Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3230352e3232302e302f32342d3234203d3e20323132333335.roa
File: 3138352e3230352e3232302e302f32342d3234203d3e20323132333335.roa (raw, json)
Hash identifier: 8kzYQBlgMcJ34aTnx7Hyg2wlrc7vGFz6u5jiqzSxgQs=
Subject key identifier: 28:05:0D:43:96:4F:FA:C6:15:7D:4B:62:10:07:64:F6:22:45:57:2A
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 7CD582312C82A764AA037936210CF7F1314BD8CE
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3230352e3232302e302f32342d3234203d3e20323132333335.roa
Signing time: Fri 13 Nov 2026 15:49:41 +0000
ROA not before: Fri 13 Nov 2026 15:44:41 +0000
ROA not after: Fri 12 Nov 2027 15:49:41 +0000
asID: 212335
IP address blocks: 185.205.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:d5:82:31:2c:82:a7:64:aa:03:79:36:21:0c:f7:f1:31:4b:d8:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Nov 13 15:44:41 2026 GMT
Not After : Nov 12 15:49:41 2027 GMT
Subject: CN=28050D43964FFAC6157D4B62100764F62245572A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:32:eb:22:9c:a4:3e:bd:fc:ae:02:91:72:ff:
ee:6c:f5:ef:ee:5b:72:f9:c8:63:2c:53:3e:35:de:
54:b2:13:95:8b:91:dc:d7:26:18:cb:fe:ad:9a:78:
ca:37:53:52:d6:2e:90:dc:7b:83:49:4b:86:54:94:
18:65:68:09:db:3c:ed:82:57:2b:f6:4f:27:ae:ce:
de:7c:01:38:1f:88:77:6e:94:2f:a1:15:37:31:78:
d4:7f:b6:1c:f8:81:23:7b:f9:31:82:44:14:88:e9:
c1:69:dd:f6:d3:c0:d5:5e:22:3a:64:7a:a5:2b:d5:
ca:8a:e7:92:9b:c8:13:46:9a:a6:eb:d9:67:59:b2:
76:bb:96:81:d0:4a:cf:3f:9e:d2:5a:a0:a4:cf:1d:
88:04:b7:34:d4:63:bd:f8:a2:e8:3b:87:bb:c3:70:
c3:e3:39:4e:0e:00:86:b1:52:b3:ac:d6:b9:c9:f0:
2c:48:73:d8:16:f7:02:30:c2:19:63:ce:19:8d:d9:
a2:fc:d8:a7:aa:d7:b1:d7:9c:6d:ca:3a:c4:0a:46:
9b:8e:f8:d6:86:ea:33:d5:3e:91:b5:5f:4d:80:b9:
53:61:21:90:9b:db:86:18:ac:f2:8f:a1:8a:46:ca:
7c:6c:72:9a:ba:f5:69:49:7e:46:7f:8f:77:59:1e:
0e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:05:0D:43:96:4F:FA:C6:15:7D:4B:62:10:07:64:F6:22:45:57:2A
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3230352e3232302e302f32342d3234203d3e20323132333335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.205.220.0/24
Signature Algorithm: sha256WithRSAEncryption
50:7f:a8:d4:23:cc:6f:f6:f0:fc:77:55:c0:ad:66:87:ef:f2:
75:14:82:d8:26:1d:52:28:cf:49:77:89:89:ef:92:01:d6:de:
fc:dc:88:52:75:5b:42:44:34:a9:ea:c7:11:8c:bf:b5:ef:e1:
eb:5b:2a:03:a9:8d:0e:d4:78:de:9f:c6:1b:92:de:90:fd:c8:
e2:5c:77:9d:8d:14:59:da:5f:6a:b0:b6:f7:69:df:79:9e:5c:
e0:b8:be:0e:29:89:5d:b1:66:a4:f3:06:ad:fa:b9:c0:d2:d0:
d7:a5:95:0b:c0:98:b9:87:cb:d6:99:db:25:78:68:1b:f6:fc:
99:a3:a9:87:fa:ac:26:99:8b:40:77:fc:44:4c:23:26:bf:b2:
6c:f6:38:91:c7:4f:e5:2e:12:f5:35:15:83:e2:42:d6:2d:b6:
af:2b:fd:d0:9d:53:60:5a:81:57:d9:8f:ac:f5:aa:05:c2:ed:
d2:26:15:40:e2:0e:02:b6:bd:8f:e8:50:c4:88:cc:09:ec:36:
2c:7f:76:ea:5f:7c:8e:dc:b7:9b:27:ff:c8:a4:3d:a9:03:e6:
14:d4:89:46:ef:90:13:d7:bf:e6:35:83:c5:5f:d8:5e:56:a7:
d0:38:19:6a:da:fa:c2:76:7a:c5:41:d0:2a:95:24:1b:71:24:
35:a8:37:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:32:45 2026 by rpki-client