Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3232332e3235322e302f32342d3234203d3e20323033333830.roa
File: 3138352e3232332e3235322e302f32342d3234203d3e20323033333830.roa (raw, json)
Hash identifier: d/CX0U4DGC90R6Re1tWSKbOX9/M3jbYy9+ucqzciZew=
Subject key identifier: E1:7B:80:5D:C0:9D:69:19:4A:E5:BE:B7:65:66:71:5A:DE:59:14:22
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 164C9EA9AA56396C22A41E923FE625A0C071702C
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3232332e3235322e302f32342d3234203d3e20323033333830.roa
Signing time: Wed 05 Aug 2026 12:51:50 +0000
ROA not before: Wed 05 Aug 2026 12:46:50 +0000
ROA not after: Wed 04 Aug 2027 12:51:50 +0000
asID: 203380
IP address blocks: 185.223.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 14:04:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:4c:9e:a9:aa:56:39:6c:22:a4:1e:92:3f:e6:25:a0:c0:71:70:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Aug 5 12:46:50 2026 GMT
Not After : Aug 4 12:51:50 2027 GMT
Subject: CN=E17B805DC09D69194AE5BEB76566715ADE591422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8b:ce:df:04:b6:b3:d9:e6:2e:d9:d8:65:2e:
87:df:65:6e:f7:e9:81:3d:35:ba:67:91:be:d7:62:
06:2b:31:f2:b2:f1:a2:18:41:e5:87:20:09:be:5d:
2c:bc:a6:3d:51:89:9a:1e:3c:e8:eb:5e:8f:67:24:
6e:15:44:8c:9a:5e:7f:10:15:40:f3:11:b6:90:8e:
1d:fd:85:f9:c3:9e:42:66:37:13:ce:2c:f4:67:b1:
ed:10:4d:f5:53:ef:92:4a:21:37:9c:2d:f1:15:a1:
64:33:98:21:b6:ec:f5:2e:07:b9:0b:14:17:d1:07:
3e:03:2c:c4:5b:24:69:1a:fa:0d:c8:4f:5d:ef:71:
ce:6a:e8:48:df:92:b5:ea:d3:e4:3f:f0:6b:63:9a:
89:b4:56:b9:5b:2f:60:c4:1c:be:eb:ca:77:d0:c5:
1d:97:ff:95:44:c2:15:c2:6d:b0:70:aa:09:15:fa:
7c:8f:1e:2f:68:5d:a8:fd:82:48:2b:da:cd:5c:cc:
13:4e:73:84:de:20:82:63:d5:6c:5d:38:02:d6:75:
88:55:47:87:d9:96:b5:a9:3b:8a:4a:c5:70:96:06:
47:9c:2e:83:d3:45:ee:52:b6:56:b5:ea:27:c9:13:
87:1f:17:86:90:e0:35:cd:58:d2:39:1c:b5:0f:81:
32:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:7B:80:5D:C0:9D:69:19:4A:E5:BE:B7:65:66:71:5A:DE:59:14:22
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3232332e3235322e302f32342d3234203d3e20323033333830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.252.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:67:40:0f:ac:9e:1c:f9:57:1a:ab:f2:4f:59:43:5c:7f:e4:
1d:49:8b:bc:57:48:52:d5:68:95:5e:91:30:40:c8:d2:a7:ff:
4b:5a:c5:75:a3:01:11:3b:74:86:7f:06:d1:93:71:c1:f0:68:
dd:97:81:35:d5:77:23:1c:67:bd:37:60:7e:c6:3b:2b:e7:5d:
fd:69:74:3b:09:a8:90:ed:4f:92:cd:48:7f:b8:ea:ea:3c:b9:
0c:df:fd:fa:5a:2f:38:b7:08:a0:71:3e:d6:b7:5c:1e:1e:38:
b5:c5:de:90:54:f0:6b:e7:82:c6:0d:90:52:c3:80:c9:ee:09:
5a:aa:b8:bc:7a:00:38:14:c7:cc:16:b3:35:6a:35:fb:67:45:
58:f0:f0:ae:67:39:01:a0:6f:8d:49:ec:d6:12:4e:f1:41:0a:
48:f7:10:c7:ee:06:39:c0:d6:cb:8f:de:f0:c8:62:de:7e:ae:
e0:f8:19:aa:68:9d:17:72:55:12:e5:97:dd:93:58:04:b2:d4:
d3:53:fc:1f:16:d5:5c:26:41:40:92:d9:b2:97:3d:6e:d1:11:
c8:4a:f3:9a:fd:d8:ad:16:9c:76:f3:a0:bf:bf:2e:e3:6c:36:
06:b0:0e:89:45:ba:a1:7f:de:36:c1:83:19:0f:85:17:db:cc:
e3:12:d4:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 18:39:28 2026 by rpki-client