Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3133302e36332e302f32342d3234203d3e203332313831.roa
File: 3138352e3133302e36332e302f32342d3234203d3e203332313831.roa (raw, json)
Hash identifier: NGEavlC9krxVQb4oA8xeNjVMdvRiumafje1lIvRB/hg=
Subject key identifier: 3E:B0:AF:B3:CE:16:04:70:53:DB:D9:F0:A0:49:14:7B:83:A1:12:2E
Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Certificate serial: 16B0A9E0320FC3CDC30E4D8F04766A4DA5D350DA
Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3133302e36332e302f32342d3234203d3e203332313831.roa
Signing time: Mon 15 Jun 2026 10:47:33 +0000
ROA not before: Mon 15 Jun 2026 10:42:33 +0000
ROA not after: Mon 14 Jun 2027 10:47:33 +0000
asID: 32181
IP address blocks: 185.130.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft
rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:17:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:b0:a9:e0:32:0f:c3:cd:c3:0e:4d:8f:04:76:6a:4d:a5:d3:50:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Validity
Not Before: Jun 15 10:42:33 2026 GMT
Not After : Jun 14 10:47:33 2027 GMT
Subject: CN=3EB0AFB3CE16047053DBD9F0A049147B83A1122E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:73:4a:d2:06:cc:6f:f3:dc:56:69:8b:b5:1e:
23:6f:85:da:96:f2:e2:4f:8d:39:4e:eb:86:51:c4:
d8:23:94:e1:d2:28:71:e5:18:24:c2:c3:1f:75:af:
79:c5:72:04:82:ac:c0:f4:e6:8b:85:4a:92:0a:64:
15:e7:9b:0f:67:61:81:c0:f8:0b:32:56:d7:f5:30:
64:36:cd:d7:d3:0c:c9:10:e9:90:ff:1c:18:82:dc:
f6:db:e4:48:94:7d:6d:03:ce:34:c6:b6:3b:0f:15:
ff:cd:fb:37:17:93:6c:bd:6e:9c:dd:9d:77:9a:a9:
10:fc:37:ca:31:dc:0a:2f:30:3e:c5:6d:f4:2c:2b:
71:f2:47:17:43:f2:da:85:94:d1:39:ee:76:17:a0:
ce:53:92:f0:1c:16:c9:f4:ea:aa:ff:b9:35:ff:7b:
95:35:9f:4d:74:0e:4d:f7:5d:98:db:6a:59:be:a7:
bc:44:0f:75:4d:e1:12:22:28:77:f3:33:fb:2a:d9:
ec:42:25:60:c1:9a:f4:08:1d:a7:73:57:b8:92:22:
79:ea:c9:ab:63:a2:ff:8a:59:36:9b:21:c1:6f:30:
91:2a:7f:5b:31:e5:2e:d9:7f:60:5d:06:03:8d:64:
61:ac:1e:b9:51:31:ba:50:0d:c6:1e:c0:c3:d6:20:
90:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B0:AF:B3:CE:16:04:70:53:DB:D9:F0:A0:49:14:7B:83:A1:12:2E
X509v3 Authority Key Identifier:
keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3133302e36332e302f32342d3234203d3e203332313831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.63.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:6f:94:b8:e5:86:3d:0c:14:5e:1f:57:fd:79:7b:30:fb:fe:
87:49:35:de:8b:9a:ce:e6:a8:a0:25:e1:41:bb:c9:21:46:54:
2f:86:e9:e6:5e:31:ff:e8:7f:e5:92:b5:6e:94:55:88:c2:94:
ce:1f:fb:4e:32:23:8c:ba:ae:de:41:1f:c2:2a:7a:ec:a1:2e:
a7:19:e1:17:2d:16:58:7a:54:88:b7:e8:c4:b9:27:15:24:56:
66:60:43:36:f7:e2:bd:a7:f5:31:47:bd:31:4e:b9:ec:3c:f5:
95:64:54:41:28:e5:bc:88:cc:d5:b8:63:12:88:d2:66:3a:6a:
4d:ed:2d:c1:3c:9d:e4:fe:f2:13:1e:95:eb:1a:1c:a3:7e:ec:
93:9d:e8:d9:e1:0c:f1:b2:61:86:1a:75:1d:cd:69:6e:ac:e4:
3e:9b:69:5f:1e:08:b9:d8:16:d9:61:cb:22:9c:84:8a:96:58:
d6:7e:6e:68:77:3e:54:87:94:7b:f4:91:3c:72:ca:e3:80:b8:
6d:75:a6:9e:22:57:13:30:23:c0:6a:d1:67:80:8f:a1:75:d1:
5a:63:85:cf:09:1a:57:4b:95:0a:12:b4:3a:d3:82:b0:5d:57:
e0:0d:21:aa:51:6f:1c:0a:7c:7b:43:a8:96:90:91:5e:91:bc:
54:8e:cf:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:31:54 2026 by rpki-client