Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/3138352e38362e3232342e302f32342d3234203d3e203439313932.roa
File: 3138352e38362e3232342e302f32342d3234203d3e203439313932.roa (raw, json)
Hash identifier: 5xkLyFNPQgcgTBbp8vp86o760V0Odn2f3XyfW4ykS+g=
Subject key identifier: 0B:E3:B4:A4:DB:94:1C:C4:5A:54:D0:96:6B:47:D0:82:32:18:40:EC
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 630853B5C749A258F868CF30E282ECF4EB14729E
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/3138352e38362e3232342e302f32342d3234203d3e203439313932.roa
Signing time: Wed 06 May 2026 22:13:45 +0000
ROA not before: Wed 06 May 2026 22:08:45 +0000
ROA not after: Wed 05 May 2027 22:13:45 +0000
asID: 49192
IP address blocks: 185.86.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:25:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:08:53:b5:c7:49:a2:58:f8:68:cf:30:e2:82:ec:f4:eb:14:72:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: May 6 22:08:45 2026 GMT
Not After : May 5 22:13:45 2027 GMT
Subject: CN=0BE3B4A4DB941CC45A54D0966B47D082321840EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8c:19:72:55:86:82:54:33:00:84:05:c8:54:
2b:0f:71:59:a6:d2:e6:79:48:e1:49:0d:d7:37:6f:
cf:b9:d0:f9:07:bd:29:84:69:84:52:24:d7:d9:ae:
12:1b:b8:f3:c9:ee:fd:1a:4e:75:55:09:92:1a:9e:
d8:be:d7:42:b7:03:0a:37:26:c2:19:6c:3b:ee:21:
b5:ee:24:2e:83:f6:8c:d0:1e:b4:4e:ba:6f:20:86:
0c:94:a5:f5:30:f8:ba:fc:46:03:8a:11:1f:71:ea:
c7:ee:07:e5:2c:07:2d:21:93:9b:4f:5b:24:18:3b:
8a:87:17:92:15:9d:a5:08:a4:95:bb:90:79:12:21:
e9:a0:96:d2:cc:4f:e0:d8:8d:ce:29:cd:18:53:8e:
29:dd:d0:6f:52:2c:45:bc:6d:89:8c:52:c4:40:7f:
28:fb:c2:bf:bb:83:00:54:be:e8:fb:c0:47:50:22:
f4:de:3e:55:45:42:b1:58:50:a2:4a:7f:d0:6c:d9:
f7:a2:4e:f5:00:7a:aa:e2:2c:cb:5e:1c:06:f0:33:
6b:23:09:5a:e4:76:5e:72:b7:8a:40:51:79:25:4c:
df:87:d1:61:c4:f4:e0:ca:f5:0d:52:76:9a:83:6d:
82:43:bb:dd:f5:27:6a:75:c1:93:c6:94:7d:ac:29:
b2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E3:B4:A4:DB:94:1C:C4:5A:54:D0:96:6B:47:D0:82:32:18:40:EC
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/3138352e38362e3232342e302f32342d3234203d3e203439313932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.224.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:aa:a4:b8:27:5f:7a:c6:ef:15:18:a7:07:f6:36:c2:46:5b:
a4:c6:85:67:93:9d:0c:05:ce:13:31:dc:4b:38:65:ba:e9:b6:
f7:63:22:bc:1a:1b:31:60:6c:93:cf:6a:5f:bc:f9:f6:a4:21:
b2:01:cc:11:5c:1f:6c:d6:6a:62:62:3a:7a:21:b5:68:ca:4b:
9e:7f:ad:ee:7a:4b:e7:4d:20:f8:b2:26:a5:d7:50:1a:22:df:
01:af:fa:44:12:f3:29:7e:a8:2e:0e:c1:65:e9:97:4c:0d:20:
06:07:d9:77:b0:6d:88:b7:74:8c:33:48:c3:44:80:3a:ed:ac:
f0:d4:af:4e:1b:dd:8a:56:4e:15:18:6e:e0:6d:e2:f5:1b:ad:
5e:c6:ce:37:30:5d:7c:72:3a:a0:8c:52:5c:36:f0:e3:af:93:
da:18:2e:1e:3f:4e:61:14:6b:ab:13:59:34:23:5e:45:79:4d:
af:bc:a2:82:1e:bb:0a:31:a0:0d:6c:d4:60:f2:c4:d5:29:f4:
1e:ab:ff:13:2f:ce:e6:db:62:47:dc:54:2a:74:7b:ab:9f:34:
68:db:9d:ef:fb:da:f9:ac:c3:22:74:c4:f8:da:12:49:7d:5b:
cb:e5:16:35:1f:63:f1:58:2b:f3:e7:67:12:ee:3a:0b:7b:d9:
21:15:39:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:49:45 2026 by rpki-client