Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/3138352e3131352e3230372e302f32342d3234203d3e20323132333336.roa
File: 3138352e3131352e3230372e302f32342d3234203d3e20323132333336.roa (raw, json)
Hash identifier: pap59ktUA86YtgT6511v/VNfK45kjH0QXBPDQ6JB9oE=
Subject key identifier: B6:BC:14:32:D8:38:E1:2C:DF:45:56:C6:5C:FA:12:71:9D:29:21:3B
Certificate issuer: /CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
Certificate serial: 59BFBE824B9ABBCCE9C2ED54B2740827E1442ADA
Authority key identifier: 92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/3138352e3131352e3230372e302f32342d3234203d3e20323132333336.roa
Signing time: Thu 23 Jul 2026 08:49:14 +0000
ROA not before: Thu 23 Jul 2026 08:44:14 +0000
ROA not after: Thu 22 Jul 2027 08:49:14 +0000
asID: 212336
IP address blocks: 185.115.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl
rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:10:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:bf:be:82:4b:9a:bb:cc:e9:c2:ed:54:b2:74:08:27:e1:44:2a:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
Validity
Not Before: Jul 23 08:44:14 2026 GMT
Not After : Jul 22 08:49:14 2027 GMT
Subject: CN=B6BC1432D838E12CDF4556C65CFA12719D29213B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2b:fc:38:59:80:b1:77:e3:10:7f:e4:81:12:
16:83:22:0a:73:02:97:73:fd:95:b2:81:e7:74:6c:
2f:a1:c2:c1:19:64:83:9e:ec:22:ae:41:8c:56:b2:
c8:3e:c3:2a:54:97:a2:ad:46:8f:d6:56:31:fa:6c:
93:44:01:6b:48:0a:5a:a4:4d:04:00:bc:dc:a0:61:
1f:b1:08:20:85:d8:49:f2:fa:ff:43:a3:d4:7b:b2:
7c:ee:b4:19:14:cd:9e:4b:10:7c:8c:db:cd:0e:b5:
b9:1f:c0:80:c5:9b:82:56:b0:5e:2b:58:03:63:6c:
59:7a:be:af:07:11:e2:1d:ac:d0:ac:ec:61:21:12:
0a:0c:6c:94:2b:ee:4d:ef:c3:c7:75:36:a8:73:13:
79:77:2d:0c:4d:d2:d8:5f:77:ca:4a:bf:c7:00:54:
ac:cb:b5:56:bf:74:51:fc:d6:ad:43:39:f6:05:a7:
f9:94:d1:90:78:e0:a7:3f:bc:67:5c:a2:ce:54:dc:
7f:1b:11:fe:89:9f:ff:6c:63:aa:f3:bb:09:a6:fe:
84:18:cd:a2:6e:6d:11:3d:c8:19:7e:90:0f:cc:ee:
50:4a:02:bd:12:51:95:e3:7b:33:5d:28:a8:91:57:
12:22:34:da:c6:68:97:f4:1f:a7:a6:a0:f2:1e:c0:
9c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:BC:14:32:D8:38:E1:2C:DF:45:56:C6:5C:FA:12:71:9D:29:21:3B
X509v3 Authority Key Identifier:
keyid:92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/3138352e3131352e3230372e302f32342d3234203d3e20323132333336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.207.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:6a:81:1c:41:9a:1b:a6:01:1b:ef:ea:ef:f1:74:35:19:bc:
51:90:2e:53:be:07:ef:96:47:4a:44:bd:91:cf:0d:1e:89:9e:
91:5a:5a:59:60:b7:34:65:8e:7a:b1:25:b4:3b:2e:14:f0:b8:
ac:b7:b1:b0:bb:9f:a0:86:37:77:ff:9c:76:89:63:d9:e1:1a:
6d:d1:c0:90:cf:55:ae:10:e9:9d:6a:1c:9d:22:04:3a:63:8e:
71:3d:5e:e8:a6:f6:f1:fa:ef:68:38:c0:be:e0:a2:e9:44:7a:
d4:35:c0:63:df:20:a9:62:46:50:b2:06:6a:ff:91:7d:b4:86:
31:fa:04:17:e2:94:92:29:51:70:8a:08:ed:f2:33:18:b8:10:
19:e0:af:74:49:51:ad:ba:29:2e:26:76:9e:fa:97:39:ff:04:
49:35:9f:29:be:88:8d:e7:59:b1:12:3f:25:46:b7:3b:a4:43:
42:01:e1:7a:a0:52:50:b2:5f:c5:97:89:af:67:a8:2a:e9:6f:
cd:e8:3b:24:ae:91:65:a0:7c:8b:a6:85:4b:57:ae:ff:13:86:
7a:b0:b0:5e:6c:b4:de:d1:96:71:41:e1:8a:c7:0d:bb:ac:4e:
38:b6:fd:92:4e:35:28:53:34:94:58:ea:67:02:90:30:e3:cf:
28:0e:c9:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:40:56 2026 by rpki-client