Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3138352e3231302e3136382e302f32342d3234203d3e20313436383133.roa
File: 3138352e3231302e3136382e302f32342d3234203d3e20313436383133.roa (raw, json)
Hash identifier: flQC2PRbohLv8iqDkeysEDTcV28G3GM4WvRcY2IJVyM=
Subject key identifier: 93:9E:3F:13:D6:13:1F:85:EC:83:81:D6:EB:A5:66:64:33:DA:07:EB
Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial: 5F95380FDD223DCD7C77541AA5CDC6AC3EEDDF2C
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3138352e3231302e3136382e302f32342d3234203d3e20313436383133.roa
Signing time: Fri 25 Sep 2026 03:55:07 +0000
ROA not before: Fri 25 Sep 2026 03:50:07 +0000
ROA not after: Fri 24 Sep 2027 03:55:07 +0000
asID: 146813
IP address blocks: 185.210.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:95:38:0f:dd:22:3d:cd:7c:77:54:1a:a5:cd:c6:ac:3e:ed:df:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Validity
Not Before: Sep 25 03:50:07 2026 GMT
Not After : Sep 24 03:55:07 2027 GMT
Subject: CN=939E3F13D6131F85EC8381D6EBA5666433DA07EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8e:51:63:4d:d0:66:bb:ac:0a:a4:2a:d6:72:
9e:54:0c:5c:f0:43:ed:31:d8:6d:b2:50:78:ec:5a:
69:d3:ed:b5:78:45:dc:55:d0:e9:12:83:29:b0:25:
5b:ab:ae:3d:3d:40:9e:6c:49:cf:62:9b:00:0f:d7:
9f:c2:8d:10:aa:15:79:c9:5f:13:25:48:cc:2b:5f:
3e:85:d3:cd:e1:b6:f3:b5:8e:f2:9e:fd:d6:a5:3a:
cd:dc:d4:fd:51:05:07:18:4a:58:56:b2:e7:5c:c1:
d9:20:61:fc:c8:e2:f7:50:2d:ab:eb:90:89:f7:a8:
33:d7:ba:6e:cf:39:04:42:51:f4:9a:d3:61:ed:bd:
30:cf:24:8d:40:99:b3:63:f9:39:e0:34:ff:e5:7e:
d2:09:f8:0f:2e:24:e1:f1:ca:09:28:65:e7:5e:73:
cc:26:be:80:9d:cd:ba:e2:bc:93:ae:91:be:ce:99:
78:4b:33:11:ae:24:29:41:9c:f5:fc:aa:1a:12:3d:
19:b1:f7:52:d6:cf:e1:47:41:87:da:d0:89:63:0e:
4e:b7:72:68:dc:55:b7:71:fe:af:e8:89:7d:17:25:
14:ac:8b:ac:bb:d5:76:23:88:18:fc:d6:4c:a4:ce:
2a:ca:5e:f7:f7:90:01:2f:45:a3:71:09:db:1b:22:
bc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:9E:3F:13:D6:13:1F:85:EC:83:81:D6:EB:A5:66:64:33:DA:07:EB
X509v3 Authority Key Identifier:
keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3138352e3231302e3136382e302f32342d3234203d3e20313436383133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.168.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:3d:6b:36:1b:46:9a:49:ef:d4:4e:a8:f9:44:2c:09:b7:de:
f8:fb:50:85:3a:b5:6e:0e:b7:75:66:2f:09:86:8f:c5:5d:d6:
90:7d:df:b4:d9:9c:f2:38:8f:e4:ce:68:4c:f1:f0:78:1d:62:
36:eb:22:d2:8e:d7:39:33:67:64:2d:cb:9a:c2:d2:76:96:5d:
cd:1a:99:72:97:1d:a2:35:74:24:c2:19:fc:9f:98:5c:82:89:
e5:8f:03:1f:f9:9f:fe:0f:ad:be:a3:cc:55:89:e1:d9:01:f2:
59:8f:39:8d:41:9e:d2:62:15:5c:f8:74:92:52:75:8b:71:0b:
5c:f8:61:e4:5d:ad:aa:5d:b8:85:73:a5:94:d4:ff:78:86:c3:
1b:f6:f3:50:cc:ab:33:55:9e:7d:1e:72:06:2a:8f:6f:ce:5c:
b8:50:76:10:53:b6:6b:7c:36:93:e1:74:fa:85:da:a7:f1:d2:
68:36:12:79:e7:af:70:27:16:58:27:4f:21:d8:4a:b2:84:c6:
0f:3f:78:a4:ca:9c:32:27:65:67:ce:8d:33:0d:c8:42:91:5c:
c2:a3:ca:be:a2:ea:a3:64:0a:7f:49:bc:c8:6e:b1:33:93:09:
fc:5e:fe:9c:6f:0a:e6:72:d0:39:11:8b:27:6b:08:d2:27:7f:
14:2a:6b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:47:26 2026 by rpki-client