Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231382e35352e302f32342d3234203d3e20313938373533.roa
File: 3138352e3231382e35352e302f32342d3234203d3e20313938373533.roa (raw, json)
Hash identifier: k8utvAcoAb/UKrM3pSvMXateTzeI7NpXrtGVoCeWwFM=
Subject key identifier: 28:89:DF:48:E7:BB:2A:EA:39:06:C9:D0:0B:0A:A2:53:DD:18:4F:D7
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 688D41D904820EFEDD3BF676EF0CBCB3D3FDAC47
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231382e35352e302f32342d3234203d3e20313938373533.roa
Signing time: Fri 16 Oct 2026 18:54:16 +0000
ROA not before: Fri 16 Oct 2026 18:49:16 +0000
ROA not after: Fri 15 Oct 2027 18:54:16 +0000
asID: 198753
IP address blocks: 185.218.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:8d:41:d9:04:82:0e:fe:dd:3b:f6:76:ef:0c:bc:b3:d3:fd:ac:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Oct 16 18:49:16 2026 GMT
Not After : Oct 15 18:54:16 2027 GMT
Subject: CN=2889DF48E7BB2AEA3906C9D00B0AA253DD184FD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:11:0b:4e:96:a5:d2:8a:9a:3e:9b:ca:d3:79:
08:e6:24:56:3e:6c:01:96:df:b3:80:d5:17:de:4d:
94:af:e0:d4:cf:df:f6:1b:fe:bd:ab:31:b4:28:05:
cd:f5:1d:d9:f1:cf:7d:11:56:7b:bd:46:7a:29:1f:
d7:06:9d:51:a4:60:bb:f2:b8:10:26:fb:30:f4:cf:
37:9b:3f:38:45:57:61:da:2b:b1:a5:3c:7e:d5:1f:
98:04:9a:99:79:75:d4:31:4e:79:63:53:92:c7:40:
4b:e2:12:b4:24:8d:0d:4c:d3:bb:a8:e4:0b:a1:e7:
2f:d6:94:65:3d:45:5f:32:f7:9d:ba:71:77:a0:3a:
11:0b:80:be:1b:74:b5:e8:7e:bf:b0:09:96:84:7c:
ab:0f:b4:0b:88:9a:6d:dd:92:95:45:c0:c2:15:ec:
36:93:7b:1a:ca:18:7b:a9:bc:04:5b:0d:9d:cc:b5:
c0:0b:99:36:47:09:cc:38:4e:f6:9c:10:1c:03:66:
61:3e:41:c6:f9:00:2b:b2:fd:16:b4:32:cc:9a:3a:
74:53:8c:78:57:3b:f8:59:40:79:61:6a:00:25:e7:
ee:60:bc:e9:27:9b:59:36:4a:27:f2:1e:85:94:e4:
05:c5:e4:7f:ee:cb:03:d0:6e:9d:25:0b:a3:6a:b8:
da:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:89:DF:48:E7:BB:2A:EA:39:06:C9:D0:0B:0A:A2:53:DD:18:4F:D7
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3231382e35352e302f32342d3234203d3e20313938373533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.55.0/24
Signature Algorithm: sha256WithRSAEncryption
00:7a:29:82:1f:4f:69:fb:db:43:61:5e:37:f1:ca:e6:6e:ff:
19:ce:5e:7e:fa:c7:91:9a:4a:be:c2:d0:39:2a:55:53:2f:4f:
72:0b:29:b3:ae:84:57:a4:4c:25:d5:7d:cf:4c:3f:c1:db:2f:
e9:3f:cb:81:bb:6c:b4:bf:88:1e:7f:2a:72:75:7e:91:2b:0f:
57:51:78:87:41:90:b3:65:81:ad:ed:9a:fc:3a:a7:45:9c:6b:
c2:a0:bf:d4:4c:bb:20:9c:d3:4d:53:3c:67:04:76:4c:1f:c8:
c0:62:50:60:45:59:fc:20:58:f2:fb:f1:5b:bb:e4:e2:95:3b:
05:0f:aa:8c:24:02:f4:27:c2:04:1c:ea:0b:63:ec:d9:ca:fd:
a6:a1:e2:45:a8:39:3a:a8:1a:aa:63:c0:a4:b7:05:fe:20:47:
67:46:70:2a:21:64:51:54:ad:ba:56:fe:49:27:8c:b6:48:79:
0f:a6:b5:15:17:77:9d:f1:b2:89:8f:bf:84:c5:6e:15:80:f9:
3e:5d:26:7b:ce:2e:7e:db:b1:db:7d:07:07:09:a0:8a:dc:14:
1e:43:9d:b5:15:ed:ab:4e:88:45:e0:04:2c:4c:33:7e:88:29:
04:64:77:fd:ed:4e:a4:c4:2d:72:18:65:01:17:fb:d3:d7:2f:
2f:4f:70:b8
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUaI1B2QSCDv7dO/Z27wy8s9P9rEcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj
MjMxM2EzYTAeFw0yNjEwMTYxODQ5MTZaFw0yNzEwMTUxODU0MTZaMDMxMTAvBgNV
BAMTKDI4ODlERjQ4RTdCQjJBRUEzOTA2QzlEMDBCMEFBMjUzREQxODRGRDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+EQtOlqXSipo+m8rTeQjmJFY+
bAGW37OA1RfeTZSv4NTP3/Yb/r2rMbQoBc31Hdnxz30RVnu9RnopH9cGnVGkYLvy
uBAm+zD0zzebPzhFV2HaK7GlPH7VH5gEmpl5ddQxTnljU5LHQEviErQkjQ1M07uo
5Auh5y/WlGU9RV8y9526cXegOhELgL4bdLXofr+wCZaEfKsPtAuImm3dkpVFwMIV
7DaTexrKGHupvARbDZ3MtcALmTZHCcw4TvacEBwDZmE+Qcb5ACuy/Ra0MsyaOnRT
jHhXO/hZQHlhagAl5+5gvOknm1k2SifyHoWU5AXF5H/uywPQbp0lC6NquNp3AgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUKInfSOe7Kuo5BsnQCwqiU90YT9cwHwYDVR0j
BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J
eE9qby5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzEzODM1MmUzMjMxMzgyZTM1
MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM5MzgzNzM1MzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAC52jcwDQYJKoZIhvcNAQELBQADggEBAAB6KYIfT2n720NhXjfxyuZu/xnOXn76
x5GaSr7C0DkqVVMvT3ILKbOuhFekTCXVfc9MP8HbL+k/y4G7bLS/iB5/KnJ1fpEr
D1dReIdBkLNlga3tmvw6p0Wca8Kgv9RMuyCc001TPGcEdkwfyMBiUGBFWfwgWPL7
8Vu75OKVOwUPqowkAvQnwgQc6gtj7NnK/aah4kWoOTqoGqpjwKS3Bf4gR2dGcCoh
ZFFUrbpW/kknjLZIeQ+mtRUXd53xsomPv4TFbhWA+T5dJnvOLn7bsdt9BwcJoIrc
FB5DnbUV7atOiEXgBCxMM36IKQRkd/3tTqTELXIYZQEX+9PXLy9PcLg=
-----END CERTIFICATE-----
Generated at Tue Oct 20 18:35:43 2026 by rpki-client