Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231352e3230392e302f32342d3234203d3e20323136323533.roa
File: 3138352e3231352e3230392e302f32342d3234203d3e20323136323533.roa (raw, json)
Hash identifier: luu2lnr5xJrZ+zGX1hHnZWeShcr6Mhv2S4ode31L3n4=
Subject key identifier: 12:54:97:35:F4:98:16:03:59:B1:F1:56:93:54:6C:F2:A8:2C:21:58
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 108082FD79CE7A751B3307228FD1759C6DE06794
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231352e3230392e302f32342d3234203d3e20323136323533.roa
Signing time: Fri 16 Oct 2026 18:49:46 +0000
ROA not before: Fri 16 Oct 2026 18:44:46 +0000
ROA not after: Fri 15 Oct 2027 18:49:46 +0000
asID: 216253
IP address blocks: 185.215.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 12:25:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:80:82:fd:79:ce:7a:75:1b:33:07:22:8f:d1:75:9c:6d:e0:67:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Oct 16 18:44:46 2026 GMT
Not After : Oct 15 18:49:46 2027 GMT
Subject: CN=12549735F498160359B1F15693546CF2A82C2158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:99:53:ea:d7:43:ae:f7:7f:18:27:08:76:83:
da:4d:a9:d2:75:78:c6:9f:b1:58:a2:85:cd:30:a1:
1c:ad:5e:94:b4:08:04:01:03:00:31:51:ef:60:86:
76:c5:3e:ed:f8:c4:34:17:eb:52:62:5c:ae:4c:d5:
e8:1b:fc:43:f8:88:0e:de:34:66:4a:2c:f5:00:5d:
50:af:e0:1b:9e:aa:c3:0b:84:f7:60:09:4b:1f:7d:
32:60:93:09:8c:ff:24:c4:fd:97:05:df:3b:a8:8c:
6d:2e:36:b2:bb:cd:cc:a0:82:8c:7b:0a:c1:65:bc:
67:24:c6:8a:09:dc:3e:85:7c:e0:3b:94:13:ff:34:
3d:b3:bd:2a:00:1e:c4:3f:1d:b4:dc:16:ae:40:10:
da:5a:01:ca:ff:8b:d6:3c:e7:4d:e5:70:5c:ae:76:
d6:a9:6b:16:34:41:58:80:7d:e9:c9:92:fa:31:cc:
a8:8b:d3:1e:da:bf:12:4f:fe:00:c0:3a:94:6b:bc:
51:32:d2:bb:67:0b:12:c5:43:6f:cd:59:bc:0e:d0:
3f:ee:06:41:17:0f:1e:dd:d9:b4:33:ca:b1:28:a5:
8e:03:9d:89:56:e3:73:8d:3b:f1:bd:00:70:65:3d:
62:0e:4f:06:ed:c0:be:98:2c:53:60:20:96:3d:92:
f6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:54:97:35:F4:98:16:03:59:B1:F1:56:93:54:6C:F2:A8:2C:21:58
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231352e3230392e302f32342d3234203d3e20323136323533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.215.209.0/24
Signature Algorithm: sha256WithRSAEncryption
06:b8:2e:75:52:98:a7:aa:16:1e:4a:be:09:b8:bd:2d:4d:d3:
1a:57:21:15:97:f5:8b:ad:48:12:99:c3:b9:e1:e6:6d:c0:c8:
3a:ce:a1:0f:16:a7:cb:a7:39:a0:a5:95:47:fa:00:4d:e6:6f:
8f:73:27:69:13:de:c4:a8:96:49:7e:f2:5c:3b:58:0c:01:00:
f6:b8:e3:8b:6b:2e:d4:a5:62:37:df:93:b3:82:14:3a:de:41:
53:e4:83:bf:fa:8f:99:7b:3c:ee:af:77:8a:4e:23:e8:94:ec:
86:80:71:07:49:6f:68:fb:68:a7:38:8a:78:4e:71:2c:51:6f:
d4:16:aa:41:cf:5e:5a:42:9d:56:35:cf:f9:dc:a4:51:bf:4d:
a9:f0:5a:f3:a8:12:cf:25:55:5c:84:04:e2:94:58:dd:3a:c3:
87:e0:8d:63:50:c3:34:7a:c3:90:f5:01:74:e1:ba:a9:75:fd:
de:56:85:df:1c:28:d4:c2:b3:48:ba:6e:ee:b6:d8:27:61:d4:
f9:38:d7:fb:b7:49:5d:cb:4b:42:e4:28:77:87:1a:55:96:0b:
50:80:e7:59:42:f3:55:a4:05:d8:25:28:47:8d:b0:e7:8c:21:
0e:5c:f1:44:2b:49:a4:4f:bd:4e:67:6c:9c:83:6c:a4:12:ae:
b0:84:2a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:18:32 2026 by rpki-client