Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3138352e31332e3232362e302f32342d3234203d3e20313532313739.roa
File: 3138352e31332e3232362e302f32342d3234203d3e20313532313739.roa (raw, json)
Hash identifier: bEgh3OCsVAt5ckK3e7+Q/GmLXkOh873pSPK9+D6Bg4g=
Subject key identifier: 39:F4:95:18:4C:4D:1E:05:7E:77:57:34:EF:29:6B:96:3A:47:6C:C2
Certificate issuer: /CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Certificate serial: 7665D8C1D32FCF3B6432016CF0EB305625B2C0B7
Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3138352e31332e3232362e302f32342d3234203d3e20313532313739.roa
Signing time: Fri 03 Jul 2026 10:48:54 +0000
ROA not before: Fri 03 Jul 2026 10:43:54 +0000
ROA not after: Fri 02 Jul 2027 10:48:54 +0000
asID: 152179
IP address blocks: 185.13.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl
rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft
rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:48:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:65:d8:c1:d3:2f:cf:3b:64:32:01:6c:f0:eb:30:56:25:b2:c0:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Validity
Not Before: Jul 3 10:43:54 2026 GMT
Not After : Jul 2 10:48:54 2027 GMT
Subject: CN=39F495184C4D1E057E775734EF296B963A476CC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f5:8c:3f:9e:c1:88:09:6a:3c:11:3b:1d:35:
d5:c6:38:ff:d1:d1:a8:b5:ed:18:df:df:cb:25:20:
7f:a3:0d:d9:4b:ec:89:1a:90:57:92:08:43:14:a8:
e8:d9:49:cb:ab:1b:ec:ce:ff:a4:1d:c6:e0:ae:e4:
e7:f6:d5:cd:50:f2:d8:7d:f7:a3:73:1c:fa:36:b1:
ed:6d:f3:1e:20:6b:5b:8f:90:fe:0f:61:4a:d7:0d:
ae:9d:9e:a6:2c:9a:01:af:75:63:0d:e2:2b:fd:67:
c5:1c:79:e6:1f:f2:c5:b3:2b:42:f2:5a:61:63:56:
b6:6c:2a:b8:86:8c:54:43:af:ec:8a:cf:ec:12:82:
59:cd:03:4c:b5:3d:56:98:12:80:d4:38:c6:22:f5:
d4:be:83:3f:59:cd:fa:65:93:c3:c0:11:c8:c2:c7:
3d:73:08:eb:74:4e:71:f2:27:be:df:1d:23:2e:e8:
59:2b:69:c4:18:b9:c2:bb:6a:c3:0a:9b:69:24:17:
1b:8c:83:cc:b0:e2:70:c2:db:1c:af:c4:5b:fa:4c:
5b:b9:66:f5:5b:bc:4d:94:6d:f3:39:6b:b4:de:78:
6c:ff:5f:64:b5:78:4b:f3:c4:58:07:1c:fb:50:90:
1c:ea:8b:57:79:20:64:35:b5:1f:07:78:6c:5f:f7:
e2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F4:95:18:4C:4D:1E:05:7E:77:57:34:EF:29:6B:96:3A:47:6C:C2
X509v3 Authority Key Identifier:
keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3138352e31332e3232362e302f32342d3234203d3e20313532313739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.13.226.0/24
Signature Algorithm: sha256WithRSAEncryption
59:6b:7c:12:f3:f0:f7:b4:ab:54:6f:d1:5a:2d:c3:ad:63:17:
17:12:1f:8c:e0:37:2c:27:ae:ac:7d:6f:ac:bd:91:30:dd:4c:
d3:d9:5b:b8:d1:2e:a7:65:8c:e7:db:f1:0f:00:0e:75:44:4d:
12:ef:a0:dc:32:c5:0f:44:22:63:0d:3a:d6:9a:c4:a8:4d:83:
74:37:d9:fb:f4:d7:63:e9:46:a5:6c:39:12:d1:cc:05:18:ae:
25:a1:22:0e:d0:b0:71:d8:2f:2c:dd:97:2c:59:3e:aa:a0:8c:
e6:39:5a:e1:66:10:c3:ca:7f:24:98:1f:1c:fe:1e:f9:e0:46:
91:55:ae:34:db:fc:68:8e:8e:ea:e6:11:56:d8:f1:11:ea:f8:
c8:99:c2:1f:7e:06:4e:b4:d5:84:6a:08:e2:b0:3e:45:db:de:
9a:0e:59:0e:72:86:b6:50:48:0b:df:db:ff:63:df:b8:06:60:
82:f5:28:85:c9:e7:23:84:38:7f:4a:0a:37:db:ef:78:05:0d:
4e:f4:8f:98:bc:10:73:e1:9c:26:ba:20:07:80:2c:18:fb:7c:
12:b6:10:b4:57:ce:28:3d:58:56:33:89:7e:c9:2e:96:78:d7:
03:43:08:f6:e3:a6:67:c0:02:00:55:72:46:ce:b4:44:28:91:
ce:76:e0:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:00:48 2026 by rpki-client