Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3138352e3136322e3137362e302f32342d3234203d3e2030.roa
File: 3138352e3136322e3137362e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: 1xpHVE+hvybDZ1Qd86cVFMv8ZQw1DXK+2NZjCVwq/Pk=
Subject key identifier: A0:18:AE:49:EF:B3:D7:56:59:5E:EE:BF:BE:0E:8B:12:B1:DC:59:21
Certificate issuer: /CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Certificate serial: 17D8BF89844EA1EC677174E2F5FC0136797DD712
Authority key identifier: E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3138352e3136322e3137362e302f32342d3234203d3e2030.roa
Signing time: Fri 25 Sep 2026 08:45:34 +0000
ROA not before: Fri 25 Sep 2026 08:40:34 +0000
ROA not after: Fri 24 Sep 2027 08:45:34 +0000
asID: 0
IP address blocks: 185.162.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl
rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:d8:bf:89:84:4e:a1:ec:67:71:74:e2:f5:fc:01:36:79:7d:d7:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Validity
Not Before: Sep 25 08:40:34 2026 GMT
Not After : Sep 24 08:45:34 2027 GMT
Subject: CN=A018AE49EFB3D756595EEEBFBE0E8B12B1DC5921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:04:f3:bb:09:3a:85:5d:72:c3:21:1f:fc:62:
5e:c7:84:d4:16:8a:5d:a7:5d:f5:53:1b:f0:d5:2c:
b3:f9:bf:0d:d5:df:65:fa:29:06:59:c2:3a:09:81:
5b:59:57:f1:1c:86:33:0d:e2:a1:be:79:de:d0:e2:
e4:84:66:e9:58:ef:25:47:d0:dc:e0:41:1e:5d:97:
ab:b9:e6:91:6a:27:09:e2:15:1a:6f:2f:1c:01:e8:
0b:1f:d5:93:10:2b:b9:b4:b9:cd:8b:f9:85:b6:db:
50:52:a4:ce:f3:70:81:42:c6:cd:6f:1a:62:2d:5a:
7d:58:4d:4e:8b:43:34:c0:cb:d3:9a:2c:2e:22:6e:
02:3d:02:79:8c:39:a4:b1:31:0d:39:6a:df:a2:68:
28:53:5b:6a:e8:79:8a:e5:0b:60:b0:a1:3d:94:e0:
23:b9:0f:ed:53:f1:20:4f:57:3a:2a:95:f7:96:59:
ce:0c:00:1f:14:25:39:11:1b:15:d6:a4:7b:fd:42:
0b:ea:de:28:76:c9:db:a8:d6:69:e0:85:23:2d:5e:
80:39:63:79:17:67:ee:17:f5:8e:d9:bd:8f:1e:20:
71:bf:28:c5:1d:d0:50:4e:af:54:32:27:a1:3d:e0:
98:a5:5c:3f:48:9a:56:59:05:95:ce:f4:9d:29:b8:
d1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:18:AE:49:EF:B3:D7:56:59:5E:EE:BF:BE:0E:8B:12:B1:DC:59:21
X509v3 Authority Key Identifier:
keyid:E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3138352e3136322e3137362e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.176.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:ab:0e:9d:c7:a4:c7:9e:56:f4:23:44:7e:73:cd:b4:e5:59:
69:c4:c2:29:40:c3:71:46:be:5d:b7:ca:e9:eb:2b:5d:40:3d:
55:e6:de:0b:28:63:4b:99:85:d7:93:4a:b9:28:1a:4d:32:fd:
bd:70:da:f7:fd:0d:ee:1c:4f:30:cd:dd:42:00:b2:39:d2:fe:
88:ba:86:f0:90:bb:18:af:ff:58:c9:c5:ac:7d:42:f3:36:3a:
4d:7e:02:c1:3f:69:22:63:77:27:dd:77:c1:ba:52:94:2a:b0:
46:a0:74:7d:52:b2:b0:7d:4f:bd:b8:d5:31:b8:3c:3c:e7:d5:
5f:b8:81:23:cc:1f:2f:24:ad:25:fd:8f:24:a5:4c:67:ac:f5:
3b:29:67:f0:5c:bf:9b:0c:5a:de:0d:77:3a:20:1a:63:8e:3d:
7f:3f:b1:ba:46:ea:2c:1a:44:8f:d4:02:39:2c:bb:d1:d0:3b:
03:8a:16:c1:96:27:80:9f:af:9e:15:4d:2c:3d:ef:6b:b5:bd:
2a:9d:99:41:5e:cc:73:b1:70:e3:09:a1:db:90:1d:00:c9:73:
b8:44:64:9d:9b:9b:bd:e9:eb:78:ba:3c:e6:a6:8a:64:15:ec:
8a:b1:cc:b9:0f:89:a6:3b:8a:93:89:52:17:84:3d:21:bd:65:
a7:5f:e0:66
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUF9i/iYROoexncXTi9fwBNnl91xIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZTFmMzUxMmY1MWRjNDJiYjllYjEyYWJjMGJiNTI5NjY4
YjJlZGVlNDAeFw0yNjA5MjUwODQwMzRaFw0yNzA5MjQwODQ1MzRaMDMxMTAvBgNV
BAMTKEEwMThBRTQ5RUZCM0Q3NTY1OTVFRUVCRkJFMEU4QjEyQjFEQzU5MjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVBPO7CTqFXXLDIR/8Yl7HhNQW
il2nXfVTG/DVLLP5vw3V32X6KQZZwjoJgVtZV/EchjMN4qG+ed7Q4uSEZulY7yVH
0NzgQR5dl6u55pFqJwniFRpvLxwB6Asf1ZMQK7m0uc2L+YW221BSpM7zcIFCxs1v
GmItWn1YTU6LQzTAy9OaLC4ibgI9AnmMOaSxMQ05at+iaChTW2roeYrlC2CwoT2U
4CO5D+1T8SBPVzoqlfeWWc4MAB8UJTkRGxXWpHv9Qgvq3ih2yduo1mnghSMtXoA5
Y3kXZ+4X9Y7ZvY8eIHG/KMUd0FBOr1QyJ6E94JilXD9ImlZZBZXO9J0puNHXAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUoBiuSe+z11ZZXu6/vg6LErHcWSEwHwYDVR0j
BBgwFoAU4fNRL1HcQruesSq8C7UpZosu3uQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZTNjZGM2NDgtZDIwMy00NjJhLWJkMGYtZWMxYjYwZDg3
OWE3LzAvRTFGMzUxMkY1MURDNDJCQjlFQjEyQUJDMEJCNTI5NjY4QjJFREVFNC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRmTlJMMUhjUXJ1ZXNTcThDN1VwWm9z
dTN1US5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZTNjZGM2NDgt
ZDIwMy00NjJhLWJkMGYtZWMxYjYwZDg3OWE3LzAvMzEzODM1MmUzMTM2MzIyZTMx
MzczNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMwLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuaKwMA0G
CSqGSIb3DQEBCwUAA4IBAQALqw6dx6THnlb0I0R+c8205VlpxMIpQMNxRr5dt8rp
6ytdQD1V5t4LKGNLmYXXk0q5KBpNMv29cNr3/Q3uHE8wzd1CALI50v6IuobwkLsY
r/9YycWsfULzNjpNfgLBP2kiY3cn3XfBulKUKrBGoHR9UrKwfU+9uNUxuDw859Vf
uIEjzB8vJK0l/Y8kpUxnrPU7KWfwXL+bDFreDXc6IBpjjj1/P7G6RuosGkSP1AI5
LLvR0DsDihbBlieAn6+eFU0sPe9rtb0qnZlBXsxzsXDjCaHbkB0AyXO4RGSdm5u9
6et4ujzmpopkFeyKscy5D4mmO4qTiVIXhD0hvWWnX+Bm
-----END CERTIFICATE-----
Generated at Fri Sep 25 18:12:43 2026 by rpki-client