Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231382e35322e302f32342d3234203d3e20313938373533.roa
File: 3138352e3231382e35322e302f32342d3234203d3e20313938373533.roa (raw, json)
Hash identifier: dWwOe7Hoef9Jrr5nRlANgaQkHxz/tb1fPOXNFBS/YAo=
Subject key identifier: 4A:94:41:76:08:84:34:91:11:C8:80:D0:D6:14:C4:DB:8D:FD:7E:A0
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 6A1D552FAAD933EECE99C004DAD2CE592F9FB860
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231382e35322e302f32342d3234203d3e20313938373533.roa
Signing time: Fri 16 Oct 2026 18:54:13 +0000
ROA not before: Fri 16 Oct 2026 18:49:13 +0000
ROA not after: Fri 15 Oct 2027 18:54:13 +0000
asID: 198753
IP address blocks: 185.218.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:1d:55:2f:aa:d9:33:ee:ce:99:c0:04:da:d2:ce:59:2f:9f:b8:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Oct 16 18:49:13 2026 GMT
Not After : Oct 15 18:54:13 2027 GMT
Subject: CN=4A9441760884349111C880D0D614C4DB8DFD7EA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:85:45:4b:6e:3d:0f:4d:e5:7e:00:fa:81:df:
ce:72:d4:82:67:5b:30:b9:3d:5e:bc:d3:be:78:00:
34:bc:0b:7e:ff:44:44:34:a2:4c:90:98:b8:75:c1:
91:b8:85:ec:ab:d9:87:eb:73:d6:8c:90:55:ed:f0:
e1:20:bf:bb:db:93:a3:88:96:9c:f0:1a:c3:ee:f1:
c3:80:0c:f7:d9:1f:42:72:9b:7a:2e:a0:a5:05:0d:
37:63:d4:54:87:98:12:ef:51:4a:4f:c6:ea:80:19:
d5:f1:ce:52:70:5b:17:e4:74:15:71:64:de:71:8c:
d2:44:a7:10:ba:41:bd:d2:0c:5c:af:b8:a7:ef:7f:
48:95:09:e7:95:79:74:02:48:0b:1f:c5:30:22:8d:
8e:54:96:1b:23:b9:9a:77:7c:86:3c:66:d4:08:eb:
86:51:06:83:75:2b:4d:01:4c:06:17:c9:ba:5f:88:
6d:ab:39:9f:49:cd:7a:67:00:f2:0f:14:d2:20:85:
31:33:7a:7d:54:de:50:4a:bc:f6:8d:82:29:b7:a3:
c4:cc:66:8a:28:19:e1:96:61:bb:65:38:5c:d5:9a:
ab:ad:24:a3:40:2b:88:3f:aa:78:d5:2b:a8:21:e0:
a9:6e:c8:e7:ba:ae:81:fe:a0:8c:36:bf:13:bc:9d:
be:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:94:41:76:08:84:34:91:11:C8:80:D0:D6:14:C4:DB:8D:FD:7E:A0
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231382e35322e302f32342d3234203d3e20313938373533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.52.0/24
Signature Algorithm: sha256WithRSAEncryption
77:80:5b:e5:eb:31:ac:ed:f8:c8:bc:79:80:1e:11:88:0d:bb:
0a:4a:0f:1b:9b:38:97:17:d5:cf:64:ce:4c:63:20:34:2f:87:
78:17:d6:37:c3:88:5f:a1:61:07:9c:d6:70:74:05:89:76:02:
c0:a3:b9:3b:8a:88:8e:2a:52:21:01:57:b1:20:6e:a6:25:fc:
5c:d4:27:eb:6c:2c:84:47:18:8a:2f:9b:c1:82:25:d8:2a:f0:
5e:d0:1f:02:91:d9:86:7d:d6:87:4c:dd:83:b9:b0:16:18:11:
44:a6:8a:e0:78:b7:8d:4f:0d:f2:36:da:c1:1b:73:05:63:12:
cf:34:a8:fd:92:e1:41:64:02:73:d8:84:91:c1:da:63:6e:58:
56:d9:3d:42:e1:e6:10:db:c5:6e:1d:8a:84:ab:86:55:88:d5:
4c:b0:48:69:32:d4:93:07:80:39:c2:07:a8:ab:d5:3d:33:4f:
f8:cc:78:93:f5:75:61:28:d6:af:eb:24:1b:25:dc:17:c0:16:
7c:fb:5b:d3:e4:32:6d:4f:c2:17:c9:c0:0c:5c:d6:35:09:99:
b3:f8:20:b3:63:6d:ef:b2:79:77:3a:8b:13:d2:e6:7d:f0:ee:
b2:8c:6a:3f:07:74:1c:27:36:15:57:2b:ee:cd:ef:eb:08:0c:
57:16:e9:ef
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUah1VL6rZM+7OmcAE2tLOWS+fuGAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj
MjMxM2EzYTAeFw0yNjEwMTYxODQ5MTNaFw0yNzEwMTUxODU0MTNaMDMxMTAvBgNV
BAMTKDRBOTQ0MTc2MDg4NDM0OTExMUM4ODBEMEQ2MTRDNERCOERGRDdFQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDChUVLbj0PTeV+APqB385y1IJn
WzC5PV680754ADS8C37/REQ0okyQmLh1wZG4heyr2Yfrc9aMkFXt8OEgv7vbk6OI
lpzwGsPu8cOADPfZH0Jym3ouoKUFDTdj1FSHmBLvUUpPxuqAGdXxzlJwWxfkdBVx
ZN5xjNJEpxC6Qb3SDFyvuKfvf0iVCeeVeXQCSAsfxTAijY5UlhsjuZp3fIY8ZtQI
64ZRBoN1K00BTAYXybpfiG2rOZ9JzXpnAPIPFNIghTEzen1U3lBKvPaNgim3o8TM
ZoooGeGWYbtlOFzVmqutJKNAK4g/qnjVK6gh4KluyOe6roH+oIw2vxO8nb53AgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUSpRBdgiENJERyIDQ1hTE2439fqAwHwYDVR0j
BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J
eE9qby5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzEzODM1MmUzMjMxMzgyZTM1
MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM5MzgzNzM1MzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAC52jQwDQYJKoZIhvcNAQELBQADggEBAHeAW+XrMazt+Mi8eYAeEYgNuwpKDxub
OJcX1c9kzkxjIDQvh3gX1jfDiF+hYQec1nB0BYl2AsCjuTuKiI4qUiEBV7EgbqYl
/FzUJ+tsLIRHGIovm8GCJdgq8F7QHwKR2YZ91odM3YO5sBYYEUSmiuB4t41PDfI2
2sEbcwVjEs80qP2S4UFkAnPYhJHB2mNuWFbZPULh5hDbxW4dioSrhlWI1UywSGky
1JMHgDnCB6ir1T0zT/jMeJP1dWEo1q/rJBsl3BfAFnz7W9PkMm1PwhfJwAxc1jUJ
mbP4ILNjbe+yeXc6ixPS5n3w7rKMaj8HdBwnNhVXK+7N7+sIDFcW6e8=
-----END CERTIFICATE-----
Generated at Tue Oct 20 18:35:47 2026 by rpki-client