Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231372e3135302e302f32342d3234203d3e20323136323533.roa
File: 3138352e3231372e3135302e302f32342d3234203d3e20323136323533.roa (raw, json)
Hash identifier: EUcnsvDFJLTfx4WGJky4MYHjixwO/fczGzmLAIob2Oo=
Subject key identifier: E1:39:25:AA:48:96:60:46:34:15:46:3F:49:0D:7A:BC:1D:C1:E1:0E
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 12B7E62FFA6EC32F341B4C2083F28B843E6BC81E
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231372e3135302e302f32342d3234203d3e20323136323533.roa
Signing time: Fri 16 Oct 2026 18:49:55 +0000
ROA not before: Fri 16 Oct 2026 18:44:55 +0000
ROA not after: Fri 15 Oct 2027 18:49:55 +0000
asID: 216253
IP address blocks: 185.217.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 12:25:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:b7:e6:2f:fa:6e:c3:2f:34:1b:4c:20:83:f2:8b:84:3e:6b:c8:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Oct 16 18:44:55 2026 GMT
Not After : Oct 15 18:49:55 2027 GMT
Subject: CN=E13925AA489660463415463F490D7ABC1DC1E10E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:87:85:25:d7:88:61:69:bc:b4:3f:1b:96:14:
6d:3f:d6:a1:2e:56:3a:b4:3f:06:10:5a:8d:bb:05:
88:ce:5d:d5:4a:17:ad:44:f2:60:2b:d0:5c:d9:74:
6f:ac:e6:45:6e:1b:6a:1c:ac:9b:81:71:af:ec:f4:
33:75:36:17:42:24:c7:ae:17:50:fb:e3:96:c9:2c:
0a:ce:4f:9f:a4:3b:a0:b5:39:74:8f:4f:7e:5a:65:
94:a3:6f:92:d6:61:31:dc:5f:6a:9f:f3:7e:c7:c2:
0f:59:96:89:b4:43:b0:d3:d4:95:bf:6c:0a:82:11:
33:a9:2f:e5:02:bc:1b:0d:10:74:5f:48:fd:eb:6c:
c1:3a:66:3b:39:60:31:80:84:31:fc:ee:38:90:80:
b2:85:a3:04:1b:c6:58:2d:1f:fe:97:c5:62:5c:1e:
bb:16:eb:d2:6f:73:d9:03:54:11:0c:ed:ed:aa:b6:
7b:c4:80:35:e3:f5:1f:a4:48:c5:9d:f7:ca:73:e7:
07:8c:31:b8:ae:6d:95:bf:12:7f:f9:23:d4:fb:c4:
4c:20:9f:39:f4:5a:dd:10:2c:ba:0e:b0:f7:16:f3:
56:8f:11:4e:61:44:8f:fb:08:ee:a1:f5:4a:e7:2e:
d9:f2:8d:31:2d:db:c2:1f:e7:6b:46:2f:cf:0a:95:
62:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:39:25:AA:48:96:60:46:34:15:46:3F:49:0D:7A:BC:1D:C1:E1:0E
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231372e3135302e302f32342d3234203d3e20323136323533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.150.0/24
Signature Algorithm: sha256WithRSAEncryption
58:3a:cd:f3:07:b6:0b:27:0e:d2:d7:e8:ad:d2:8c:ed:2b:1e:
61:0a:42:2e:cc:43:fd:79:fc:89:d7:d0:62:8f:25:a4:16:3a:
05:da:4d:21:e2:5d:87:58:5e:47:98:9e:f0:0c:3e:d0:b3:fb:
63:96:f1:e5:00:a5:54:2f:0c:b8:4f:9a:53:77:3d:85:d4:b9:
0a:89:c0:94:c9:98:5b:94:2c:0f:9a:82:b3:1f:1a:5d:22:ee:
31:2f:46:33:e1:0b:27:66:3e:59:b4:c2:07:54:ab:b3:f9:7c:
14:0e:ff:de:81:2f:b6:bd:70:fb:89:90:2e:88:6a:01:f9:08:
5a:79:c0:6c:f1:a2:bb:ad:0a:30:69:60:8c:1e:89:bb:fe:9a:
9f:03:a6:49:33:98:03:87:c1:e4:44:13:95:04:c8:63:a7:46:
24:ba:83:86:c7:c0:07:82:ea:91:6e:4b:0d:68:48:c6:ba:4e:
54:ea:41:5c:59:2b:04:25:a9:f2:ed:74:1b:8a:16:e1:97:cd:
67:00:b9:14:61:39:0d:3e:ee:94:71:f2:dd:18:91:87:b1:86:
d2:48:b5:24:42:f8:ba:04:66:be:e8:1b:8d:9d:f3:d9:5d:d8:
27:30:9b:58:d5:4c:2c:b9:f5:2b:52:46:f5:bf:2b:c9:6f:a3:
f7:70:6d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 04:51:20 2026 by rpki-client