Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3138352e3132332e3135372e302f32342d3234203d3e2030.roa
File: 3138352e3132332e3135372e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: o42YpQZUjoMNkotGQiZKBMYweuIaG2G8/ed/FG137WI=
Subject key identifier: 70:A4:12:4D:60:A2:B5:0A:A6:F4:66:78:C9:13:C7:31:79:F2:51:12
Certificate issuer: /CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Certificate serial: 30E3660BAD33651308D7A7E3224C3877D890D199
Authority key identifier: E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3138352e3132332e3135372e302f32342d3234203d3e2030.roa
Signing time: Wed 23 Sep 2026 12:22:54 +0000
ROA not before: Wed 23 Sep 2026 12:17:54 +0000
ROA not after: Wed 22 Sep 2027 12:22:54 +0000
asID: 0
IP address blocks: 185.123.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl
rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:e3:66:0b:ad:33:65:13:08:d7:a7:e3:22:4c:38:77:d8:90:d1:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Validity
Not Before: Sep 23 12:17:54 2026 GMT
Not After : Sep 22 12:22:54 2027 GMT
Subject: CN=70A4124D60A2B50AA6F46678C913C73179F25112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:84:4c:51:c9:5f:e7:38:79:a9:60:d6:06:ce:
59:5f:24:ff:bd:4c:aa:0d:06:e3:db:95:13:e0:86:
34:2c:40:b5:58:13:85:24:62:93:62:77:97:59:7a:
b7:aa:14:b7:cb:c8:0c:24:43:8d:b5:3d:77:78:cf:
84:66:31:72:2f:63:48:4f:ad:91:e5:55:2d:ae:fb:
a4:90:a5:b7:75:fe:68:83:ef:13:e6:ad:f8:3b:16:
cf:c5:56:49:1e:76:d8:1d:dc:f4:93:28:65:55:76:
16:ef:0e:f0:30:dd:0b:51:fd:66:01:ae:96:99:72:
29:cf:c6:ae:11:06:b3:4e:b3:09:a0:0d:92:db:d9:
d4:dc:d9:d0:43:bf:76:32:5b:38:26:44:0a:5a:a1:
ad:03:c2:9e:82:53:a7:62:6b:40:3b:4d:9a:5f:9c:
3a:2d:77:97:40:b4:7b:a7:79:cb:13:49:05:08:1c:
6b:78:35:06:6e:e7:be:bd:14:ab:a0:5b:af:60:bb:
8b:d2:44:9c:70:35:e2:d9:b5:f7:d4:19:2c:db:6b:
7f:26:04:a7:71:ef:3b:03:d9:88:b1:08:96:34:48:
5c:af:9d:42:35:73:29:f2:49:5e:a5:60:79:2f:4a:
df:d2:99:b1:c1:8c:aa:eb:38:0a:d0:9a:04:79:53:
b5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A4:12:4D:60:A2:B5:0A:A6:F4:66:78:C9:13:C7:31:79:F2:51:12
X509v3 Authority Key Identifier:
keyid:E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3138352e3132332e3135372e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.123.157.0/24
Signature Algorithm: sha256WithRSAEncryption
57:2b:87:89:f8:34:cf:41:d3:6e:67:c9:35:a6:e5:66:c6:25:
98:59:d9:3d:bf:1c:42:15:98:b7:eb:1f:cf:ae:36:23:33:df:
37:f0:6c:cc:96:fc:ab:e3:72:cd:a4:32:41:b6:54:8d:8c:45:
52:a8:6b:b6:8b:c4:12:5b:11:41:ce:00:0f:c0:f8:3f:38:da:
84:e3:11:db:40:81:bd:5b:cb:49:94:27:46:ae:74:54:11:f5:
9e:01:8c:26:b5:d6:9f:a7:46:1a:04:35:6d:5f:08:e9:27:00:
01:04:bc:93:70:0c:df:4b:98:ab:2a:3d:12:fb:2b:7f:81:11:
a3:da:ca:c3:ea:b9:57:d9:08:21:28:28:7f:20:ca:e5:e4:0a:
26:c6:1e:b3:4d:7c:90:73:cd:bd:90:24:39:d7:94:ef:20:21:
30:1d:14:d4:56:61:2c:31:75:45:54:c0:b7:a2:f1:eb:23:f5:
7e:78:85:75:02:1b:8a:c3:9c:99:99:62:f7:23:99:a9:2d:80:
16:61:5f:32:77:45:9b:4e:fc:78:b1:0e:55:85:df:0b:8a:56:
ad:75:f8:4d:4b:1a:df:a5:fd:19:c4:26:a2:ba:08:65:62:db:
db:99:90:f4:8e:c1:a6:c4:d5:54:5a:5d:2f:fa:9a:45:60:3d:
2f:76:53:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:31:13 2026 by rpki-client