Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/3138352e3230302e3230382e302f32342d3234203d3e203137353631.roa
File: 3138352e3230302e3230382e302f32342d3234203d3e203137353631.roa (raw, json)
Hash identifier: fhW1e3cyYnCn6pBoTo2nNC75xbtgpt4yU6QsI6Z3e9s=
Subject key identifier: 62:7D:8F:D9:7C:E2:93:97:A2:F8:7C:27:F7:FD:7B:3D:04:01:BE:9F
Certificate issuer: /CN=fddee908a9ad2dfbe32ff35b402a5ab2198dc907
Certificate serial: 1D8E49833C68EAC046905B455F66BEFA1D6821A3
Authority key identifier: FD:DE:E9:08:A9:AD:2D:FB:E3:2F:F3:5B:40:2A:5A:B2:19:8D:C9:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_d7pCKmtLfvjL_NbQCpashmNyQc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/3138352e3230302e3230382e302f32342d3234203d3e203137353631.roa
Signing time: Tue 12 May 2026 16:30:41 +0000
ROA not before: Tue 12 May 2026 16:25:41 +0000
ROA not after: Tue 11 May 2027 16:30:41 +0000
asID: 17561
IP address blocks: 185.200.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.crl
rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.mft
rsync://rpki.ripe.net/repository/DEFAULT/_d7pCKmtLfvjL_NbQCpashmNyQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:51:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:8e:49:83:3c:68:ea:c0:46:90:5b:45:5f:66:be:fa:1d:68:21:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fddee908a9ad2dfbe32ff35b402a5ab2198dc907
Validity
Not Before: May 12 16:25:41 2026 GMT
Not After : May 11 16:30:41 2027 GMT
Subject: CN=627D8FD97CE29397A2F87C27F7FD7B3D0401BE9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:42:d6:22:22:21:8d:4a:4d:07:24:d5:5a:30:
87:39:d8:1d:06:07:34:4e:f9:2c:b2:ff:0a:9b:7a:
44:f5:44:94:1d:05:00:1d:c1:5d:3b:93:9b:bd:6b:
40:0b:cc:aa:15:37:d9:88:0b:36:15:4f:ee:0e:f4:
b7:a6:a4:68:3d:d4:58:08:94:35:01:bf:52:5d:c8:
98:ee:47:79:45:6a:01:fb:69:3b:4e:ee:9a:93:43:
b7:4f:9b:f1:54:17:25:c4:ce:0b:ea:6e:db:f3:4f:
cb:36:2f:c1:63:fe:37:36:e0:4c:cb:ab:34:33:b7:
4c:04:c9:1e:90:41:f6:6f:28:7b:1b:2a:d7:89:8b:
b3:66:bc:3b:23:a1:8b:a6:c7:92:fc:69:23:5b:d8:
2f:94:5f:e1:15:fc:0a:02:04:6a:f3:f5:18:0b:37:
a2:53:45:da:86:83:1b:ad:fe:16:9a:d4:48:33:40:
b6:d4:c7:13:6b:08:24:3b:30:f9:95:10:4f:83:70:
f4:c2:38:dc:de:de:fc:ee:99:2d:56:7e:e1:b8:79:
f3:d1:76:90:6d:22:b0:4d:ff:d5:62:e8:24:4c:e9:
99:c8:a5:f1:be:0c:99:db:bf:16:3e:a3:24:b7:90:
96:e0:c8:24:bb:7e:35:a7:6a:92:44:f1:a3:1b:b4:
4a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:7D:8F:D9:7C:E2:93:97:A2:F8:7C:27:F7:FD:7B:3D:04:01:BE:9F
X509v3 Authority Key Identifier:
keyid:FD:DE:E9:08:A9:AD:2D:FB:E3:2F:F3:5B:40:2A:5A:B2:19:8D:C9:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_d7pCKmtLfvjL_NbQCpashmNyQc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/3138352e3230302e3230382e302f32342d3234203d3e203137353631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.200.208.0/24
Signature Algorithm: sha256WithRSAEncryption
43:14:9f:33:b3:5f:13:55:c6:71:8e:56:6d:40:54:5d:f0:01:
11:43:88:0f:cf:72:18:ae:dd:42:99:d2:8e:69:3c:c5:db:05:
f7:31:88:db:93:5b:49:91:48:bd:16:1a:9c:eb:5c:2d:d9:c6:
a9:fb:2f:da:de:af:8e:fa:6c:f1:30:dd:bf:52:7b:d0:be:46:
50:5a:b5:5c:1b:fd:1b:01:38:7a:b0:f6:77:92:c0:b9:7d:e1:
0b:07:df:4d:45:5b:72:8e:45:24:80:9d:28:53:c8:9a:ac:fd:
ba:fc:8d:44:f7:b0:c1:01:5c:d8:ab:e2:8f:d3:0f:d7:1f:31:
95:10:17:a9:30:bf:be:d0:10:59:83:ad:c3:4a:f2:da:f2:76:
c4:aa:46:39:07:9c:2a:98:fb:e5:4e:d5:dc:7f:c5:9f:e3:bd:
b0:42:b5:6b:12:31:d2:51:47:23:c2:82:9a:80:05:23:1f:22:
0d:c1:ef:4a:44:1a:6f:eb:07:6d:f4:e8:62:9c:fa:03:35:8f:
4c:62:a7:b5:34:5f:5f:35:a3:12:68:e7:e7:4b:32:09:6a:32:
3e:1f:ff:98:c8:85:02:cc:5f:81:6a:84:d4:7b:8d:94:fe:bc:
a0:92:e1:e3:da:05:79:7b:a2:07:b6:3f:9e:9b:4e:72:5e:2e:
d4:3d:03:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:57:58 2026 by rpki-client