Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3231332e3234312e302f32342d3234203d3e20383334.roa
File: 3138352e3231332e3234312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: aEYdwk8pZMpnBOQ6EYEFlIDJW4KV2rxeCh5VAdhJYA4=
Subject key identifier: B5:F0:6A:AB:23:92:F0:6C:2C:72:50:87:DF:56:59:41:FC:0B:0A:7C
Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Certificate serial: 4690E5C05FE686D60F201DD9640FF985F7B23DCF
Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3231332e3234312e302f32342d3234203d3e20383334.roa
Signing time: Thu 23 Jul 2026 20:43:20 +0000
ROA not before: Thu 23 Jul 2026 20:38:20 +0000
ROA not after: Thu 22 Jul 2027 20:43:20 +0000
asID: 834
IP address blocks: 185.213.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft
rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:90:e5:c0:5f:e6:86:d6:0f:20:1d:d9:64:0f:f9:85:f7:b2:3d:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Validity
Not Before: Jul 23 20:38:20 2026 GMT
Not After : Jul 22 20:43:20 2027 GMT
Subject: CN=B5F06AAB2392F06C2C725087DF565941FC0B0A7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:90:8b:ff:ab:2b:9a:8a:72:56:3f:0a:8a:eb:
39:97:87:0b:4a:3e:f4:17:c8:33:57:a9:04:38:0c:
c8:26:d9:61:ca:49:1b:d2:39:91:85:9b:6b:a4:cc:
a6:6e:cb:55:e2:6a:ef:6a:15:6e:55:af:87:df:af:
03:dc:ac:72:44:0d:e4:92:5e:87:61:50:05:23:8a:
7e:0b:55:9c:92:a3:7a:68:18:e7:c2:7e:e1:dd:75:
e7:7d:8d:fc:1d:1c:bc:47:b8:a4:94:ad:ad:a7:1d:
c2:af:7d:94:1c:3d:2a:1e:a4:84:69:df:ad:7c:fa:
8b:ff:42:b4:5f:04:a4:f0:dc:86:21:0e:0d:f8:5e:
50:33:5f:c9:39:7f:95:b6:8d:ff:e9:4b:ce:ea:b3:
e9:76:3e:6b:2a:8e:f6:dd:c3:fe:38:ce:d8:54:5a:
c9:94:76:9c:d8:91:e3:8e:bb:b5:e1:d1:00:75:a1:
c0:e2:9f:66:58:69:8f:2d:f2:eb:f2:01:54:b2:9f:
69:68:35:1d:3e:7d:4b:1d:35:72:08:93:e5:e6:82:
5a:37:bc:60:40:db:61:9f:a5:dc:ac:8b:94:dc:58:
df:76:c1:6d:f2:bb:d1:02:f9:a1:32:6c:a3:04:3a:
35:e4:cb:b5:44:c2:ac:3e:53:74:9c:1e:ec:a5:75:
02:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F0:6A:AB:23:92:F0:6C:2C:72:50:87:DF:56:59:41:FC:0B:0A:7C
X509v3 Authority Key Identifier:
keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3231332e3234312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.241.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:58:7e:68:07:6b:2c:46:50:7d:63:96:fd:b5:22:21:30:8a:
ca:96:b3:38:62:1d:b9:a2:e8:b4:c1:b3:7c:b3:cf:b9:f9:39:
8b:88:54:b1:58:00:ab:4c:89:77:e0:b8:75:e7:06:c9:17:ca:
48:36:e0:bc:6e:23:27:8b:63:fa:53:5f:94:02:d1:e6:6f:2c:
19:cf:09:c1:c3:ec:0f:20:3c:ac:d8:5d:b6:45:f9:5d:04:8f:
fc:9d:2d:16:21:83:8e:88:46:a6:e6:f4:42:fc:b4:12:92:1d:
39:1d:9e:22:c1:3c:34:e5:cd:4b:88:88:47:6e:f7:4e:47:93:
5b:fc:6b:96:13:5e:b1:6e:4e:c9:a6:d3:fe:c0:26:bf:5c:58:
eb:1e:00:99:a8:8c:df:50:d7:12:0d:64:c9:26:83:d5:db:19:
4e:60:cb:c4:c3:a0:b3:38:9e:11:2d:62:2b:28:c6:ec:d6:08:
ea:14:ae:00:de:cd:11:33:83:10:39:2b:d7:fd:e8:13:03:87:
6c:4e:0d:e2:2f:72:c3:43:4b:bf:4b:77:96:68:ad:2f:7c:0f:
98:80:16:3e:12:22:51:b8:9e:02:5f:d8:e9:4a:b6:69:0d:dc:
bc:61:86:b0:96:1a:ed:4d:f6:29:9b:2c:35:d9:6b:2c:b6:f9:
f2:7d:1e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:20:19 2026 by rpki-client