Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3230392e3235322e302f32342d3234203d3e20323136323533.roa
File: 3138352e3230392e3235322e302f32342d3234203d3e20323136323533.roa (raw, json)
Hash identifier: 3rSlHn5BiOxXMCDFS9AfX2sbQzIktzGrHrva0cUdVb4=
Subject key identifier: 60:83:92:D2:9E:61:EC:28:5A:AD:1C:DF:A7:69:0D:75:81:AE:41:08
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 49A1CD0E1B39482A985B3F36B6BCD19ED502266A
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3230392e3235322e302f32342d3234203d3e20323136323533.roa
Signing time: Fri 16 Oct 2026 18:49:38 +0000
ROA not before: Fri 16 Oct 2026 18:44:38 +0000
ROA not after: Fri 15 Oct 2027 18:49:38 +0000
asID: 216253
IP address blocks: 185.209.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 12:25:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:a1:cd:0e:1b:39:48:2a:98:5b:3f:36:b6:bc:d1:9e:d5:02:26:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Oct 16 18:44:38 2026 GMT
Not After : Oct 15 18:49:38 2027 GMT
Subject: CN=608392D29E61EC285AAD1CDFA7690D7581AE4108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:45:2e:8c:7e:86:95:7a:e3:bb:4e:f0:44:4c:
fe:61:ab:83:4d:fe:eb:a2:03:56:aa:0b:eb:a2:4a:
37:93:b7:0e:f1:82:a4:84:1d:3c:06:c2:6d:2b:14:
b2:19:a2:15:71:cb:a3:7d:14:1f:8e:38:f3:79:13:
c9:2e:ed:dd:41:81:f2:d6:3e:5c:47:e1:af:5b:b4:
66:b9:51:ad:c7:ae:3f:ab:0e:f0:6b:a2:01:0f:4c:
9d:5a:81:89:2c:ff:c8:b5:91:1e:dd:37:c3:7b:e2:
53:d2:ef:4e:0d:a4:e8:4e:d9:fc:05:dc:c9:fd:0d:
87:1a:9a:9b:df:a5:fa:30:75:21:1e:9f:ff:08:7d:
b0:ca:67:aa:67:68:24:6f:5c:7a:dd:3f:e2:ab:77:
f3:4f:32:1d:7b:20:f2:9b:32:1d:b9:75:44:d5:4d:
79:42:9e:5c:3d:ce:43:58:77:7a:9c:54:3d:08:f6:
53:5f:54:d3:84:1d:0b:25:3c:5f:b6:ad:0e:2e:8c:
43:c2:7e:7c:ba:d6:93:57:17:0b:fc:69:98:53:2a:
b6:8d:2e:36:03:15:a9:9c:d5:35:f3:fd:46:ed:a2:
57:08:cd:13:e7:2b:8b:c2:2c:83:c9:d1:e9:1a:8d:
14:42:23:7f:e8:6f:4d:2c:05:14:7d:f8:5b:00:90:
b3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:83:92:D2:9E:61:EC:28:5A:AD:1C:DF:A7:69:0D:75:81:AE:41:08
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3230392e3235322e302f32342d3234203d3e20323136323533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.209.252.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:09:78:2d:73:31:52:d8:49:b0:e0:8b:f1:c1:33:d8:ca:ba:
92:a7:33:ae:a0:00:5a:02:fc:d2:43:af:6c:68:be:9c:60:4e:
44:f9:01:9d:b9:a3:b4:f5:ef:94:96:42:40:70:1d:3b:e7:bd:
a8:45:d7:b5:6a:f2:7d:e2:af:93:22:29:03:7f:a4:5f:21:62:
04:1a:86:12:a5:7b:c4:fa:18:17:ad:39:a5:ed:49:9a:e2:d6:
9d:b0:5f:9c:bf:03:90:fe:45:a4:23:6d:e4:7a:65:cc:5e:a1:
cb:27:38:07:35:93:98:08:2b:3d:e6:e1:16:27:7d:7b:3b:92:
bd:02:86:b2:e0:5c:99:03:d5:67:a3:5d:bf:b6:89:7f:dd:f0:
68:f3:50:f3:92:df:c3:6b:d7:1b:32:7c:f7:41:87:9a:8e:e4:
4f:1e:3f:40:f7:79:d7:16:ff:51:c4:0a:51:09:7e:c6:49:a4:
d4:52:fe:93:52:da:0f:bf:46:57:36:e3:c5:f0:3a:78:10:c5:
67:65:58:a6:06:d6:d6:9a:ac:be:b1:17:1a:64:cd:21:c1:ab:
61:42:38:c5:51:35:4a:89:f6:61:74:dc:7a:44:53:d6:57:68:
c7:52:e2:9e:fb:b3:8c:7f:9d:ca:58:ab:2f:d2:15:ed:65:b5:
59:37:7b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 04:51:57 2026 by rpki-client