Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231372e3134392e302f32342d3234203d3e20323136323533.roa
File: 3138352e3231372e3134392e302f32342d3234203d3e20323136323533.roa (raw, json)
Hash identifier: RI4k+akmZ2n1Wdlp7KL+UP7eOnGpNb6wgCXdzaPIyDg=
Subject key identifier: 30:FD:05:24:D2:A1:9D:17:70:72:3A:85:A2:0C:38:B7:2F:A5:2F:34
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 0B1C682E1D7C5BD5A63AE3AEC0C893F52FE77E05
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231372e3134392e302f32342d3234203d3e20323136323533.roa
Signing time: Fri 16 Oct 2026 18:49:53 +0000
ROA not before: Fri 16 Oct 2026 18:44:53 +0000
ROA not after: Fri 15 Oct 2027 18:49:53 +0000
asID: 216253
IP address blocks: 185.217.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:1c:68:2e:1d:7c:5b:d5:a6:3a:e3:ae:c0:c8:93:f5:2f:e7:7e:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Oct 16 18:44:53 2026 GMT
Not After : Oct 15 18:49:53 2027 GMT
Subject: CN=30FD0524D2A19D1770723A85A20C38B72FA52F34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:f4:ad:6b:2f:9f:5d:d1:c6:aa:64:08:a4:bf:
ec:0a:d5:93:1f:a1:2e:9b:92:3e:3b:09:e6:b5:fd:
cb:e1:ee:0c:f0:fa:77:f4:00:8a:df:14:32:95:92:
11:ae:ce:54:5f:de:9c:89:85:9b:88:fd:98:5f:13:
35:03:24:4c:98:2b:9f:cb:ae:80:07:15:25:7a:ed:
1d:4b:af:ee:bb:7c:d1:88:df:81:b3:14:74:3c:4d:
c1:17:bc:e2:34:c3:fe:99:f0:b1:91:37:84:72:fb:
39:a7:ce:b9:3a:d4:28:b5:c2:a9:be:8e:27:07:56:
89:a4:d6:6a:9a:36:93:98:d9:cb:da:92:33:2c:49:
3f:ea:3f:e5:af:b4:58:65:75:ca:06:e2:4c:ba:e3:
e6:4d:6a:59:77:30:ce:a3:d2:20:ce:2e:1c:ac:d1:
6e:25:5f:df:d2:de:4f:4f:25:fb:ba:0d:dc:98:dc:
66:22:78:eb:83:6b:7a:51:ad:23:c6:22:cb:c8:42:
d5:95:16:14:27:1c:37:b9:c7:aa:8e:53:f2:08:a8:
f9:ee:c0:aa:20:be:bb:be:10:09:69:c9:60:9d:14:
b7:a5:5d:ed:a9:50:fa:72:07:3e:48:d4:f5:ac:af:
3d:26:1c:2a:93:8f:7d:db:47:d9:f8:37:ce:42:35:
44:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:FD:05:24:D2:A1:9D:17:70:72:3A:85:A2:0C:38:B7:2F:A5:2F:34
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231372e3134392e302f32342d3234203d3e20323136323533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.149.0/24
Signature Algorithm: sha256WithRSAEncryption
05:36:c7:ec:fd:bf:33:72:2a:c6:82:02:c8:65:f8:5e:f7:43:
7d:d2:15:ff:2f:81:1b:ba:29:eb:1b:30:f1:3e:f4:63:ec:f5:
13:02:60:95:0e:e5:31:22:bd:3e:62:9c:17:68:27:a8:7a:1d:
10:6e:c1:83:c4:76:23:06:c1:26:06:e2:a4:87:ca:0d:b0:9d:
47:1f:c4:e4:ff:bb:03:73:91:75:ff:08:b8:c9:3c:f8:82:8c:
32:2e:34:33:92:90:55:03:65:e4:55:ff:85:28:73:24:9a:89:
14:22:b4:c3:59:c5:66:04:c3:09:66:f7:04:95:69:cf:c7:bb:
ae:db:4f:eb:2c:44:f6:10:b2:17:7f:61:05:bd:b3:9a:2d:d6:
31:c0:40:6c:e7:e9:ec:52:c0:46:9c:e1:af:ca:c0:e6:dd:aa:
2d:8c:c4:33:c3:88:70:21:4e:86:88:25:46:88:56:2a:3c:34:
11:c8:db:8b:a9:b6:fe:15:35:3e:fd:bc:39:4d:e0:69:14:48:
42:d1:e3:0f:51:20:f3:ce:4f:79:d9:1f:67:15:7e:3c:43:8d:
9f:8b:59:46:33:2a:fd:be:76:01:34:39:97:ff:14:12:d7:ae:
87:f9:14:66:ba:03:e9:80:4f:e7:b1:47:51:70:92:bf:45:a5:
06:24:b6:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 12:25:02 2026 by rpki-client