Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3232322e3138362e302f32332d3234203d3e2036303739.roa
File: 3138352e3232322e3138362e302f32332d3234203d3e2036303739.roa (raw, json)
Hash identifier: MVh43CkR9ix9VLrSJ7dlTYkl2Ml+r+r4ozO3hgs3PK8=
Subject key identifier: 07:EF:1D:A1:6A:60:9B:EF:7E:BB:93:EC:17:3B:7A:D4:8B:F5:F4:84
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 422C7BE54A08204276FBE94653FDAA5006AEA01B
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3232322e3138362e302f32332d3234203d3e2036303739.roa
Signing time: Fri 24 Apr 2026 11:54:13 +0000
ROA not before: Fri 24 Apr 2026 11:49:13 +0000
ROA not after: Fri 23 Apr 2027 11:54:13 +0000
asID: 6079
IP address blocks: 185.222.186.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:2c:7b:e5:4a:08:20:42:76:fb:e9:46:53:fd:aa:50:06:ae:a0:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Apr 24 11:49:13 2026 GMT
Not After : Apr 23 11:54:13 2027 GMT
Subject: CN=07EF1DA16A609BEF7EBB93EC173B7AD48BF5F484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d8:76:df:0a:c2:ec:ad:d3:cb:8a:9e:6e:32:
2f:7a:9a:f4:84:29:13:17:04:37:03:9c:bd:f6:a9:
56:6a:f7:22:75:bc:c9:3a:2d:ae:e7:aa:97:21:91:
37:2b:6f:e9:41:7e:75:cb:d3:2d:91:43:12:36:f2:
93:3e:38:34:96:00:03:c8:8e:a1:ce:ee:e6:ba:41:
d3:32:d4:d9:49:90:15:65:b8:b6:e9:2c:15:9e:1e:
3d:e6:73:e2:fa:44:b1:d5:14:19:79:f9:70:40:b4:
69:e6:08:ea:eb:19:9c:62:31:ed:cd:02:a3:6d:67:
cc:11:79:c6:de:5b:f0:c9:1c:49:a3:03:76:9a:32:
cc:21:18:52:06:84:e5:de:68:c5:da:38:eb:5f:6b:
97:22:0d:c1:5a:83:4a:e0:bb:9d:3e:45:df:41:78:
a0:26:d7:4f:2d:9e:62:62:56:9e:2a:3a:d3:36:d8:
c8:26:19:4c:b6:1e:94:f2:9e:22:ca:8b:89:79:2d:
97:65:48:f0:80:4b:dc:7d:fc:9a:36:cc:34:4c:c6:
fa:f5:8c:f4:51:98:83:83:aa:79:a4:90:f2:60:a2:
39:5a:e2:ab:47:0c:19:fc:07:3f:a7:fe:3c:ee:33:
26:ad:2a:0f:45:0b:c6:48:e2:f8:ee:a7:72:a9:54:
6e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:EF:1D:A1:6A:60:9B:EF:7E:BB:93:EC:17:3B:7A:D4:8B:F5:F4:84
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3232322e3138362e302f32332d3234203d3e2036303739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.186.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:11:31:71:fe:ec:fa:65:81:7b:b1:4b:ab:4b:ca:df:ac:1a:
37:5d:22:df:6c:a4:5e:a9:d5:33:c5:5a:ac:2d:65:9a:f5:e4:
e9:34:04:b8:65:ed:d2:7c:4f:05:81:a7:75:d4:0c:dc:65:8e:
96:2d:d8:d6:4e:f7:9b:46:2f:8c:64:79:86:e3:58:1d:2c:a1:
20:69:77:dc:20:d5:ca:a5:3d:42:a4:2a:fc:85:5d:1e:79:ac:
88:90:c3:47:b3:d1:74:f3:3e:35:bf:14:e2:7c:e1:f6:a9:0b:
7c:ce:ff:ac:a5:5c:51:ec:c5:03:2b:57:77:4f:90:16:af:ef:
85:4e:4b:a8:48:5a:36:91:b1:c9:92:8b:72:e7:62:03:11:6b:
92:8c:85:a7:83:cf:83:09:c9:6e:8c:2d:27:da:b0:05:92:34:
33:e1:88:3e:fd:be:6f:d2:b0:9d:86:26:0e:88:7d:87:55:cc:
6b:54:5f:51:63:d0:ab:cb:3b:af:2f:3c:db:fe:5c:15:6f:01:
45:59:ec:43:b7:54:9d:72:7e:ee:53:25:d2:d8:bc:00:fa:87:
04:49:d2:13:c7:9e:4f:28:cb:fb:51:f1:e0:04:7f:88:b3:95:
9e:bf:85:d0:41:28:9d:05:d6:39:54:35:2b:f8:ce:b0:2a:84:
2d:31:30:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:03:44 2026 by rpki-client