Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3139372e33312e302f32342d3234203d3e203439393831.roa
File: 3138352e3139372e33312e302f32342d3234203d3e203439393831.roa (raw, json)
Hash identifier: tI6rl2Yn4AXcvN4KzsEh4B6ZendaLX1QUJjbxgdYfy4=
Subject key identifier: 70:B9:09:DE:C7:A9:DA:25:7C:69:A4:F6:ED:E7:3C:7A:92:85:38:EE
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 6E38841B3F44DD39B7F19F76AE35D26E801E17A6
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3139372e33312e302f32342d3234203d3e203439393831.roa
Signing time: Thu 09 Jul 2026 08:26:10 +0000
ROA not before: Thu 09 Jul 2026 08:21:10 +0000
ROA not after: Thu 08 Jul 2027 08:26:10 +0000
asID: 49981
IP address blocks: 185.197.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:38:84:1b:3f:44:dd:39:b7:f1:9f:76:ae:35:d2:6e:80:1e:17:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Jul 9 08:21:10 2026 GMT
Not After : Jul 8 08:26:10 2027 GMT
Subject: CN=70B909DEC7A9DA257C69A4F6EDE73C7A928538EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d8:49:97:9d:74:73:c4:c4:09:61:d9:e6:2f:
12:01:78:f6:af:ba:0f:8e:50:f1:30:48:dd:cc:62:
dc:f8:62:25:01:ff:0e:c1:51:87:01:af:77:48:f0:
bc:33:87:f2:59:bc:5b:42:84:58:6f:9b:9b:5d:8e:
84:a6:fc:8c:7d:13:d5:d7:f1:37:81:c4:e4:ae:ed:
85:0d:47:f9:c6:04:54:82:93:ad:5e:ab:83:df:a9:
fe:71:74:6f:1b:2b:81:23:36:89:ae:70:17:de:23:
56:21:a8:b3:13:01:65:9d:42:8c:45:cf:7c:75:17:
ff:a0:fe:ca:6e:ce:49:5b:e6:b4:38:bd:49:e2:da:
f6:2b:f9:ee:2e:1b:51:69:4a:44:19:52:a0:09:c2:
f9:14:44:d4:a4:2e:4b:fb:a6:b2:d3:82:cd:44:b3:
3a:5a:00:47:48:a1:4b:08:a2:09:40:4c:9c:96:15:
6e:39:2a:92:38:61:48:05:f5:2e:c6:29:18:4e:83:
e0:04:a1:0c:00:20:ea:4d:67:44:12:d3:63:48:f2:
78:94:52:1b:ca:37:a9:08:c9:06:31:51:81:42:11:
26:41:17:f2:b8:73:57:e7:85:e2:5f:ca:76:71:1f:
e4:ba:3e:fd:bd:0f:f5:c5:7f:0e:c4:80:5a:50:93:
f8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B9:09:DE:C7:A9:DA:25:7C:69:A4:F6:ED:E7:3C:7A:92:85:38:EE
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3139372e33312e302f32342d3234203d3e203439393831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.31.0/24
Signature Algorithm: sha256WithRSAEncryption
73:0a:ec:5e:27:51:bd:af:ed:72:84:e6:69:23:67:1b:83:7c:
ba:c1:87:53:de:bf:0a:20:85:bb:47:f0:81:e8:ba:b2:62:2c:
f0:7b:83:d0:50:de:e2:b8:b7:01:e6:a4:66:5c:90:30:2e:57:
0c:db:4a:64:0e:62:2b:44:d8:2f:94:5a:34:5a:9f:16:b3:e2:
30:11:29:b9:52:29:03:62:87:96:61:31:e7:fd:61:e3:7b:bf:
30:83:73:f0:05:67:9a:e6:4b:c3:c7:c9:e1:be:0c:c5:af:64:
9f:f9:5b:3f:4e:83:f0:f7:23:be:8b:aa:9c:07:d8:f2:c7:2a:
6e:20:83:4e:77:f8:3c:a5:cd:68:89:e1:d9:99:fd:b5:1a:03:
a2:a9:55:e2:da:d9:39:b3:34:fd:97:8c:46:05:4a:3c:d9:81:
c9:d6:4c:fa:be:30:d3:72:51:f5:76:02:92:44:24:60:af:d6:
b6:71:fc:f2:f3:62:77:b0:81:16:ca:54:76:7a:20:ce:d6:c7:
fc:1d:35:47:33:0f:be:cf:43:7a:63:76:02:ba:65:18:f2:31:
55:5e:e2:54:93:cc:7a:0b:24:c4:32:ea:8a:a8:36:f0:78:38:
1f:f5:3e:b4:af:aa:f3:75:34:2b:cb:b0:38:9d:ac:1a:0e:2a:
30:a8:f7:e8
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUbjiEGz9E3Tm38Z92rjXSboAeF6YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj
MjMxM2EzYTAeFw0yNjA3MDkwODIxMTBaFw0yNzA3MDgwODI2MTBaMDMxMTAvBgNV
BAMTKDcwQjkwOURFQzdBOURBMjU3QzY5QTRGNkVERTczQzdBOTI4NTM4RUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv2EmXnXRzxMQJYdnmLxIBePav
ug+OUPEwSN3MYtz4YiUB/w7BUYcBr3dI8Lwzh/JZvFtChFhvm5tdjoSm/Ix9E9XX
8TeBxOSu7YUNR/nGBFSCk61eq4Pfqf5xdG8bK4EjNomucBfeI1YhqLMTAWWdQoxF
z3x1F/+g/spuzklb5rQ4vUni2vYr+e4uG1FpSkQZUqAJwvkURNSkLkv7prLTgs1E
szpaAEdIoUsIoglATJyWFW45KpI4YUgF9S7GKRhOg+AEoQwAIOpNZ0QS02NI8niU
UhvKN6kIyQYxUYFCESZBF/K4c1fnheJfynZxH+S6Pv29D/XFfw7EgFpQk/h5AgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUcLkJ3sep2iV8aaT27ec8epKFOO4wHwYDVR0j
BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J
eE9qby5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzEzODM1MmUzMTM5MzcyZTMz
MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM5MzkzODMxLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
ucUfMA0GCSqGSIb3DQEBCwUAA4IBAQBzCuxeJ1G9r+1yhOZpI2cbg3y6wYdT3r8K
IIW7R/CB6LqyYizwe4PQUN7iuLcB5qRmXJAwLlcM20pkDmIrRNgvlFo0Wp8Ws+Iw
ESm5UikDYoeWYTHn/WHje78wg3PwBWea5kvDx8nhvgzFr2Sf+Vs/ToPw9yO+i6qc
B9jyxypuIINOd/g8pc1oieHZmf21GgOiqVXi2tk5szT9l4xGBUo82YHJ1kz6vjDT
clH1dgKSRCRgr9a2cfzy82J3sIEWylR2eiDO1sf8HTVHMw++z0N6Y3YCumUY8jFV
XuJUk8x6CyTEMuqKqDbweDgf9T60r6rzdTQry7A4nawaDiowqPfo
-----END CERTIFICATE-----
Generated at Tue Jul 21 01:36:19 2026 by rpki-client