Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3230392e3235352e302f32342d3234203d3e20323136323533.roa
File: 3138352e3230392e3235352e302f32342d3234203d3e20323136323533.roa (raw, json)
Hash identifier: h7zk0U8X7FYx1AttQ64OVPfDSpcbUwJVlpXU51z2AXE=
Subject key identifier: EF:9D:C1:1B:D3:E0:7E:BC:8C:4D:38:F1:3C:27:DA:F6:AB:BC:10:75
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 2FD534F2E05BEE580E3EE2F53FFDE7EB2CA94509
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3230392e3235352e302f32342d3234203d3e20323136323533.roa
Signing time: Fri 16 Oct 2026 18:49:43 +0000
ROA not before: Fri 16 Oct 2026 18:44:43 +0000
ROA not after: Fri 15 Oct 2027 18:49:43 +0000
asID: 216253
IP address blocks: 185.209.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 12:25:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:d5:34:f2:e0:5b:ee:58:0e:3e:e2:f5:3f:fd:e7:eb:2c:a9:45:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Oct 16 18:44:43 2026 GMT
Not After : Oct 15 18:49:43 2027 GMT
Subject: CN=EF9DC11BD3E07EBC8C4D38F13C27DAF6ABBC1075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:80:f0:13:b2:59:5b:ae:22:84:f4:af:0e:bf:
4e:94:cb:58:ba:97:7b:7b:6a:86:05:9a:ff:90:21:
00:7c:09:ec:f0:fd:ce:a1:29:f0:2d:3a:68:b2:27:
c4:4b:ca:65:7d:f1:b8:ec:57:ef:20:50:6e:6f:ad:
da:51:64:9d:76:08:c6:29:9b:29:4a:69:b8:d4:87:
f8:b5:f7:fa:96:8e:58:2e:b2:10:c6:49:73:cc:a8:
fb:d9:16:9e:98:cb:21:71:eb:71:eb:0d:b5:6b:c4:
05:28:24:56:ef:b2:29:23:a4:4d:0f:66:73:e8:5c:
6d:b7:cd:71:fa:0f:6f:62:4f:e5:90:d8:8a:e1:10:
90:12:1e:a8:1c:65:67:14:09:60:7f:66:27:ee:fd:
28:bc:84:4e:ac:a9:7d:d4:a3:dd:22:39:41:e8:32:
2d:1b:8b:99:b5:43:2b:7f:f7:87:ca:86:91:9f:69:
3a:39:04:bb:46:b6:8d:d7:4d:e8:f8:78:ff:27:ec:
e1:33:54:39:7b:95:09:f0:53:b3:b5:51:86:87:b6:
4c:1d:7d:12:33:21:74:42:3e:75:22:92:95:e1:ca:
e4:4e:ac:cc:60:f8:04:bd:3c:f0:ee:06:16:55:7e:
48:d8:c4:74:ce:36:95:9c:e8:f1:cf:ad:59:43:22:
7b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:9D:C1:1B:D3:E0:7E:BC:8C:4D:38:F1:3C:27:DA:F6:AB:BC:10:75
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3230392e3235352e302f32342d3234203d3e20323136323533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.209.255.0/24
Signature Algorithm: sha256WithRSAEncryption
94:28:65:06:10:6d:ce:0c:cb:cc:d9:3a:2b:65:05:85:7b:43:
fd:db:75:19:52:13:3e:37:31:b9:53:0b:a7:7a:2e:b8:fa:8e:
66:59:ff:4c:a9:31:c8:62:d9:17:d5:fd:5d:d1:8c:6c:8c:60:
af:15:1b:24:1a:15:15:d7:6a:91:6e:e9:b2:f9:fd:ea:00:4b:
7c:0f:95:0f:25:91:2a:3f:d9:3e:4b:e4:70:66:86:93:46:ad:
a6:72:c0:0f:fd:98:65:b2:ea:f4:5b:b7:58:d6:38:99:10:7e:
b8:ce:3b:3d:3c:a3:81:00:16:07:b9:56:fb:39:a7:6b:80:fc:
f1:da:75:01:cb:8e:9a:20:73:04:67:71:7a:6d:69:0e:f1:96:
a6:c4:af:ca:08:45:50:71:26:8c:a2:a4:f7:21:d2:fa:88:f6:
38:7d:b9:11:3c:d2:d3:04:d9:d3:e1:99:22:07:c8:e6:21:2d:
09:98:8b:70:76:4e:3e:ad:05:b3:5f:2a:9f:cd:ba:04:15:d6:
68:e5:8b:5e:6c:75:5f:fa:6b:ca:20:63:82:e7:a5:a1:f1:1e:
6c:e6:72:bb:fc:d8:b0:f0:d3:03:05:4f:b9:68:f5:1e:6c:07:
aa:59:6a:7f:8e:19:a4:23:6a:68:19:0f:9e:e1:5f:37:1d:3b:
0e:64:23:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:20:48 2026 by rpki-client