Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231382e35342e302f32342d3234203d3e20313938373533.roa
File: 3138352e3231382e35342e302f32342d3234203d3e20313938373533.roa (raw, json)
Hash identifier: QQNWFrJL0+Ga5+K7Mjx+2e1h3C7Qu/2y6+FdEdbBSwM=
Subject key identifier: 15:2A:3F:A6:EB:46:42:06:3E:13:14:D4:FD:5E:27:06:ED:AA:97:8A
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 7B525AF13C633CD128F4ED7126A3B6C277AA2C74
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231382e35342e302f32342d3234203d3e20313938373533.roa
Signing time: Fri 16 Oct 2026 18:54:15 +0000
ROA not before: Fri 16 Oct 2026 18:49:15 +0000
ROA not after: Fri 15 Oct 2027 18:54:15 +0000
asID: 198753
IP address blocks: 185.218.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:52:5a:f1:3c:63:3c:d1:28:f4:ed:71:26:a3:b6:c2:77:aa:2c:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Oct 16 18:49:15 2026 GMT
Not After : Oct 15 18:54:15 2027 GMT
Subject: CN=152A3FA6EB4642063E1314D4FD5E2706EDAA978A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9d:35:f8:b2:1b:c5:a3:dd:88:32:6c:32:55:
b4:bc:f1:5c:a6:18:11:da:aa:86:56:6c:d6:3f:11:
05:9a:fd:21:72:06:e1:c3:07:62:81:6c:fe:a9:96:
1d:5f:d7:e5:d5:16:85:99:71:89:93:dd:46:bc:fc:
72:42:d7:b5:37:12:8c:00:97:40:33:f0:91:85:99:
3e:3b:4b:05:0e:cb:c4:f7:de:6f:a1:b0:fa:23:d4:
8b:a4:fc:2e:2f:19:09:a3:e8:1b:cb:67:ab:83:12:
5d:2c:3b:fe:07:02:48:78:32:55:cd:60:6b:4f:89:
c1:e7:9b:90:9e:e6:79:38:03:e5:e0:c2:be:ec:37:
eb:56:05:24:25:41:8d:a7:ee:aa:9f:62:16:09:f7:
5e:47:2e:37:64:11:e3:b1:e8:7e:63:43:c0:4e:0c:
2b:19:94:1d:f9:1b:67:89:72:55:67:e1:57:ef:81:
95:bf:ef:e6:6e:3f:3f:3c:ea:78:14:57:c4:74:99:
61:97:3b:e1:aa:03:18:0a:64:b5:0d:d1:13:f1:42:
1c:9a:ac:48:c6:c0:4f:96:c7:b2:ab:4a:d9:cb:7b:
d0:b9:10:49:49:a2:0d:ad:1b:52:8d:0d:8d:ee:72:
6f:11:3b:b2:51:92:ad:29:1e:28:66:c5:d0:90:0a:
4a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:2A:3F:A6:EB:46:42:06:3E:13:14:D4:FD:5E:27:06:ED:AA:97:8A
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231382e35342e302f32342d3234203d3e20313938373533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.54.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:c7:be:4d:24:02:51:ca:67:7e:40:79:a5:0b:9d:2b:24:e2:
27:8b:bd:aa:98:a4:68:ad:b8:90:f8:2f:87:e6:95:c5:5f:ae:
be:ff:25:77:c1:45:e6:3c:ce:2f:a1:42:7e:01:e6:20:05:15:
0e:d8:92:a1:c3:e1:a4:71:c5:06:10:bc:1c:86:3a:20:1a:8f:
1a:38:9f:4f:62:75:b8:fc:03:91:be:9d:06:9f:f3:18:72:ee:
8f:b7:5e:8d:7f:1f:be:9a:16:62:9e:d2:2d:bf:b8:8d:05:d5:
12:cc:fc:83:d9:1f:d5:bc:2a:d3:3c:93:22:6b:dc:db:ab:9a:
90:60:7b:ce:c0:a6:b0:16:2b:32:5a:95:d1:52:98:d0:c8:65:
29:b1:1f:45:fc:1d:d8:da:4f:8c:34:5c:ae:01:9d:40:03:ec:
07:eb:21:af:39:ac:40:10:20:7f:ea:03:bb:e7:0b:ac:91:68:
f8:81:93:73:34:21:4e:3a:6d:36:38:bb:f4:1a:dc:e2:c2:dd:
b6:fe:4b:e5:24:89:10:83:b2:e5:ea:f5:a5:3c:4c:a5:57:10:
5a:57:ef:c2:78:7e:65:e7:87:e2:f8:3e:05:9f:a7:bf:0b:be:
9b:4b:09:d6:91:d9:b7:a6:54:82:28:39:7f:de:62:4c:af:1f:
e1:88:ab:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 20:01:02 2026 by rpki-client