Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3230392e3235332e302f32342d3234203d3e20323136323533.roa
File: 3138352e3230392e3235332e302f32342d3234203d3e20323136323533.roa (raw, json)
Hash identifier: TFLsDaFKE8ekEaE1itT0HoRhMNe3ni9EF+mofgiyeoU=
Subject key identifier: FB:2E:0F:B8:E5:2F:A6:B5:36:AD:56:8A:23:65:88:C7:01:D8:01:79
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 26FF3DE8D45872EE433E26575AE1354E8D9455D7
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3230392e3235332e302f32342d3234203d3e20323136323533.roa
Signing time: Fri 16 Oct 2026 18:49:41 +0000
ROA not before: Fri 16 Oct 2026 18:44:41 +0000
ROA not after: Fri 15 Oct 2027 18:49:41 +0000
asID: 216253
IP address blocks: 185.209.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 12:25:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:ff:3d:e8:d4:58:72:ee:43:3e:26:57:5a:e1:35:4e:8d:94:55:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Oct 16 18:44:41 2026 GMT
Not After : Oct 15 18:49:41 2027 GMT
Subject: CN=FB2E0FB8E52FA6B536AD568A236588C701D80179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c2:89:2e:8e:ab:09:f6:2c:b1:5e:55:ad:75:
cc:81:0a:c0:e6:ac:ad:91:34:67:9d:c7:1b:5d:dc:
47:17:4c:14:75:59:e9:d4:37:85:88:4b:53:ec:2c:
77:4e:44:6a:60:83:f0:38:b3:34:6f:77:ec:1c:5c:
28:45:e6:67:a7:43:ae:7c:d8:75:64:ea:07:e7:94:
c4:5c:55:2e:11:3d:fa:61:a5:be:bd:31:03:02:15:
bc:ff:47:61:05:69:cf:4b:ff:8c:3b:72:15:3d:0b:
73:ba:79:26:93:ca:46:7f:06:e6:cf:36:23:d1:67:
26:4b:26:cf:45:c5:8d:c2:29:1c:f9:82:c4:2d:e1:
ae:b9:e6:74:58:da:3f:b5:33:d0:8c:79:1a:ee:04:
1a:8c:31:1b:4f:91:2d:9f:0a:c5:d1:64:af:11:c3:
95:23:b0:2d:fd:d8:0b:83:35:28:ed:64:2f:55:f8:
6c:f4:82:0f:0e:38:f9:63:d3:b6:52:ac:c5:d0:87:
6b:1a:a7:6f:5e:f9:d8:b1:c1:95:79:c7:3c:67:de:
21:a2:cd:86:66:78:0c:b9:21:c4:13:80:f5:8a:35:
cd:c1:66:fc:03:44:12:ff:34:9e:2e:82:97:98:b1:
c4:49:f7:98:54:67:b0:a8:a6:d9:24:39:c9:07:3b:
85:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:2E:0F:B8:E5:2F:A6:B5:36:AD:56:8A:23:65:88:C7:01:D8:01:79
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3230392e3235332e302f32342d3234203d3e20323136323533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.209.253.0/24
Signature Algorithm: sha256WithRSAEncryption
17:49:fb:51:d4:cf:fe:b6:ac:27:ae:b8:54:b4:f8:99:7f:a8:
19:98:be:96:59:4c:a3:fc:ca:22:d4:53:69:0f:b9:42:e5:1c:
69:85:29:92:84:8f:30:d5:a5:f0:4f:89:6f:3e:55:2a:1a:fb:
a4:95:b5:db:af:a9:04:40:1e:42:36:90:b9:9e:c6:a5:54:e7:
6e:68:53:95:59:f8:63:15:5b:e8:d1:c1:39:ac:05:71:03:63:
94:7e:18:a6:a9:14:e2:b8:2c:23:0e:53:8e:10:12:81:b3:1a:
c0:83:4b:16:bf:36:c1:0e:47:7a:33:47:76:ee:51:5c:0c:f5:
ea:fd:ba:df:ab:7d:9b:c1:51:7b:e3:d7:15:26:20:ee:cc:61:
c4:72:11:fe:af:cc:60:bb:92:7c:c4:15:6b:38:a1:f2:70:3c:
83:b3:05:63:f3:a6:a7:62:06:a4:0b:3b:b1:c2:af:f5:d9:1d:
96:de:ae:20:d7:71:fb:54:d9:14:a6:3e:3a:bb:6f:19:e6:1f:
07:c4:2f:a5:73:8d:9f:ef:b4:d8:46:7c:5a:7e:42:48:04:b3:
b3:8d:96:0f:b0:29:0c:d8:c0:6f:3c:1d:89:91:27:4e:79:c9:
c8:bb:2a:35:97:11:5b:71:31:ff:ec:39:7a:5c:93:6b:aa:7a:
a3:e2:64:c0
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUJv896NRYcu5DPiZXWuE1To2UVdcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj
MjMxM2EzYTAeFw0yNjEwMTYxODQ0NDFaFw0yNzEwMTUxODQ5NDFaMDMxMTAvBgNV
BAMTKEZCMkUwRkI4RTUyRkE2QjUzNkFENTY4QTIzNjU4OEM3MDFEODAxNzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdwokujqsJ9iyxXlWtdcyBCsDm
rK2RNGedxxtd3EcXTBR1WenUN4WIS1PsLHdORGpgg/A4szRvd+wcXChF5menQ658
2HVk6gfnlMRcVS4RPfphpb69MQMCFbz/R2EFac9L/4w7chU9C3O6eSaTykZ/BubP
NiPRZyZLJs9FxY3CKRz5gsQt4a655nRY2j+1M9CMeRruBBqMMRtPkS2fCsXRZK8R
w5UjsC392AuDNSjtZC9V+Gz0gg8OOPlj07ZSrMXQh2sap29e+dixwZV5xzxn3iGi
zYZmeAy5IcQTgPWKNc3BZvwDRBL/NJ4ugpeYscRJ95hUZ7CoptkkOckHO4XXAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQU+y4PuOUvprU2rVaKI2WIxwHYAXkwHwYDVR0j
BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J
eE9qby5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzEzODM1MmUzMjMwMzkyZTMy
MzUzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzNjMyMzUzMy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEALnR/TANBgkqhkiG9w0BAQsFAAOCAQEAF0n7UdTP/rasJ664VLT4mX+oGZi+
lllMo/zKItRTaQ+5QuUcaYUpkoSPMNWl8E+Jbz5VKhr7pJW126+pBEAeQjaQuZ7G
pVTnbmhTlVn4YxVb6NHBOawFcQNjlH4YpqkU4rgsIw5TjhASgbMawINLFr82wQ5H
ejNHdu5RXAz16v2636t9m8FRe+PXFSYg7sxhxHIR/q/MYLuSfMQVazih8nA8g7MF
Y/Omp2IGpAs7scKv9dkdlt6uINdx+1TZFKY+OrtvGeYfB8QvpXONn++02EZ8Wn5C
SASzs42WD7ApDNjAbzwdiZEnTnnJyLsqNZcRW3Ex/+w5elyTa6p6o+JkwA==
-----END CERTIFICATE-----
Generated at Wed Oct 21 06:18:32 2026 by rpki-client