Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231352e3231302e302f32342d3234203d3e20323136323533.roa
File: 3138352e3231352e3231302e302f32342d3234203d3e20323136323533.roa (raw, json)
Hash identifier: pScgKnWt5u+2HnkBOOt8iWEnZJqwQOzWtDXA99OujYI=
Subject key identifier: 34:13:29:73:40:67:4F:DD:5C:7F:84:73:23:56:AA:E5:AD:4B:D8:78
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 483E2DC53A4ACD45A7F303F799C22616C9185064
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231352e3231302e302f32342d3234203d3e20323136323533.roa
Signing time: Fri 16 Oct 2026 18:49:48 +0000
ROA not before: Fri 16 Oct 2026 18:44:48 +0000
ROA not after: Fri 15 Oct 2027 18:49:48 +0000
asID: 216253
IP address blocks: 185.215.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 12:25:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:3e:2d:c5:3a:4a:cd:45:a7:f3:03:f7:99:c2:26:16:c9:18:50:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Oct 16 18:44:48 2026 GMT
Not After : Oct 15 18:49:48 2027 GMT
Subject: CN=3413297340674FDD5C7F84732356AAE5AD4BD878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:49:70:49:5d:4a:ab:62:ce:af:96:57:2f:6a:
01:c2:03:fb:f6:fd:75:d2:6a:13:24:7a:93:12:05:
01:85:28:dd:ef:5a:6e:08:bf:73:cb:2d:25:50:3c:
05:fe:e6:3f:7f:92:5d:da:32:f3:53:5a:7d:1f:0c:
0b:1b:9e:d1:4b:c0:6b:45:cf:42:cf:56:52:97:cb:
00:03:20:6a:13:b8:5e:c7:79:d2:d1:f3:b6:a0:4f:
8f:4f:11:3e:dd:78:9f:2c:19:39:d2:6a:4c:96:31:
c1:aa:b7:96:a9:7b:c5:dd:02:b2:49:e6:b4:af:6f:
60:88:d9:b2:62:25:1b:f6:e2:ea:b5:c6:3b:c0:81:
71:2e:27:f7:58:70:b3:11:96:23:fa:df:61:be:d3:
0f:5c:05:24:72:2f:4e:f3:a3:6f:24:e1:b6:8b:8e:
64:f0:7e:90:81:b1:c5:3a:f4:4c:d6:59:ac:6a:10:
55:45:53:bd:0d:0c:08:a5:c2:2b:da:ad:be:ac:93:
0c:f1:81:75:69:b5:e4:8d:2c:63:d4:7f:2a:25:ab:
a0:da:2c:8e:f8:e0:1a:97:44:6b:78:d1:df:1a:b8:
72:52:67:c8:c0:e9:ed:9b:ab:e8:9b:16:13:20:9b:
76:cd:f5:6c:bd:3d:d7:46:ea:e7:f3:83:68:93:b9:
32:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:13:29:73:40:67:4F:DD:5C:7F:84:73:23:56:AA:E5:AD:4B:D8:78
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231352e3231302e302f32342d3234203d3e20323136323533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.215.210.0/24
Signature Algorithm: sha256WithRSAEncryption
59:0f:4d:c3:e2:b9:fa:91:f4:71:dd:1c:7c:82:db:9d:aa:a1:
2a:38:64:e5:50:15:e8:4c:c1:9f:e8:d0:b9:ef:e6:4c:ba:77:
60:07:ef:c5:b7:23:b4:d2:3c:4d:52:78:9f:38:a1:44:20:1a:
a8:d8:e6:de:2b:b9:a4:30:a0:d6:6e:63:c6:ba:34:b4:54:f0:
d5:48:7d:33:24:63:e5:0d:bd:4b:55:45:f9:62:99:01:23:8d:
4e:43:92:a7:06:51:88:68:1e:ea:dc:f6:d6:4b:73:c3:09:3d:
e8:58:df:94:8e:df:11:25:6a:ee:24:3e:e1:ef:ae:de:0a:bb:
5c:a2:68:f2:ff:8d:5b:d0:1a:5e:80:d4:b1:a2:6b:80:d5:cf:
e3:97:96:c9:05:98:0d:3d:0e:04:af:56:2e:ee:d8:d4:a0:d4:
3a:d2:77:1c:c9:a4:95:7c:e6:17:70:13:e0:58:64:81:4c:55:
d0:aa:e7:b0:58:0f:30:bf:01:83:90:70:c3:f5:52:6f:92:e3:
48:a8:83:86:06:77:ea:5f:68:fe:70:f9:3e:42:72:f1:29:d5:
a5:a9:52:dd:a3:f3:a8:91:a9:45:03:2a:2e:32:d0:11:78:98:
45:98:b8:93:5e:7e:17:50:07:34:e8:6a:3d:50:88:4a:4f:5d:
49:fe:bf:7b
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUSD4txTpKzUWn8wP3mcImFskYUGQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj
MjMxM2EzYTAeFw0yNjEwMTYxODQ0NDhaFw0yNzEwMTUxODQ5NDhaMDMxMTAvBgNV
BAMTKDM0MTMyOTczNDA2NzRGREQ1QzdGODQ3MzIzNTZBQUU1QUQ0QkQ4NzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYSXBJXUqrYs6vllcvagHCA/v2
/XXSahMkepMSBQGFKN3vWm4Iv3PLLSVQPAX+5j9/kl3aMvNTWn0fDAsbntFLwGtF
z0LPVlKXywADIGoTuF7HedLR87agT49PET7deJ8sGTnSakyWMcGqt5ape8XdArJJ
5rSvb2CI2bJiJRv24uq1xjvAgXEuJ/dYcLMRliP632G+0w9cBSRyL07zo28k4baL
jmTwfpCBscU69EzWWaxqEFVFU70NDAilwivarb6skwzxgXVpteSNLGPUfyolq6Da
LI744BqXRGt40d8auHJSZ8jA6e2bq+ibFhMgm3bN9Wy9PddG6ufzg2iTuTI3AgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUNBMpc0BnT91cf4RzI1aq5a1L2HgwHwYDVR0j
BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J
eE9qby5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzEzODM1MmUzMjMxMzUyZTMy
MzEzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzNjMyMzUzMy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEALnX0jANBgkqhkiG9w0BAQsFAAOCAQEAWQ9Nw+K5+pH0cd0cfILbnaqhKjhk
5VAV6EzBn+jQue/mTLp3YAfvxbcjtNI8TVJ4nzihRCAaqNjm3iu5pDCg1m5jxro0
tFTw1Uh9MyRj5Q29S1VF+WKZASONTkOSpwZRiGge6tz21ktzwwk96FjflI7fESVq
7iQ+4e+u3gq7XKJo8v+NW9AaXoDUsaJrgNXP45eWyQWYDT0OBK9WLu7Y1KDUOtJ3
HMmklXzmF3AT4FhkgUxV0KrnsFgPML8Bg5Bww/VSb5LjSKiDhgZ36l9o/nD5PkJy
8SnVpalS3aPzqJGpRQMqLjLQEXiYRZi4k15+F1AHNOhqPVCISk9dSf6/ew==
-----END CERTIFICATE-----
Generated at Wed Oct 21 04:51:48 2026 by rpki-client