Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231382e35332e302f32342d3234203d3e20313938373533.roa
File: 3138352e3231382e35332e302f32342d3234203d3e20313938373533.roa (raw, json)
Hash identifier: CQbcKhHmEVK4/RddGTqGpfj12+c5FYensL7kPDSfp0M=
Subject key identifier: 32:5A:4E:CD:D5:B7:42:90:5E:DB:95:C7:80:BC:82:B2:FE:31:91:E2
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 673ECEE4132A10255E520CC76F9E6D94C225EB31
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231382e35332e302f32342d3234203d3e20313938373533.roa
Signing time: Fri 16 Oct 2026 18:54:14 +0000
ROA not before: Fri 16 Oct 2026 18:49:14 +0000
ROA not after: Fri 15 Oct 2027 18:54:14 +0000
asID: 198753
IP address blocks: 185.218.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 07:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:3e:ce:e4:13:2a:10:25:5e:52:0c:c7:6f:9e:6d:94:c2:25:eb:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Oct 16 18:49:14 2026 GMT
Not After : Oct 15 18:54:14 2027 GMT
Subject: CN=325A4ECDD5B742905EDB95C780BC82B2FE3191E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c3:48:82:f4:8c:9c:5d:cf:a6:5b:83:0e:81:
af:e0:57:ac:f5:73:34:b4:ec:fd:ca:3e:4a:4a:6a:
96:03:0e:3c:70:7e:b6:55:46:e0:d3:2f:51:b5:e9:
d7:f2:b0:4d:a7:ca:2c:96:2d:ee:95:38:08:78:44:
dd:5c:4a:45:c8:eb:fb:ca:2a:f4:c7:b2:63:a4:54:
cf:ca:25:d8:ea:21:6e:b8:9e:0c:c0:c7:5c:b5:1e:
25:ab:a3:5e:f9:14:6e:15:8b:14:55:39:48:26:71:
d8:8d:89:01:d5:a6:ab:84:1b:a8:ec:a0:b9:2d:23:
13:d7:ac:ad:a4:d0:88:d6:0e:d2:a9:6d:0b:f5:93:
d3:ed:52:7d:1b:72:b8:d2:35:22:33:49:63:1c:86:
4d:3b:60:a4:6c:ec:f1:39:86:e4:dd:03:12:e6:0e:
e8:86:d9:ba:54:33:e8:74:01:3f:f1:7c:a4:ef:3f:
6f:dc:b0:63:fd:5b:75:32:59:75:e6:d7:8a:95:28:
b7:71:c5:8e:62:cf:55:af:5b:1b:14:0c:e4:58:48:
ce:fe:71:49:2e:5e:b6:9e:c2:0f:3a:71:4b:31:9d:
9b:84:6c:e1:a8:b8:c0:4a:68:55:3e:7f:9f:ca:6c:
16:44:40:81:4f:89:23:3c:fb:18:04:46:33:86:27:
0a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:5A:4E:CD:D5:B7:42:90:5E:DB:95:C7:80:BC:82:B2:FE:31:91:E2
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231382e35332e302f32342d3234203d3e20313938373533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.53.0/24
Signature Algorithm: sha256WithRSAEncryption
18:5f:19:e1:a8:56:1a:08:d0:72:3f:27:d9:74:75:01:be:99:
c4:c5:76:2e:ef:c0:fc:a8:e5:53:ff:42:99:7a:4e:f9:dc:84:
46:c2:a8:e5:53:72:fd:e5:2a:af:48:c1:b0:fe:17:6a:0e:d6:
ff:99:cb:c3:fe:5c:86:fd:d6:13:89:6d:57:93:4d:25:a7:29:
e6:8a:6f:22:94:c5:29:28:d7:2d:42:32:03:46:c4:49:c9:d8:
c5:9b:82:10:39:dc:db:31:2a:60:51:fa:c3:81:c4:63:c2:a7:
3c:67:b2:81:89:78:06:3f:55:9b:27:55:3b:f8:c1:25:ab:32:
42:2e:99:78:0f:91:59:2a:9c:dc:bb:7f:b0:4c:e4:dc:03:95:
c9:f0:18:a5:8c:6a:94:9a:8c:20:d8:e9:01:c8:23:4d:d7:06:
7a:6c:84:2a:12:51:77:46:0c:61:c2:be:e1:f6:0d:dd:e7:f1:
32:dd:b9:16:b0:50:78:f1:80:4d:1c:e1:c1:41:cb:ee:2d:d0:
d2:83:6e:9d:e2:c9:4e:a6:49:6b:d3:65:56:46:e4:fd:b9:b6:
8b:4c:59:5f:12:99:f5:d3:78:3d:6d:6d:28:bc:71:13:e2:cd:
e1:c7:ff:c7:aa:85:ab:f4:24:32:b2:df:f1:37:03:36:6c:a2:
93:8e:ac:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 19:43:53 2026 by rpki-client