Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/3138352e3235302e34322e302f32332d3233203d3e203338313935.roa
File: 3138352e3235302e34322e302f32332d3233203d3e203338313935.roa (raw, json)
Hash identifier: xGp8+eItU4DUMfx2urK6vyWcW8b1ccDdejxMO/t6Q4w=
Subject key identifier: DE:35:3F:A5:90:FB:E4:AF:35:F2:3B:18:5E:86:D1:83:B3:0B:B8:36
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 49A266EEBB20C28823EA158210BF6551551F7873
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/3138352e3235302e34322e302f32332d3233203d3e203338313935.roa
Signing time: Tue 23 Jun 2026 17:48:39 +0000
ROA not before: Tue 23 Jun 2026 17:43:39 +0000
ROA not after: Tue 22 Jun 2027 17:48:39 +0000
asID: 38195
IP address blocks: 185.250.42.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:a2:66:ee:bb:20:c2:88:23:ea:15:82:10:bf:65:51:55:1f:78:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Jun 23 17:43:39 2026 GMT
Not After : Jun 22 17:48:39 2027 GMT
Subject: CN=DE353FA590FBE4AF35F23B185E86D183B30BB836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ab:a9:fd:e2:d2:dd:d8:f4:3b:4b:3a:57:7a:
18:b3:28:30:2a:4e:4c:ee:b1:00:8b:ce:d1:12:28:
6c:68:fb:41:ed:95:49:c3:35:81:0c:b0:4b:04:94:
18:a3:6b:e2:0b:29:e8:15:35:bf:bc:3b:30:14:af:
5d:96:76:7f:c7:b9:d2:d4:29:45:39:2f:3a:6d:72:
dc:3a:54:a5:3c:91:24:2a:35:59:80:0a:91:80:d9:
e9:50:f1:79:11:fe:1b:f6:8d:58:45:2d:b4:e1:1e:
2e:b1:53:c3:53:df:34:15:8a:35:b9:a3:a1:b0:72:
5f:02:05:f7:64:a1:81:8b:2f:9a:f7:29:2f:78:37:
c9:9f:05:1c:90:d1:00:d4:e0:41:35:92:a3:e5:bc:
cb:9b:ea:92:a8:f4:cb:6d:f9:c7:47:0c:3b:ab:a4:
9a:83:77:a8:a9:f1:4d:9d:24:1b:5d:a2:d8:bf:fb:
43:f9:1a:db:3b:7a:e8:c2:5d:d1:e9:33:7c:38:6e:
67:08:6b:22:f1:20:2b:fc:84:46:ab:e3:3b:08:d0:
01:b8:a3:b7:04:a2:f2:36:28:c0:50:23:23:80:fc:
73:b8:77:c5:46:18:9d:d9:30:39:4a:8e:f5:f9:9f:
93:f5:0c:4e:f7:ce:d2:6b:c9:c4:62:cc:11:82:dd:
5e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:35:3F:A5:90:FB:E4:AF:35:F2:3B:18:5E:86:D1:83:B3:0B:B8:36
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/3138352e3235302e34322e302f32332d3233203d3e203338313935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.42.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:64:fd:57:ba:b0:41:49:c6:bc:83:19:70:6d:a1:26:60:3d:
ec:63:b5:10:db:73:74:07:1d:23:2e:e7:92:95:f0:e9:57:41:
b7:3f:ef:c2:b7:d8:b4:20:ab:a2:49:2e:10:ed:19:3b:fb:da:
9d:91:ce:b1:a6:6c:23:52:44:ed:fb:74:f8:2d:9f:da:04:eb:
14:64:81:fe:ca:54:0f:6f:31:be:48:df:9d:f4:0d:16:2e:c9:
32:0a:93:02:6e:4c:8a:93:bf:f7:a9:fc:06:c6:e0:a0:f2:2c:
0c:f3:5c:7e:d0:0b:a4:08:24:01:15:8c:c3:e2:6f:63:7f:1b:
91:3d:6b:e0:b7:7f:7c:93:6b:c5:ba:e9:02:33:3e:32:25:87:
85:9d:cc:ab:17:d7:1a:fa:75:61:35:83:44:46:63:1e:92:b8:
c4:cd:5a:cd:45:9f:c9:f5:e9:b7:9b:f8:90:c8:16:6c:bc:bd:
f8:f1:d1:ac:a5:76:23:03:f3:5b:f3:3b:00:18:41:06:00:ff:
0a:50:f8:7f:0c:0f:8c:f2:8c:47:4c:04:7e:3c:bc:6d:c2:99:
63:0b:27:6f:85:9b:48:cb:76:40:f9:26:d9:4f:d1:ba:a6:a5:
99:70:2a:27:c0:cb:8f:ad:c3:d4:aa:91:73:ca:d0:4c:a0:a3:
b9:2b:09:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:28:05 2026 by rpki-client