Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/3138352e3131362e39302e302f32342d3234203d3e20383334.roa
File: 3138352e3131362e39302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: i4J5fi4/ki9gpiPZ1WeNXoJ5Dkev+co9+mR0nmWAo0Q=
Subject key identifier: 25:A8:F5:18:1F:C8:91:16:F9:F6:CB:2D:B4:0C:F7:2A:3C:7B:7A:6E
Certificate issuer: /CN=d455dec4f1ebc2a64f5ccc2ee9292731eb82113d
Certificate serial: 6D7E906D670155B1D3F38E005F6DCB17B933D818
Authority key identifier: D4:55:DE:C4:F1:EB:C2:A6:4F:5C:CC:2E:E9:29:27:31:EB:82:11:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/3138352e3131362e39302e302f32342d3234203d3e20383334.roa
Signing time: Thu 16 Jul 2026 14:59:10 +0000
ROA not before: Thu 16 Jul 2026 14:54:10 +0000
ROA not after: Thu 15 Jul 2027 14:59:10 +0000
asID: 834
IP address blocks: 185.116.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft
rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 10:16:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:7e:90:6d:67:01:55:b1:d3:f3:8e:00:5f:6d:cb:17:b9:33:d8:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d455dec4f1ebc2a64f5ccc2ee9292731eb82113d
Validity
Not Before: Jul 16 14:54:10 2026 GMT
Not After : Jul 15 14:59:10 2027 GMT
Subject: CN=25A8F5181FC89116F9F6CB2DB40CF72A3C7B7A6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:94:2e:9d:91:8a:0f:04:4d:48:88:15:07:c7:
4c:e8:12:be:6f:e9:ff:c6:34:cf:8e:5f:35:9b:d5:
2c:ae:30:18:5b:4f:ae:90:7a:a4:f2:c4:d5:69:f1:
ba:4f:53:42:dd:c2:7e:6a:09:33:9e:6a:88:72:82:
34:3d:24:31:59:98:54:1f:ef:80:97:e2:b4:99:85:
45:00:d7:42:b0:2d:45:9b:3a:84:13:16:46:15:5c:
df:77:db:37:58:0a:01:d4:d3:70:5f:90:6d:a6:e6:
e1:db:e3:66:86:57:5c:5a:4b:fa:5d:d2:80:a0:a7:
f3:20:c7:a4:59:74:c9:4f:ef:02:3e:f5:f0:a6:df:
ba:e3:ae:85:a1:c0:2e:b8:82:a5:b5:6b:4c:23:c9:
ac:c9:33:5d:51:ef:cb:35:09:36:77:26:c1:a2:17:
d4:b0:a1:a9:58:9d:4d:e4:1e:a7:a0:fd:b7:f3:c3:
3d:3c:0d:8e:30:ef:c4:ae:50:ee:5c:26:c9:81:d5:
32:82:63:20:11:77:8d:79:d5:d9:6d:7f:90:4a:1a:
1a:18:37:99:9b:8b:7f:6c:18:96:b0:52:3e:94:43:
61:45:4f:57:12:3d:fb:ec:28:8c:f2:09:e7:ff:a8:
bc:53:34:2f:94:15:76:94:91:55:f6:bf:49:81:e6:
ad:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A8:F5:18:1F:C8:91:16:F9:F6:CB:2D:B4:0C:F7:2A:3C:7B:7A:6E
X509v3 Authority Key Identifier:
keyid:D4:55:DE:C4:F1:EB:C2:A6:4F:5C:CC:2E:E9:29:27:31:EB:82:11:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/3138352e3131362e39302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.116.90.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:bf:bf:f5:3f:47:fb:03:49:49:c7:43:a9:06:85:01:93:ef:
a2:06:24:92:3b:af:b1:d6:61:38:b2:91:84:bd:b3:98:20:02:
fc:59:49:ac:28:80:55:cd:74:66:b1:47:b8:06:74:af:a3:66:
f0:1a:b9:82:10:60:f4:45:18:0c:d9:27:50:75:14:25:45:55:
f1:0d:80:36:7c:a9:7f:d5:bf:5b:a9:55:6f:b9:27:45:b0:3c:
19:e2:d4:17:22:f5:23:6b:27:d4:e9:ce:f5:e6:aa:e5:3b:a3:
0e:c5:3b:bf:34:cb:58:ea:fa:26:37:95:99:f1:fa:c1:56:6e:
28:2c:1e:c8:7c:93:ad:cc:75:29:9f:f7:df:52:9b:58:9c:cf:
be:bc:10:fe:c6:08:75:44:d7:88:15:fc:8d:0e:fe:08:00:8a:
8f:3d:ac:82:94:4b:53:8e:93:08:c8:a3:52:0a:8e:19:26:28:
b5:b7:2b:1a:99:88:01:c2:64:36:f0:b7:77:06:88:5f:e1:94:
84:2f:2f:27:50:e8:52:9e:5c:96:d4:05:02:80:4c:8f:59:5d:
74:10:28:d1:98:0b:34:7f:e5:e9:52:09:79:c8:33:f5:5f:b4:
e2:bb:08:a4:60:3f:34:c4:bf:93:fc:5a:6e:2c:bc:d6:be:f3:
64:d0:5c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:02:26 2026 by rpki-client