Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/3138352e3133342e3139312e302f32342d3234203d3e20323037343837.roa
File: 3138352e3133342e3139312e302f32342d3234203d3e20323037343837.roa (raw, json)
Hash identifier: b2vN+3qPM1Kt77HuQ8RzenF0xuc+QJpvrF7GjBac7y0=
Subject key identifier: 64:76:18:4D:7D:46:59:14:B7:41:B5:7F:FD:86:CB:D0:8A:62:97:C1
Certificate issuer: /CN=25827d84056b8444cc2a7842759035354b8416bc
Certificate serial: 134E97BB66B8C4046AE2B367D873A8C3DEB8EA04
Authority key identifier: 25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/3138352e3133342e3139312e302f32342d3234203d3e20323037343837.roa
Signing time: Tue 14 Jul 2026 07:53:14 +0000
ROA not before: Tue 14 Jul 2026 07:48:14 +0000
ROA not after: Tue 13 Jul 2027 07:53:14 +0000
asID: 207487
IP address blocks: 185.134.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.crl
rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft
rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:11:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:4e:97:bb:66:b8:c4:04:6a:e2:b3:67:d8:73:a8:c3:de:b8:ea:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25827d84056b8444cc2a7842759035354b8416bc
Validity
Not Before: Jul 14 07:48:14 2026 GMT
Not After : Jul 13 07:53:14 2027 GMT
Subject: CN=6476184D7D465914B741B57FFD86CBD08A6297C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:48:8a:12:0d:bc:e9:48:7f:cc:c1:c2:03:e2:
1f:fb:71:0d:ba:dc:86:0b:1f:99:d6:e4:b3:43:0c:
83:eb:fb:6c:ab:7d:71:c3:06:f6:18:22:f0:7c:4a:
d7:26:5c:f3:1f:76:5d:a8:30:0d:1b:a1:20:64:c2:
af:37:6c:46:dc:17:1f:ca:02:7e:1a:84:d2:c6:2b:
ba:09:0b:be:45:2c:e3:eb:15:5a:4e:eb:0d:49:28:
f3:9c:a1:03:cf:97:3d:6c:f2:b0:88:0d:b5:67:4a:
e2:88:48:c2:72:c3:c1:cd:d7:7b:1b:16:76:ef:78:
3e:46:5d:81:80:ee:03:cf:bf:3f:68:e5:ab:43:2b:
e9:8e:af:9e:8c:f0:65:5a:15:d6:9e:94:24:e4:d5:
e3:14:3e:f7:f6:c4:68:bb:97:1b:7b:7a:5c:a3:99:
3d:e0:d0:4c:83:78:65:fd:43:cc:7a:d6:81:b1:95:
87:8b:ee:5f:a4:e6:ab:34:bc:f1:e6:69:c3:a0:98:
b4:e6:38:5a:fd:fc:b6:1e:df:1b:d2:69:51:51:9a:
60:9c:03:a0:8e:6d:71:61:96:59:22:7f:cc:80:40:
9d:a8:1f:3f:91:d4:27:a1:f6:b4:7b:ff:f1:09:db:
00:f9:6d:3d:9a:2c:e1:bc:e4:4c:1e:a0:ee:82:10:
f4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:76:18:4D:7D:46:59:14:B7:41:B5:7F:FD:86:CB:D0:8A:62:97:C1
X509v3 Authority Key Identifier:
keyid:25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/3138352e3133342e3139312e302f32342d3234203d3e20323037343837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.134.191.0/24
Signature Algorithm: sha256WithRSAEncryption
39:91:15:59:79:4b:ce:ca:98:0f:b0:5a:93:0b:93:8c:6d:99:
d7:c9:db:bc:59:1f:14:cf:51:79:c3:79:29:4c:9c:11:9a:71:
e7:94:fe:e3:df:1d:cc:1d:a3:73:ce:1e:76:49:21:96:41:5e:
8f:14:c0:65:cd:a2:41:b7:aa:56:f0:0d:68:c9:83:8e:d1:b0:
cc:2e:9f:67:99:51:85:28:89:09:7a:4c:ae:40:3e:3d:be:f0:
c4:19:33:2a:66:af:41:56:b3:3a:82:5f:79:2c:8a:6f:51:5b:
6d:23:33:11:de:7f:96:d1:ad:d8:b3:95:b0:76:23:0b:ca:53:
ee:f9:a4:fb:99:c5:fd:ce:1d:6e:1a:e9:1b:52:22:b2:05:ff:
ec:de:cf:22:17:b2:63:f6:55:06:74:4a:07:7a:9b:f6:de:73:
52:73:42:af:38:07:70:f8:a4:e2:1a:29:8d:9c:86:dc:bf:26:
c3:78:3f:ea:4b:45:e2:16:df:a5:8a:cf:6b:5c:ce:d1:2e:ec:
ca:38:72:69:7f:18:bf:a9:57:fa:6e:3a:02:74:1a:c3:ad:fb:
b2:5b:57:c5:86:dc:94:d6:12:f8:c7:0f:06:84:37:5a:6a:89:
ee:33:df:23:d1:09:cc:10:47:ed:61:e7:64:ed:58:3c:45:9a:
1f:ef:db:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:26:57 2026 by rpki-client