Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/3138352e3131362e39302e302f32342d3234203d3e20313432313436.roa
File: 3138352e3131362e39302e302f32342d3234203d3e20313432313436.roa (raw, json)
Hash identifier: ag5l3LX3LNGzjqWIKixe4SVzBhmH7Z4SjCfwtAnrwnQ=
Subject key identifier: FE:A9:0A:99:53:58:D2:0A:9D:9E:D3:F5:ED:1E:56:38:52:A6:2D:75
Certificate issuer: /CN=d455dec4f1ebc2a64f5ccc2ee9292731eb82113d
Certificate serial: 6C3F50A5CB76D677BCFCDEFB2614DB6C9D1FB32B
Authority key identifier: D4:55:DE:C4:F1:EB:C2:A6:4F:5C:CC:2E:E9:29:27:31:EB:82:11:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/3138352e3131362e39302e302f32342d3234203d3e20313432313436.roa
Signing time: Mon 26 Oct 2026 09:36:01 +0000
ROA not before: Mon 26 Oct 2026 09:31:01 +0000
ROA not after: Mon 25 Oct 2027 09:36:01 +0000
asID: 142146
IP address blocks: 185.116.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft
rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:3f:50:a5:cb:76:d6:77:bc:fc:de:fb:26:14:db:6c:9d:1f:b3:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d455dec4f1ebc2a64f5ccc2ee9292731eb82113d
Validity
Not Before: Oct 26 09:31:01 2026 GMT
Not After : Oct 25 09:36:01 2027 GMT
Subject: CN=FEA90A995358D20A9D9ED3F5ED1E563852A62D75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5e:74:26:d8:af:3d:c6:2d:8e:5f:cd:d1:e5:
83:34:25:cc:cd:85:de:3f:5b:14:32:4f:c2:1e:e7:
aa:06:05:25:ae:9c:4a:fa:88:7c:22:71:cc:c1:b8:
a2:95:69:30:c8:4b:6e:52:54:a5:47:1f:be:49:bc:
a4:88:8f:35:f5:c9:56:53:7e:8e:61:4c:91:77:bb:
e2:9d:ca:d3:4d:5c:c4:63:46:7a:7c:75:47:a8:3d:
22:98:87:e7:c0:c4:28:95:71:85:a8:9c:d1:8e:01:
6c:d7:3c:27:c6:7f:e9:0e:09:0d:59:61:98:be:07:
62:ad:aa:54:85:cb:6f:dc:fc:a4:24:01:ae:70:3c:
22:11:3d:a9:d3:2a:f4:47:ed:77:70:f7:e6:bb:fd:
ad:74:ab:62:56:ce:37:5b:63:75:63:d6:3a:7d:5b:
f0:18:8f:f2:f1:19:52:a8:e7:d0:08:ce:b4:82:3c:
ef:72:62:66:ef:16:4c:6d:a3:ac:25:0e:a3:48:65:
33:e3:6c:cb:d7:41:2f:41:d5:83:ea:15:32:86:d7:
df:0f:b8:3d:0f:bf:09:2f:e9:7e:24:f4:06:f6:ed:
da:9c:15:f9:db:94:f5:90:33:e3:f5:b0:f3:28:88:
83:b8:a2:e3:ee:c9:a4:7c:01:f1:52:8d:10:85:5d:
61:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A9:0A:99:53:58:D2:0A:9D:9E:D3:F5:ED:1E:56:38:52:A6:2D:75
X509v3 Authority Key Identifier:
keyid:D4:55:DE:C4:F1:EB:C2:A6:4F:5C:CC:2E:E9:29:27:31:EB:82:11:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/3138352e3131362e39302e302f32342d3234203d3e20313432313436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.116.90.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:10:be:dd:eb:65:1c:8a:93:f4:ff:8a:f6:69:62:57:ab:0f:
49:0c:9a:2a:8c:2f:ae:ee:8e:45:22:23:e9:3f:24:9b:b3:96:
40:00:32:5e:55:58:c6:b1:31:6a:1a:f0:a0:a0:69:f6:0e:73:
b1:87:39:44:5e:b0:14:c3:e5:03:e2:66:30:8e:88:22:a3:a1:
f2:c0:df:ee:9c:06:f0:6d:bb:76:db:63:b4:28:b6:99:b5:54:
af:df:d6:cb:91:a8:44:7e:dd:0e:8f:bd:eb:70:15:cc:55:02:
71:82:60:5a:46:32:00:fb:57:47:71:e9:4a:71:ff:6b:be:99:
0f:5d:b2:02:b7:29:b7:fb:c0:e2:af:ec:37:96:6c:10:16:e2:
88:16:fd:de:be:00:0d:78:9c:f6:76:68:28:ae:8b:c9:cd:c0:
9d:32:85:a0:cc:e8:9c:e2:b5:1f:c3:f2:00:cc:c7:ff:00:58:
69:34:da:ee:8b:92:74:f6:97:ba:03:2f:3a:1e:0d:16:99:68:
e7:42:42:87:54:39:e4:cb:8a:d3:eb:00:87:b3:06:09:fc:39:
73:1f:bb:1d:72:f8:7d:20:ad:68:2e:35:99:33:72:3e:96:8e:
d5:f1:3f:74:ad:ba:b2:ed:ee:31:3d:c9:6d:a3:ba:a9:29:38:
23:bf:50:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:15:26 2026 by rpki-client