Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3230392e3235342e302f32342d3234203d3e20323136323533.roa
File: 3138352e3230392e3235342e302f32342d3234203d3e20323136323533.roa (raw, json)
Hash identifier: WNsspKimP/g7zn4NNSbRGEc3hc7xHaxvqbV9pE8NPKg=
Subject key identifier: 3F:C9:F5:C3:86:18:18:B5:28:F0:08:7C:53:16:54:8C:05:02:81:D8
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 080C0773BBE3ADAC1F2B1F7F11B917D26D92A83A
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3230392e3235342e302f32342d3234203d3e20323136323533.roa
Signing time: Fri 16 Oct 2026 18:49:42 +0000
ROA not before: Fri 16 Oct 2026 18:44:42 +0000
ROA not after: Fri 15 Oct 2027 18:49:42 +0000
asID: 216253
IP address blocks: 185.209.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 12:25:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:0c:07:73:bb:e3:ad:ac:1f:2b:1f:7f:11:b9:17:d2:6d:92:a8:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Oct 16 18:44:42 2026 GMT
Not After : Oct 15 18:49:42 2027 GMT
Subject: CN=3FC9F5C3861818B528F0087C5316548C050281D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:14:8d:f4:c4:61:04:1b:87:e6:1c:a4:b6:11:
d5:06:e9:62:3b:ca:32:49:17:7b:72:ba:4e:99:00:
20:de:48:4d:c6:7d:ab:84:89:9f:d2:e5:57:b6:85:
f9:3e:60:bb:dd:a2:9b:0b:32:be:29:cc:89:c7:ec:
1e:84:7c:11:7e:c7:dd:1f:26:73:a5:13:c9:b8:8d:
02:f1:32:30:02:77:0f:97:31:90:36:c1:0b:0c:fa:
66:ea:70:e1:60:90:b7:f3:12:46:5d:ef:61:ef:5e:
6b:8f:66:e1:a5:51:22:c4:c1:17:05:6c:01:e8:ec:
e3:06:a4:72:ea:9a:fb:c5:63:99:85:72:56:74:29:
4a:97:69:18:fc:1c:71:e8:87:58:0f:23:63:7d:a3:
7d:93:e4:50:9a:39:b6:62:94:84:c9:0d:c8:80:d4:
d2:11:1a:ed:83:0f:a6:7e:b3:f1:82:23:1c:0f:c2:
67:fc:77:af:74:79:b7:74:8a:b4:ed:04:24:56:06:
fc:f3:46:74:68:00:7a:81:2b:69:98:f8:26:b2:51:
6c:c1:95:7a:72:b1:81:ad:d4:1e:d4:34:33:ba:bd:
73:80:da:ed:28:33:2a:81:af:7f:05:e7:96:cd:33:
15:56:6f:32:9f:80:25:a4:6a:53:1b:ae:3f:e1:02:
46:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:C9:F5:C3:86:18:18:B5:28:F0:08:7C:53:16:54:8C:05:02:81:D8
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3230392e3235342e302f32342d3234203d3e20323136323533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.209.254.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:4b:5d:2a:e5:13:81:e7:e6:c8:75:fc:f0:d2:d2:35:af:92:
46:ce:76:e1:a9:31:39:9a:87:51:42:4d:86:94:2f:1e:e3:22:
ad:f9:29:ea:97:ae:b3:8f:8e:03:f1:71:4e:3c:5f:25:94:65:
e1:4d:8e:a6:a7:3e:09:23:c7:fc:1b:f5:ec:32:94:e3:cb:91:
61:3f:4b:81:69:1e:27:1d:a3:b7:f8:6e:a5:90:1e:a3:69:6a:
f2:bf:df:15:87:d1:63:46:7a:ec:b4:d9:6a:c3:49:5a:61:67:
86:82:b2:f2:89:a3:cf:1b:dd:0b:01:bc:08:1f:cf:60:08:21:
48:be:c4:82:0f:e8:91:bf:81:28:8c:41:c9:a2:ff:5c:98:bd:
d0:0a:8b:eb:85:bf:83:67:fd:16:50:7e:b3:be:17:6a:73:89:
5b:80:c5:8a:cb:2a:f9:12:10:02:02:d2:3c:ce:93:7d:77:70:
c7:22:36:03:66:e8:13:0d:fc:ca:af:8c:cb:57:f0:71:9c:b4:
71:81:4b:fa:0f:f8:e2:50:62:bb:fa:f9:9b:d7:6a:46:dc:34:
59:4c:e0:f1:a8:f1:26:09:51:64:99:51:45:30:f9:01:18:2f:
72:e7:35:a4:b4:3d:63:f1:d1:17:9e:df:8a:b5:18:86:d9:45:
03:7d:41:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 06:18:23 2026 by rpki-client