Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/3138352e3131362e38382e302f32332d3234203d3e20323134343332.roa
File: 3138352e3131362e38382e302f32332d3234203d3e20323134343332.roa (raw, json)
Hash identifier: +DN809AlaoX5+Lv+NqMgfBEbnjnBdEJgPi7MDj2sR/8=
Subject key identifier: 4D:CC:50:F8:14:CF:18:78:8B:9B:B4:5D:00:D0:48:7A:5E:63:3E:75
Certificate issuer: /CN=d455dec4f1ebc2a64f5ccc2ee9292731eb82113d
Certificate serial: 78FC6146C3004E3774766CE13B923A8CA4672A02
Authority key identifier: D4:55:DE:C4:F1:EB:C2:A6:4F:5C:CC:2E:E9:29:27:31:EB:82:11:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/3138352e3131362e38382e302f32332d3234203d3e20323134343332.roa
Signing time: Sat 18 Jul 2026 06:49:20 +0000
ROA not before: Sat 18 Jul 2026 06:44:20 +0000
ROA not after: Sat 17 Jul 2027 06:49:20 +0000
asID: 214432
IP address blocks: 185.116.88.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft
rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:48:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:fc:61:46:c3:00:4e:37:74:76:6c:e1:3b:92:3a:8c:a4:67:2a:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d455dec4f1ebc2a64f5ccc2ee9292731eb82113d
Validity
Not Before: Jul 18 06:44:20 2026 GMT
Not After : Jul 17 06:49:20 2027 GMT
Subject: CN=4DCC50F814CF18788B9BB45D00D0487A5E633E75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:53:51:3f:69:9a:41:89:f2:c3:87:7e:d8:31:
fb:73:93:0e:b2:f2:bf:5b:e4:2d:f7:c8:9f:66:8a:
0c:ee:81:bc:f7:8d:b5:23:06:01:b6:a5:c4:95:7f:
99:fb:44:32:33:ce:58:65:e0:44:a1:91:bd:ee:d8:
0a:40:7f:29:23:e3:92:e6:4c:fa:00:c7:40:8e:50:
61:c4:df:46:98:83:57:51:05:88:97:9e:b1:47:9e:
81:2b:72:77:03:2c:f6:8d:84:d2:d7:b7:fc:43:5e:
10:32:e9:72:2a:86:4d:20:de:fb:ef:6a:a0:19:e8:
8d:40:87:74:98:fd:09:a5:e2:22:17:78:b4:b0:7d:
fe:65:6c:7a:b2:75:a5:91:bd:8c:52:9f:36:ad:4e:
ea:97:8d:d0:10:15:65:28:5c:87:b3:3c:5b:e9:14:
3e:cc:1d:bc:3a:0a:4c:bc:44:af:46:dd:57:80:56:
03:50:26:09:09:88:74:f5:91:a1:af:89:c3:cd:90:
dd:46:c8:84:21:14:6f:9a:cf:c5:0d:4d:f5:97:4f:
44:57:4d:53:53:77:0b:ff:1a:3c:aa:6d:0d:14:32:
f4:fd:59:a3:38:b4:83:05:a5:37:52:26:07:d0:5e:
15:7a:2d:47:05:a9:7d:2b:b9:cc:ba:95:b9:19:c5:
8a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:CC:50:F8:14:CF:18:78:8B:9B:B4:5D:00:D0:48:7A:5E:63:3E:75
X509v3 Authority Key Identifier:
keyid:D4:55:DE:C4:F1:EB:C2:A6:4F:5C:CC:2E:E9:29:27:31:EB:82:11:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/3138352e3131362e38382e302f32332d3234203d3e20323134343332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.116.88.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:db:db:65:c3:74:65:a4:c9:56:21:09:1b:b5:0d:d3:5a:82:
67:c7:4b:d4:ce:c2:c2:da:69:40:fe:b4:4b:e6:36:e4:e6:4b:
ae:d8:b0:80:5d:9f:39:82:de:e8:92:e2:96:d8:55:b1:2a:bb:
23:72:44:3f:bf:47:bf:dc:1a:30:a1:d6:9a:e5:bb:86:9b:0c:
2a:15:ee:e6:a2:23:49:ab:67:10:2a:73:8d:b5:f6:e6:4b:00:
77:49:14:ae:6b:ed:58:6b:b6:a5:85:ba:49:16:66:8f:c0:01:
80:a0:de:80:06:37:ae:c2:31:61:6b:07:7a:18:55:92:64:25:
86:63:98:03:98:63:45:25:8d:4e:30:aa:cf:f0:3c:74:58:e1:
56:8c:bb:f0:47:e6:83:4f:7a:c6:57:e5:9e:8a:f2:2b:54:ea:
e3:09:24:74:e9:86:02:dc:35:62:45:99:1b:67:aa:74:d2:db:
b0:38:58:1e:d7:a6:0f:18:c1:38:df:5b:0d:07:2a:41:5e:60:
04:27:19:aa:da:6b:62:9f:a9:12:8c:bd:a0:0b:d5:ea:62:1f:
96:6b:bb:ae:b7:cc:6f:a8:5a:d1:06:74:ad:bd:74:ec:3e:8b:
99:20:80:53:65:0a:b5:bd:7b:f1:09:7c:45:91:d7:e4:cc:63:
4f:02:85:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:59:53 2026 by rpki-client