Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/3138352e3131362e38382e302f32332d3233203d3e20313937353337.roa
File: 3138352e3131362e38382e302f32332d3233203d3e20313937353337.roa (raw, json)
Hash identifier: A9qWfeTwCBhogli0VdJKmwQZ/I0kaj1HbDe6pPugx+s=
Subject key identifier: F3:5A:69:B0:4A:A3:BE:C4:98:E4:42:D1:8C:1C:00:FA:FD:C8:62:A1
Certificate issuer: /CN=d455dec4f1ebc2a64f5ccc2ee9292731eb82113d
Certificate serial: 2ABA88025040E9D6E3BCAFEB731626B373154DA5
Authority key identifier: D4:55:DE:C4:F1:EB:C2:A6:4F:5C:CC:2E:E9:29:27:31:EB:82:11:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/3138352e3131362e38382e302f32332d3233203d3e20313937353337.roa
Signing time: Mon 21 Sep 2026 13:18:45 +0000
ROA not before: Mon 21 Sep 2026 13:13:45 +0000
ROA not after: Mon 20 Sep 2027 13:18:45 +0000
asID: 197537
IP address blocks: 185.116.88.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft
rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 04:09:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:ba:88:02:50:40:e9:d6:e3:bc:af:eb:73:16:26:b3:73:15:4d:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d455dec4f1ebc2a64f5ccc2ee9292731eb82113d
Validity
Not Before: Sep 21 13:13:45 2026 GMT
Not After : Sep 20 13:18:45 2027 GMT
Subject: CN=F35A69B04AA3BEC498E442D18C1C00FAFDC862A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d3:96:60:76:40:d3:a7:ad:c1:2f:1b:bf:43:
8a:41:2e:fa:ab:64:f6:15:51:db:a7:96:5a:a5:dc:
81:19:54:81:76:ab:fa:b5:2f:3b:8f:df:04:10:54:
26:77:84:82:e3:0d:86:31:94:4a:96:9c:2e:f0:57:
33:f8:d6:d9:e7:18:cb:ea:ad:0e:6d:f1:63:3f:91:
7c:05:f9:b0:21:25:b9:0c:bd:a0:45:28:67:6f:b0:
f9:ef:11:3a:d3:ac:41:b8:e3:33:52:70:55:06:9b:
24:73:5f:84:07:04:b5:e0:3f:96:41:35:85:17:cb:
a7:fb:6f:66:6b:57:a7:80:a4:8f:80:f6:37:3a:8b:
17:ea:f5:51:06:22:b3:36:45:68:72:49:56:04:32:
5f:70:ac:81:06:89:88:cc:0a:c4:0c:88:00:4e:fc:
d6:3d:4d:dc:d0:06:78:89:0e:77:ae:4a:dd:76:31:
a5:1b:04:72:0a:b7:60:f0:65:fc:5c:5e:e8:82:7f:
b6:99:fd:75:54:aa:d9:a0:0c:45:68:5d:3e:0b:1f:
9f:70:ad:84:4c:c0:49:9e:83:7e:e2:a8:3f:db:79:
20:8b:62:f3:3a:d8:3d:4e:95:cc:a8:00:45:86:e7:
51:6f:13:24:87:1b:df:a9:1a:b5:b3:e9:4e:c6:3b:
0f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:5A:69:B0:4A:A3:BE:C4:98:E4:42:D1:8C:1C:00:FA:FD:C8:62:A1
X509v3 Authority Key Identifier:
keyid:D4:55:DE:C4:F1:EB:C2:A6:4F:5C:CC:2E:E9:29:27:31:EB:82:11:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/3138352e3131362e38382e302f32332d3233203d3e20313937353337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.116.88.0/23
Signature Algorithm: sha256WithRSAEncryption
14:bd:10:40:89:88:af:64:1c:d4:1f:c8:c7:ca:74:dd:4c:15:
1a:a7:62:2c:3f:9a:54:6e:33:45:af:fd:6e:0f:a0:f9:cb:61:
ef:b0:94:fa:cb:d1:3d:7f:18:a7:5b:9a:93:b9:ab:ab:58:35:
05:27:11:31:97:9e:29:48:ed:0c:9f:b1:8a:34:8f:23:5d:cb:
60:55:c6:ce:63:1a:7a:e2:d8:e1:22:ee:82:b5:f8:2b:28:14:
e9:a3:18:b4:72:f9:7b:0b:1c:af:4b:9f:f9:1e:d6:8c:a1:6f:
31:58:00:24:6b:50:b8:c6:d8:3d:1e:e2:01:bb:f8:96:44:1a:
a5:c3:14:6c:23:f4:d9:6a:d5:9a:7d:37:d4:c3:ad:5c:29:78:
11:54:73:bc:89:b6:d4:fd:6b:bb:48:8a:02:c7:87:6c:d9:ee:
78:67:9c:f9:95:d4:4b:0a:59:47:6a:c0:81:e6:e2:26:8d:cc:
85:6f:84:cd:21:42:2b:b1:82:15:d6:a0:62:63:04:4f:16:e8:
3c:3b:58:f3:45:4e:e1:9d:35:bd:2f:e4:e8:8e:42:e3:26:97:
0f:9c:eb:ca:f6:9c:e6:37:a3:4d:b0:dd:d5:3d:84:8b:76:bc:
e7:1b:2e:2d:ce:11:47:73:1f:a6:67:cb:ec:6d:3f:fd:b2:67:
b6:8c:7f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:16:30 2026 by rpki-client