Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/3138352e322e34382e302f32342d3234203d3e203136323736.roa
File: 3138352e322e34382e302f32342d3234203d3e203136323736.roa (raw, json)
Hash identifier: My8k+OlTa0xhkcLsUsLQSsLVzn3l1jbc6y5Wrco7eqk=
Subject key identifier: DB:B8:2A:26:A9:FA:CA:9B:AA:7D:82:06:F5:C7:C3:D9:F8:C0:ED:9F
Certificate issuer: /CN=a29ef21c1397ab4b2f08778305a37ffd1cc25c4e
Certificate serial: 765D9351BCA53B664C10BE85DD8BD468CD20A934
Authority key identifier: A2:9E:F2:1C:13:97:AB:4B:2F:08:77:83:05:A3:7F:FD:1C:C2:5C:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/op7yHBOXq0svCHeDBaN__RzCXE4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/3138352e322e34382e302f32342d3234203d3e203136323736.roa
Signing time: Tue 12 May 2026 16:30:43 +0000
ROA not before: Tue 12 May 2026 16:25:43 +0000
ROA not after: Tue 11 May 2027 16:30:43 +0000
asID: 16276
IP address blocks: 185.2.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.crl
rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/op7yHBOXq0svCHeDBaN__RzCXE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:13:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:5d:93:51:bc:a5:3b:66:4c:10:be:85:dd:8b:d4:68:cd:20:a9:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a29ef21c1397ab4b2f08778305a37ffd1cc25c4e
Validity
Not Before: May 12 16:25:43 2026 GMT
Not After : May 11 16:30:43 2027 GMT
Subject: CN=DBB82A26A9FACA9BAA7D8206F5C7C3D9F8C0ED9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0d:60:ae:d8:c0:1f:04:70:b0:9d:08:4d:f1:
12:20:8e:cd:7a:b3:22:ec:f1:d3:96:f8:03:e1:9e:
2b:1b:4b:d6:40:b0:d5:f3:5d:65:43:b1:ee:84:cb:
0c:6b:21:36:f3:bd:a0:62:8a:ab:41:06:37:c5:7a:
80:f5:de:d8:e8:33:f5:ff:22:d0:24:a9:0e:02:63:
f7:4d:82:44:b2:59:7e:cd:88:75:a7:64:83:15:1a:
c5:43:68:59:00:e0:f6:6a:58:c2:c8:35:77:93:32:
17:8e:a3:2c:60:c8:69:8d:4d:6a:58:17:5d:79:a5:
01:bc:b5:ab:79:11:f9:1b:8b:e8:62:f4:6e:76:a6:
8b:ee:d7:9a:08:2b:c7:8a:b5:2e:54:f2:63:a2:31:
1c:85:f0:29:08:4e:9b:19:08:a5:25:a9:d4:5e:bf:
a8:9a:8d:e4:84:fb:db:78:a6:2e:21:7c:72:1e:5f:
e2:aa:5e:f6:d8:39:f8:3e:fb:56:2f:0a:04:3e:e2:
95:f4:b0:73:fa:03:92:da:a7:7e:c0:34:d7:bc:b3:
37:37:07:a4:49:60:3e:e2:cb:ed:a1:57:34:26:0c:
5a:3e:e4:47:c9:cf:93:95:e4:31:fb:c3:53:78:66:
65:a2:fc:79:f9:ab:67:e6:2c:2d:9f:48:c4:fc:32:
b8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B8:2A:26:A9:FA:CA:9B:AA:7D:82:06:F5:C7:C3:D9:F8:C0:ED:9F
X509v3 Authority Key Identifier:
keyid:A2:9E:F2:1C:13:97:AB:4B:2F:08:77:83:05:A3:7F:FD:1C:C2:5C:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/op7yHBOXq0svCHeDBaN__RzCXE4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/3138352e322e34382e302f32342d3234203d3e203136323736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.2.48.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:af:bb:db:94:a5:7d:ce:1e:cb:02:70:c8:91:1c:9d:40:0f:
26:da:f0:21:4d:88:76:1f:c0:84:58:98:89:76:15:c6:75:9f:
1f:a3:e6:f2:e4:74:3d:0d:51:05:86:c2:2e:92:e0:cf:f7:fc:
29:d8:0f:89:6e:a5:cb:0f:2b:c3:e6:70:76:72:1b:98:0c:59:
b4:47:a6:1b:09:c2:4c:b8:f7:b5:29:10:57:b8:20:6e:e0:c2:
24:c9:b0:4b:14:cc:47:1b:82:f3:1d:47:af:c9:46:29:e4:d1:
e1:85:08:25:a3:d1:88:81:3c:85:2d:f7:87:86:61:99:c8:f0:
fa:3a:9c:9f:b2:42:d6:98:96:a8:42:2e:78:7b:b7:09:75:b2:
a6:5d:a2:a2:81:81:18:e9:d1:68:63:e3:ce:50:11:c9:ef:ef:
74:b0:e4:7b:bb:e6:8a:58:62:b4:92:0d:17:93:7d:d2:95:d6:
17:69:e4:77:18:d2:bc:d5:34:93:09:e2:f9:48:99:1a:0f:a9:
3d:aa:b1:35:d2:bb:00:4b:34:86:e9:b3:16:0c:9e:10:5b:03:
2f:dd:de:ea:40:2d:01:e8:23:bb:ae:16:22:b5:b8:ef:e0:16:
65:0e:b6:f3:f1:aa:32:50:cb:f4:3a:42:8d:15:1f:60:a2:32:
ac:51:28:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:55:21 2026 by rpki-client