3e20313938373533.roa (raw, json)
Hash identifier: KSRutjLPbaT7WlV3vIgO3zByeswb3LuQbqo0JyzR7mo=
Subject key identifier: 49:82:C1:BD:F7:89:51:F0:8B:12:5B:FE:21:A5:36:BB:62:A6:8E:D2
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 148BCC6B04722D59C0316F08A6E6E40587949B45
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3139372e32392e302f32342d3234203d3e20313938373533.roa
Signing time: Fri 16 Oct 2026 18:54:49 +0000
ROA not before: Fri 16 Oct 2026 18:49:49 +0000
ROA not after: Fri 15 Oct 2027 18:54:49 +0000
asID: 198753
IP address blocks: 185.197.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:8b:cc:6b:04:72:2d:59:c0:31:6f:08:a6:e6:e4:05:87:94:9b:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Oct 16 18:49:49 2026 GMT
Not After : Oct 15 18:54:49 2027 GMT
Subject: CN=4982C1BDF78951F08B125BFE21A536BB62A68ED2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6b:9e:16:47:88:56:2d:08:b0:04:3f:41:44:
7a:ba:74:87:e8:68:be:ab:b7:f2:e8:33:82:ac:f8:
66:8f:bb:b6:51:02:c2:9b:4c:c2:9e:ea:51:2d:c9:
a2:62:c2:42:ec:90:17:f5:1e:a1:38:4d:b2:41:b5:
9a:0f:63:fc:4f:04:60:b4:03:05:80:65:e7:08:5a:
a1:5f:a3:df:65:41:49:f8:d7:4f:ab:b0:43:a8:c3:
5a:99:3b:4b:99:f7:99:eb:dd:9b:5b:21:80:a2:c1:
ae:95:12:30:b5:04:f1:77:9e:60:8d:71:fa:56:13:
8b:6e:7a:1a:1d:e0:65:86:4f:f3:f1:c3:a4:0c:da:
86:7c:1f:4e:c8:c4:af:5e:aa:f6:3b:56:49:8e:f0:
c2:39:0b:b2:56:7a:df:85:97:c1:87:ee:29:45:82:
b6:b9:3a:ee:62:a7:5f:3c:a2:c9:c4:71:82:39:90:
bf:95:91:8f:eb:b4:99:6c:a2:53:be:ab:ca:b3:dc:
2d:6d:2f:26:65:6b:cc:b7:01:93:6e:df:13:c5:5e:
0d:be:b6:29:70:19:93:fd:27:ca:ee:05:a7:47:d2:
b3:04:2c:18:11:90:fd:e2:f5:14:1c:1f:16:5f:57:
b8:6e:c6:0c:bf:18:65:26:41:89:59:3c:23:eb:7c:
43:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:82:C1:BD:F7:89:51:F0:8B:12:5B:FE:21:A5:36:BB:62:A6:8E:D2
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3139372e32392e302f32342d3234203d3e20313938373533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.29.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:9e:21:e3:0c:b7:9a:92:3a:3c:41:2a:be:81:0b:bd:73:05:
dd:54:24:d0:80:19:f8:36:8c:af:c6:be:04:cd:91:eb:82:3a:
07:72:ab:b4:ce:53:c3:de:cc:f8:d6:97:ec:4a:3c:bf:f6:35:
db:34:c8:3c:ae:90:1b:4d:b3:ec:9b:ec:bc:0d:af:82:15:d7:
3f:fc:4d:32:cc:b0:f9:1b:e0:4e:78:da:f0:3b:bc:39:76:79:
cf:42:09:04:cb:54:9a:f3:d2:7b:b3:95:a6:eb:61:3d:14:e6:
93:d4:8a:ee:62:7c:75:42:54:19:a4:4c:59:b1:14:26:7b:65:
3b:b3:fc:02:00:0d:68:e8:18:2b:8f:54:6a:c8:6f:70:0c:52:
3e:1e:d2:3a:02:b3:e1:45:0e:41:34:ed:df:5e:da:b5:ba:4d:
a7:41:15:d2:5f:48:aa:0a:94:a8:72:5e:a8:eb:da:d4:a5:d0:
87:ba:42:59:6c:62:ad:8f:5c:94:5c:3d:9c:00:bd:fe:76:ce:
c7:94:c4:69:60:11:8f:fc:27:06:f5:c8:d5:23:a9:b3:47:84:
6c:d6:74:8c:1f:c3:82:1d:c5:5a:fd:64:51:86:ce:cb:85:ee:
75:b1:b0:2a:c9:4e:f2:55:a8:e4:93:d2:68:a8:ff:b1:b4:45:
27:a4:c3:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 18:35:57 2026 by rpki-client