Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/3138352e322e34382e302f32342d3234203d3e203137353631.roa
File: 3138352e322e34382e302f32342d3234203d3e203137353631.roa (raw, json)
Hash identifier: KjrwO4+eb6aY+xxixJp0/KHBXaMmoX+ZsXrJEpwe06c=
Subject key identifier: 64:93:48:FD:A7:C9:45:F5:BC:48:5E:12:BD:E5:2F:F4:FD:98:8E:17
Certificate issuer: /CN=a29ef21c1397ab4b2f08778305a37ffd1cc25c4e
Certificate serial: 76B03B49C1B49546E6D3EFEC6CA006C03B05AB62
Authority key identifier: A2:9E:F2:1C:13:97:AB:4B:2F:08:77:83:05:A3:7F:FD:1C:C2:5C:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/op7yHBOXq0svCHeDBaN__RzCXE4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/3138352e322e34382e302f32342d3234203d3e203137353631.roa
Signing time: Tue 22 Sep 2026 16:43:28 +0000
ROA not before: Tue 22 Sep 2026 16:38:28 +0000
ROA not after: Tue 21 Sep 2027 16:43:28 +0000
asID: 17561
IP address blocks: 185.2.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.crl
rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/op7yHBOXq0svCHeDBaN__RzCXE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:b0:3b:49:c1:b4:95:46:e6:d3:ef:ec:6c:a0:06:c0:3b:05:ab:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a29ef21c1397ab4b2f08778305a37ffd1cc25c4e
Validity
Not Before: Sep 22 16:38:28 2026 GMT
Not After : Sep 21 16:43:28 2027 GMT
Subject: CN=649348FDA7C945F5BC485E12BDE52FF4FD988E17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:38:55:40:7c:41:dc:32:3a:2d:67:23:10:28:
3c:df:21:18:98:2e:c0:55:37:c9:5c:61:7a:c5:c9:
8c:6f:e0:46:49:a2:59:12:1d:f3:1c:bd:7a:21:0d:
b4:d9:a3:c1:47:1a:d4:93:9d:cc:cc:37:f4:5d:b5:
69:95:8d:c4:89:ea:f3:bc:89:65:6f:fc:6d:92:e6:
b3:8b:ed:e2:89:33:8a:27:b8:e5:31:34:86:2d:ae:
d7:e3:33:90:22:89:49:96:c9:cd:17:4d:2b:0f:30:
58:77:d8:08:10:55:1f:32:7c:47:1f:23:cb:21:d3:
b2:3f:89:95:f9:6e:ea:eb:dd:67:b6:39:33:fd:79:
cb:f8:ce:89:bd:db:ae:d9:0e:fc:84:e1:bd:e9:4f:
67:2d:17:0c:b6:0f:fe:82:14:72:19:49:50:ed:a2:
e1:c0:f2:bc:7d:14:e6:54:b2:b2:9c:a8:26:29:d9:
b7:77:aa:1e:d7:96:c7:77:ae:63:16:d0:62:54:85:
10:e1:82:88:b5:b3:46:22:fa:f6:2e:2f:c1:b6:2d:
00:bb:25:00:3c:98:df:91:98:54:e3:21:ca:02:5f:
ee:6d:72:0d:68:41:14:e3:5f:64:68:0f:f9:97:36:
1b:14:cb:5d:8f:46:27:ad:be:ba:b7:22:c2:b4:58:
12:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:93:48:FD:A7:C9:45:F5:BC:48:5E:12:BD:E5:2F:F4:FD:98:8E:17
X509v3 Authority Key Identifier:
keyid:A2:9E:F2:1C:13:97:AB:4B:2F:08:77:83:05:A3:7F:FD:1C:C2:5C:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/op7yHBOXq0svCHeDBaN__RzCXE4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/3138352e322e34382e302f32342d3234203d3e203137353631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.2.48.0/24
Signature Algorithm: sha256WithRSAEncryption
67:18:b5:61:1c:81:4e:32:b5:f9:2d:18:b1:e8:2f:72:46:71:
f2:cd:35:f0:88:b0:fc:42:35:53:e8:b0:b0:f8:97:a4:dd:09:
a1:34:12:29:b6:25:1d:48:78:6b:32:fc:73:c2:14:6f:04:78:
22:9f:fb:6d:7e:b8:4f:f0:16:8c:c3:be:b2:c2:0f:10:d8:47:
20:bc:85:f2:a4:2d:01:6c:1b:d5:25:6f:2a:4a:0e:5f:bd:c8:
7e:0e:a6:2b:24:cd:30:5d:29:fc:c5:e4:f4:6e:42:e8:c5:b4:
29:7e:6b:46:15:6a:44:0f:1b:f0:6a:f0:b8:1f:6c:26:08:56:
b2:7f:16:2f:88:88:77:2b:12:7f:df:32:e4:4e:28:d4:8e:25:
68:01:9c:ef:92:65:39:2a:3e:db:75:21:51:1f:a5:b2:4a:dd:
59:ec:55:07:76:04:e5:45:ca:b3:16:6f:16:1a:5c:06:81:ef:
3c:f7:93:0d:f5:73:2c:b5:8a:d4:7c:07:52:1f:bc:b2:38:4b:
b1:b6:4d:20:f1:b5:b4:e4:c9:e6:7f:e6:e6:17:7c:b3:a7:73:
0e:f5:a3:5a:3b:1f:d1:75:67:fb:af:d9:d9:45:76:3a:f5:4e:
53:46:f8:b0:97:d7:ca:a6:96:07:77:92:ad:3c:58:bc:02:6f:
7a:5e:bc:56
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUdrA7ScG0lUbm0+/sbKAGwDsFq2IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTI5ZWYyMWMxMzk3YWI0YjJmMDg3NzgzMDVhMzdmZmQx
Y2MyNWM0ZTAeFw0yNjA5MjIxNjM4MjhaFw0yNzA5MjExNjQzMjhaMDMxMTAvBgNV
BAMTKDY0OTM0OEZEQTdDOTQ1RjVCQzQ4NUUxMkJERTUyRkY0RkQ5ODhFMTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxOFVAfEHcMjotZyMQKDzfIRiY
LsBVN8lcYXrFyYxv4EZJolkSHfMcvXohDbTZo8FHGtSTnczMN/RdtWmVjcSJ6vO8
iWVv/G2S5rOL7eKJM4onuOUxNIYtrtfjM5AiiUmWyc0XTSsPMFh32AgQVR8yfEcf
I8sh07I/iZX5burr3We2OTP9ecv4zom9267ZDvyE4b3pT2ctFwy2D/6CFHIZSVDt
ouHA8rx9FOZUsrKcqCYp2bd3qh7Xlsd3rmMW0GJUhRDhgoi1s0Yi+vYuL8G2LQC7
JQA8mN+RmFTjIcoCX+5tcg1oQRTjX2RoD/mXNhsUy12PRietvrq3IsK0WBI7AgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUZJNI/afJRfW8SF4SveUv9P2YjhcwHwYDVR0j
BBgwFoAUop7yHBOXq0svCHeDBaN//RzCXE4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYmU0MTcwNGYtNzgxNS00ZjJjLWE1MDMtNThhZTA4ZTU1
NmI2LzIvQTI5RUYyMUMxMzk3QUI0QjJGMDg3NzgzMDVBMzdGRkQxQ0MyNUM0RS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL29wN3lIQk9YcTBzdkNIZURCYU5fX1J6
Q1hFNC5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYmU0MTcwNGYt
NzgxNS00ZjJjLWE1MDMtNThhZTA4ZTU1NmI2LzIvMzEzODM1MmUzMjJlMzQzODJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzczNTM2MzEucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC5AjAw
DQYJKoZIhvcNAQELBQADggEBAGcYtWEcgU4ytfktGLHoL3JGcfLNNfCIsPxCNVPo
sLD4l6TdCaE0Eim2JR1IeGsy/HPCFG8EeCKf+21+uE/wFozDvrLCDxDYRyC8hfKk
LQFsG9UlbypKDl+9yH4OpiskzTBdKfzF5PRuQujFtCl+a0YVakQPG/Bq8LgfbCYI
VrJ/Fi+IiHcrEn/fMuROKNSOJWgBnO+SZTkqPtt1IVEfpbJK3VnsVQd2BOVFyrMW
bxYaXAaB7zz3kw31cyy1itR8B1IfvLI4S7G2TSDxtbTkyeZ/5uYXfLOncw71o1o7
H9F1Z/uv2dlFdjr1TlNG+LCX18qmlgd3kq08WLwCb3pevFY=
-----END CERTIFICATE-----
Generated at Sat Sep 26 20:50:57 2026 by rpki-client