Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231372e3135312e302f32342d3234203d3e20323136323533.roa
File: 3138352e3231372e3135312e302f32342d3234203d3e20323136323533.roa (raw, json)
Hash identifier: fKomUNtstlIT+pXDTB9B32B92b+UAypuJT6zi/LXEb4=
Subject key identifier: 19:FB:E1:99:2D:59:FA:95:6D:6C:F1:BC:42:6C:70:17:BD:5C:06:15
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 05EA93ABCEF3409B7C45469CE9B5DC4C98EEBECE
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231372e3135312e302f32342d3234203d3e20323136323533.roa
Signing time: Fri 16 Oct 2026 18:49:56 +0000
ROA not before: Fri 16 Oct 2026 18:44:56 +0000
ROA not after: Fri 15 Oct 2027 18:49:56 +0000
asID: 216253
IP address blocks: 185.217.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 20:14:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:ea:93:ab:ce:f3:40:9b:7c:45:46:9c:e9:b5:dc:4c:98:ee:be:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Oct 16 18:44:56 2026 GMT
Not After : Oct 15 18:49:56 2027 GMT
Subject: CN=19FBE1992D59FA956D6CF1BC426C7017BD5C0615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c2:95:12:40:30:17:48:80:fe:cd:66:d3:cb:
0b:39:ec:f3:cf:ad:f2:14:3e:3c:20:48:53:61:af:
3d:c2:c7:4d:e7:45:ac:44:cd:43:5d:10:0f:69:64:
92:0c:15:c0:d8:b3:a5:a6:b9:09:ba:9e:4c:dd:79:
1a:8a:c6:b2:95:9e:ae:12:6c:9f:22:6a:d7:a7:50:
66:67:5b:fe:de:e8:d9:38:53:10:78:b0:00:45:66:
11:1f:16:cc:82:dd:ce:ba:13:a4:5f:e4:36:d2:66:
b0:ff:df:fb:ee:40:35:f6:7c:28:d8:06:a7:ac:9d:
3b:f6:cc:2d:62:a8:45:07:04:2a:b4:64:0c:a6:cb:
51:e5:94:9e:7e:49:ec:4e:0e:fa:1a:f9:a8:e9:22:
4f:02:2a:9b:92:40:fd:a0:27:5a:dd:bf:4f:23:fa:
b0:e8:5d:d7:37:f7:b8:9a:85:6b:49:a2:82:1e:c7:
33:26:5c:d5:e0:c9:c1:bb:42:4f:53:a8:9a:2b:78:
c1:22:4a:74:6e:28:b4:ba:04:e7:d0:15:7f:81:e6:
88:18:3b:8f:39:64:8f:14:c1:29:7f:02:dc:8a:f0:
ce:4d:6a:d4:dd:ee:e0:15:6b:5e:92:35:eb:6f:2c:
0f:a9:d0:b4:d2:45:10:46:90:9c:31:5d:18:6a:47:
82:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:FB:E1:99:2D:59:FA:95:6D:6C:F1:BC:42:6C:70:17:BD:5C:06:15
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231372e3135312e302f32342d3234203d3e20323136323533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.151.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:f5:c2:12:aa:63:2c:6c:62:06:f6:26:67:e4:65:08:7f:5d:
5b:2b:7d:e2:fc:3b:da:e6:44:2a:76:d3:bb:19:a4:36:fa:9f:
fb:73:3f:96:2f:2b:66:87:31:3b:89:15:c4:42:88:f9:c8:6e:
65:53:aa:56:46:a0:9c:ce:11:7b:5f:9d:e6:a7:1f:2a:ea:71:
bb:41:c3:16:2d:d8:93:7d:50:27:56:58:29:72:9a:cb:33:48:
47:00:a8:ca:3c:1b:ab:eb:5a:6f:d9:13:fb:65:35:56:90:e3:
c1:a7:21:33:cb:9f:61:d2:7e:38:eb:55:94:90:d3:ff:13:01:
58:1b:d3:37:f4:d5:d6:50:d3:c4:f8:99:e2:30:3a:a3:94:79:
c5:20:41:3d:15:6d:ae:78:b6:f6:92:40:ce:ba:72:b1:79:84:
42:c1:c5:b3:96:be:97:4c:f9:f3:01:f6:1f:a9:c1:21:5f:59:
d5:af:e4:ea:5a:d5:3e:75:9a:c7:d5:99:c7:70:97:f9:64:3d:
4a:bf:9b:9f:7a:d6:19:31:4f:d6:2d:98:15:c4:d7:fe:66:9c:
5b:bd:89:12:88:df:98:6c:84:73:2e:de:ed:67:27:49:39:87:
2d:85:56:3b:2d:d5:86:66:53:af:c7:47:63:62:98:38:da:1b:
9b:02:c7:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:53:56 2026 by rpki-client