Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231372e3134382e302f32342d3234203d3e20323136323533.roa
File: 3138352e3231372e3134382e302f32342d3234203d3e20323136323533.roa (raw, json)
Hash identifier: ZjziPdjRmaafKu5AINsEaxOWN9EeuqpWkxzMshD/66w=
Subject key identifier: 99:E0:FA:97:B3:21:55:2A:B5:9A:40:48:BC:55:59:17:C6:10:11:F8
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 12A390C01D2FA75EC959DFD226F4648D6A29E354
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231372e3134382e302f32342d3234203d3e20323136323533.roa
Signing time: Fri 16 Oct 2026 18:49:51 +0000
ROA not before: Fri 16 Oct 2026 18:44:51 +0000
ROA not after: Fri 15 Oct 2027 18:49:51 +0000
asID: 216253
IP address blocks: 185.217.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:a3:90:c0:1d:2f:a7:5e:c9:59:df:d2:26:f4:64:8d:6a:29:e3:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Oct 16 18:44:51 2026 GMT
Not After : Oct 15 18:49:51 2027 GMT
Subject: CN=99E0FA97B321552AB59A4048BC555917C61011F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:19:96:a3:3f:e6:7e:43:f1:f7:b5:8c:32:c5:
39:4a:67:06:1d:ee:be:9f:18:e8:fd:0c:b3:9e:ef:
cc:f5:44:96:59:ed:1a:4f:11:57:3e:91:19:01:58:
b3:6b:a8:3d:5a:af:75:cb:b3:44:5f:4a:88:78:08:
fe:f6:f1:0e:c1:b2:e8:cf:50:d0:1c:46:ff:58:1e:
13:4d:56:68:b4:09:43:58:64:1c:e5:14:22:df:6f:
00:75:00:9b:f2:42:30:a7:d7:06:74:be:42:39:ac:
5c:e8:38:80:80:11:e2:72:cb:0a:e2:6e:1d:e9:8e:
3b:8a:ed:33:95:3d:b5:df:93:fa:72:a8:94:14:bd:
53:f8:1c:8d:ab:1d:7e:df:89:d9:1f:95:3d:f4:1d:
a4:e7:c8:8e:76:d2:e2:5c:50:e0:39:a8:37:16:89:
25:88:20:24:aa:ea:8f:ec:a8:9d:ab:69:b8:4c:1e:
25:34:35:a8:cf:94:57:d5:88:e5:c7:db:82:e4:f2:
fa:79:36:6b:58:25:64:cc:bf:47:02:8e:40:b6:7a:
b4:ab:15:85:95:65:eb:d1:62:32:0b:eb:07:8b:41:
f2:83:7d:65:fd:d9:42:a7:eb:2a:bc:08:9e:a6:66:
1d:2a:ac:41:16:bf:48:b5:cc:f5:c7:7e:69:f4:d3:
43:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:E0:FA:97:B3:21:55:2A:B5:9A:40:48:BC:55:59:17:C6:10:11:F8
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231372e3134382e302f32342d3234203d3e20323136323533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.148.0/24
Signature Algorithm: sha256WithRSAEncryption
38:81:70:07:4b:b6:df:eb:7c:e5:18:30:5f:2d:31:da:67:76:
4d:bf:83:cb:c3:19:1a:65:01:72:5a:86:1c:19:4c:5f:7c:68:
a9:48:0f:7e:25:23:84:ba:48:5c:9b:6e:20:d2:f0:73:f9:96:
49:b6:e2:19:38:9e:fd:6d:de:35:91:ae:f2:36:64:31:64:87:
1c:80:7e:62:4f:a8:88:24:d5:4a:d6:d6:28:eb:8a:58:ff:14:
5b:96:31:dd:e9:3b:c9:83:95:0f:40:7b:a5:09:69:f4:38:2f:
74:cb:2f:6e:9b:b9:e1:85:d3:69:f4:ba:71:1b:56:54:51:66:
a4:79:a8:1d:e5:bf:5b:2c:e8:bf:31:5f:ea:2c:39:f1:91:4e:
bd:ff:74:47:e3:04:c5:c2:2a:52:33:99:a2:51:43:bf:d3:8b:
b3:2a:50:76:2f:6b:4d:a3:fb:45:d4:a3:a6:0f:88:66:f4:a3:
42:32:47:22:0d:df:b6:4f:26:da:00:26:63:7c:0b:5d:c0:e2:
9a:df:9b:21:d9:c9:f4:00:84:04:3c:91:82:7a:c5:b5:76:1e:
23:13:5e:8f:28:9a:4b:74:8a:28:05:4d:9f:da:1b:a3:5a:4d:
fe:8a:9a:4e:e2:b1:cd:fc:8e:ea:df:2a:44:a0:8a:05:fa:e9:
a7:d2:a0:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 20:06:49 2026 by rpki-client