Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/3138352e322e34392e302f32342d3234203d3e203136323736.roa
File: 3138352e322e34392e302f32342d3234203d3e203136323736.roa (raw, json)
Hash identifier: c24x2J+0/kPthk+wNeBkwc8WUqBu80LvdoO/pr6X9w0=
Subject key identifier: 61:86:29:B6:89:B6:C4:F5:9D:95:B0:58:1F:1F:8C:41:50:F8:E6:BF
Certificate issuer: /CN=a29ef21c1397ab4b2f08778305a37ffd1cc25c4e
Certificate serial: 59D9FFA4E61489833E301C67808C8CFCAC1BE3FB
Authority key identifier: A2:9E:F2:1C:13:97:AB:4B:2F:08:77:83:05:A3:7F:FD:1C:C2:5C:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/op7yHBOXq0svCHeDBaN__RzCXE4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/3138352e322e34392e302f32342d3234203d3e203136323736.roa
Signing time: Tue 14 Jul 2026 16:42:52 +0000
ROA not before: Tue 14 Jul 2026 16:37:52 +0000
ROA not after: Tue 13 Jul 2027 16:42:52 +0000
asID: 16276
IP address blocks: 185.2.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.crl
rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/op7yHBOXq0svCHeDBaN__RzCXE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 18:57:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:d9:ff:a4:e6:14:89:83:3e:30:1c:67:80:8c:8c:fc:ac:1b:e3:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a29ef21c1397ab4b2f08778305a37ffd1cc25c4e
Validity
Not Before: Jul 14 16:37:52 2026 GMT
Not After : Jul 13 16:42:52 2027 GMT
Subject: CN=618629B689B6C4F59D95B0581F1F8C4150F8E6BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f4:de:6f:46:a0:ac:f3:2c:8f:ac:d8:41:d1:
f7:be:1b:a8:8b:0e:ea:54:1b:a0:d5:2b:40:99:26:
b9:da:a4:4b:df:a8:8b:da:e7:a3:bd:33:f7:f6:fd:
60:f8:e4:4f:cf:ff:72:a1:03:1a:94:04:30:90:45:
29:c9:9f:26:f7:9c:ed:a8:ba:c2:4a:42:08:d2:a2:
91:ac:d1:15:52:2c:1b:21:c1:28:67:b3:5f:c7:b9:
9a:cc:85:6f:fa:95:39:83:6c:5c:46:96:36:fc:43:
d9:cd:31:7d:0f:b5:fb:14:1d:16:52:38:7b:44:d8:
d9:fb:44:5b:d9:00:a2:9a:d0:30:49:0d:52:80:d1:
e8:35:ab:bd:37:66:b6:71:47:87:2c:5e:37:d7:28:
ca:14:74:f9:0e:89:89:29:47:d6:cd:c9:4a:95:a2:
15:6c:11:fd:8c:93:fb:7d:a7:b8:85:8d:5c:8b:3f:
6d:2c:30:5e:b5:3e:68:3b:7d:5a:8e:18:23:b8:c5:
99:3b:bb:f6:95:78:47:c7:4f:3c:cd:44:b5:8b:b7:
30:72:9c:da:e0:33:03:46:90:c2:1b:2c:67:14:37:
50:e9:eb:a7:46:4e:c3:57:1e:17:6e:d7:19:e1:0b:
d4:b2:32:54:76:29:34:10:e4:74:e5:c7:8c:e3:c2:
86:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:86:29:B6:89:B6:C4:F5:9D:95:B0:58:1F:1F:8C:41:50:F8:E6:BF
X509v3 Authority Key Identifier:
keyid:A2:9E:F2:1C:13:97:AB:4B:2F:08:77:83:05:A3:7F:FD:1C:C2:5C:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/op7yHBOXq0svCHeDBaN__RzCXE4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/3138352e322e34392e302f32342d3234203d3e203136323736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.2.49.0/24
Signature Algorithm: sha256WithRSAEncryption
47:48:03:97:d5:59:60:5e:80:f5:f9:1d:eb:5f:11:6d:86:fe:
f6:32:b6:95:7c:af:b4:cc:0c:ad:43:66:a9:a1:38:d9:48:64:
6d:6f:37:35:ee:80:01:9b:25:80:8b:5c:31:37:0a:83:11:58:
31:65:31:fe:e1:3b:18:c1:3f:0a:47:79:f2:1a:d9:34:e7:5c:
4d:47:04:7c:d2:f2:f7:03:98:b8:da:6a:23:35:47:f5:06:bc:
be:5d:14:db:3c:22:65:f1:5c:76:fd:de:49:d8:4f:a3:51:eb:
a0:e5:02:46:95:98:f0:19:02:0c:b4:9b:5c:63:42:fa:5c:eb:
59:47:14:98:f6:c0:2d:70:92:58:94:6f:37:82:47:14:f6:89:
45:4a:c6:df:dd:02:a9:85:d7:24:0a:ff:d2:55:91:86:89:08:
d6:3c:24:bf:c4:ba:03:16:61:bd:0c:df:af:57:31:a0:84:d5:
f0:0b:cc:72:03:a3:ce:c8:af:02:79:52:b6:05:16:21:b5:3d:
5c:7c:60:89:0d:f6:00:3c:2a:a5:04:9e:be:15:a7:39:50:5d:
60:a7:f7:0f:4a:ce:40:90:d7:28:10:cf:ff:e0:52:88:a2:60:
42:63:0c:e9:10:05:ed:1f:26:00:80:70:a4:37:98:be:98:b9:
70:6d:e6:7b
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUWdn/pOYUiYM+MBxngIyM/Kwb4/swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTI5ZWYyMWMxMzk3YWI0YjJmMDg3NzgzMDVhMzdmZmQx
Y2MyNWM0ZTAeFw0yNjA3MTQxNjM3NTJaFw0yNzA3MTMxNjQyNTJaMDMxMTAvBgNV
BAMTKDYxODYyOUI2ODlCNkM0RjU5RDk1QjA1ODFGMUY4QzQxNTBGOEU2QkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC89N5vRqCs8yyPrNhB0fe+G6iL
DupUG6DVK0CZJrnapEvfqIva56O9M/f2/WD45E/P/3KhAxqUBDCQRSnJnyb3nO2o
usJKQgjSopGs0RVSLBshwShns1/HuZrMhW/6lTmDbFxGljb8Q9nNMX0PtfsUHRZS
OHtE2Nn7RFvZAKKa0DBJDVKA0eg1q703ZrZxR4csXjfXKMoUdPkOiYkpR9bNyUqV
ohVsEf2Mk/t9p7iFjVyLP20sMF61Pmg7fVqOGCO4xZk7u/aVeEfHTzzNRLWLtzBy
nNrgMwNGkMIbLGcUN1Dp66dGTsNXHhdu1xnhC9SyMlR2KTQQ5HTlx4zjwoYJAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUYYYptom2xPWdlbBYHx+MQVD45r8wHwYDVR0j
BBgwFoAUop7yHBOXq0svCHeDBaN//RzCXE4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYmU0MTcwNGYtNzgxNS00ZjJjLWE1MDMtNThhZTA4ZTU1
NmI2LzIvQTI5RUYyMUMxMzk3QUI0QjJGMDg3NzgzMDVBMzdGRkQxQ0MyNUM0RS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL29wN3lIQk9YcTBzdkNIZURCYU5fX1J6
Q1hFNC5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYmU0MTcwNGYt
NzgxNS00ZjJjLWE1MDMtNThhZTA4ZTU1NmI2LzIvMzEzODM1MmUzMjJlMzQzOTJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzYzMjM3MzYucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC5AjEw
DQYJKoZIhvcNAQELBQADggEBAEdIA5fVWWBegPX5HetfEW2G/vYytpV8r7TMDK1D
ZqmhONlIZG1vNzXugAGbJYCLXDE3CoMRWDFlMf7hOxjBPwpHefIa2TTnXE1HBHzS
8vcDmLjaaiM1R/UGvL5dFNs8ImXxXHb93knYT6NR66DlAkaVmPAZAgy0m1xjQvpc
61lHFJj2wC1wkliUbzeCRxT2iUVKxt/dAqmF1yQK/9JVkYaJCNY8JL/EugMWYb0M
369XMaCE1fALzHIDo87IrwJ5UrYFFiG1PVx8YIkN9gA8KqUEnr4VpzlQXWCn9w9K
zkCQ1ygQz//gUoiiYEJjDOkQBe0fJgCAcKQ3mL6YuXBt5ns=
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:15:00 2026 by rpki-client