Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/3138352e34342e38312e302f32342d3234203d3e203339343231.roa
File: 3138352e34342e38312e302f32342d3234203d3e203339343231.roa (raw, json)
Hash identifier: p4iy8LDCVffoLdKrWA+zx5OOAedpCUAySRc+facwcz4=
Subject key identifier: 19:0E:CB:03:88:FF:31:71:01:DB:9F:D4:C9:92:32:8F:81:C5:70:C9
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 7F067DC0C8D1E422AF707B3867C24A1C106BDA9E
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/3138352e34342e38312e302f32342d3234203d3e203339343231.roa
Signing time: Wed 06 May 2026 22:13:45 +0000
ROA not before: Wed 06 May 2026 22:08:45 +0000
ROA not after: Wed 05 May 2027 22:13:45 +0000
asID: 39421
IP address blocks: 185.44.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:25:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:06:7d:c0:c8:d1:e4:22:af:70:7b:38:67:c2:4a:1c:10:6b:da:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: May 6 22:08:45 2026 GMT
Not After : May 5 22:13:45 2027 GMT
Subject: CN=190ECB0388FF317101DB9FD4C992328F81C570C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b4:18:bc:49:0b:59:3e:f6:0e:1a:ad:e6:fe:
d5:fa:a1:3d:05:43:2c:47:3d:07:96:5a:09:59:d1:
a7:26:5c:26:cb:22:99:23:a0:cd:c9:c8:a0:3a:45:
0e:f9:bb:37:d9:97:dd:09:c9:8f:9b:e4:a9:3e:a6:
a6:e0:04:15:b2:dc:03:f0:fc:ca:0c:10:4e:3e:81:
ab:0e:b6:b6:0e:60:ab:ce:df:b7:0c:e4:ec:eb:7f:
91:c1:6b:a8:d3:c3:cb:2a:76:8f:ae:16:28:23:4a:
bc:2f:73:22:f3:c5:b4:2e:30:30:54:d9:a1:34:ff:
69:bc:2e:87:94:44:6e:ad:67:1a:99:2d:96:13:c6:
1c:18:5a:4e:f4:ff:fe:07:8d:09:57:fc:bc:7e:d7:
07:4f:61:36:72:ce:70:1c:53:e6:9c:cf:fd:76:16:
43:bf:3c:53:c3:1e:29:78:32:54:e1:65:bb:dd:3f:
3e:4d:f9:39:ba:58:8c:17:92:14:f8:96:46:f8:59:
46:71:1d:1a:09:20:eb:a5:9d:34:d8:da:87:87:bc:
0b:57:ef:5d:10:88:ab:31:c7:7d:f2:9c:14:15:ee:
98:e9:b3:e2:79:b8:f6:2b:55:c1:5b:b6:f8:bd:25:
46:2b:9d:d4:f4:ba:ba:b6:cf:df:eb:df:5b:b2:38:
57:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:0E:CB:03:88:FF:31:71:01:DB:9F:D4:C9:92:32:8F:81:C5:70:C9
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/3138352e34342e38312e302f32342d3234203d3e203339343231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.44.81.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:67:5f:33:5f:d5:41:8b:d4:14:c3:ce:1c:18:8c:1a:b8:c1:
32:4c:e3:30:1e:4d:bd:8f:82:c0:1d:42:34:a6:42:a0:b5:e8:
50:d2:e6:a1:4d:97:b5:be:3e:77:29:cb:e8:e8:dd:38:ef:18:
55:93:1c:01:dd:07:f2:1a:48:40:11:45:7e:b7:a0:8f:9d:13:
c4:1f:4b:f2:74:48:25:7e:b4:4a:84:f6:76:ee:41:26:b8:a9:
23:bb:9b:15:5e:70:1d:0a:9b:cf:3b:80:1f:0e:4b:65:d3:2b:
06:30:ed:46:7c:86:b1:f0:77:cb:2a:cf:7a:f3:33:1f:78:78:
b7:7a:db:c4:98:25:8e:6b:2c:f7:6f:9e:4f:bc:c4:a7:3e:f1:
0e:b7:33:6c:b7:55:2d:e9:d6:e1:3d:80:81:a4:11:4a:12:c9:
9d:53:54:fb:83:63:36:f9:dd:77:8f:74:1e:45:b1:c2:77:95:
fe:e1:1b:59:f8:86:73:ee:79:a4:5a:33:7c:b9:c7:04:a1:c5:
13:b7:c0:a5:c6:f5:82:6f:59:46:49:fd:4d:22:5e:28:b3:d5:
98:15:85:99:c8:88:47:98:d8:91:54:0d:78:93:8f:87:8d:3e:
a0:af:94:31:c4:0f:47:19:21:40:f7:c0:51:3e:70:8f:b9:9a:
56:5f:90:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:37:10 2026 by rpki-client