Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3138352e3136322e3137362e302f32342d3234203d3e203230343733.roa
File: 3138352e3136322e3137362e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier: BMOkPoNWcAYzpN5k3PIQljFD4Ir4NkOTI8n1XNh1RY8=
Subject key identifier: 65:CE:BB:15:0B:A0:E2:D7:70:57:FC:19:64:B8:0E:12:70:24:74:C7
Certificate issuer: /CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Certificate serial: 3665E9B2AEBFB77D22316177C539688ADEF287F8
Authority key identifier: E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3138352e3136322e3137362e302f32342d3234203d3e203230343733.roa
Signing time: Wed 24 Jun 2026 19:54:20 +0000
ROA not before: Wed 24 Jun 2026 19:49:20 +0000
ROA not after: Wed 23 Jun 2027 19:54:20 +0000
asID: 20473
IP address blocks: 185.162.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl
rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:65:e9:b2:ae:bf:b7:7d:22:31:61:77:c5:39:68:8a:de:f2:87:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Validity
Not Before: Jun 24 19:49:20 2026 GMT
Not After : Jun 23 19:54:20 2027 GMT
Subject: CN=65CEBB150BA0E2D77057FC1964B80E12702474C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f5:53:c9:14:fe:4d:0f:04:a3:67:5d:51:69:
ef:f9:9c:c1:20:43:bb:7f:d4:6f:2f:1a:71:56:6a:
e0:9a:0d:38:91:b6:c2:69:3a:91:d5:c5:03:df:65:
99:f5:e7:bc:f0:08:c7:92:24:89:a5:4b:1e:c4:48:
3e:b4:29:d7:a0:6e:d8:51:6b:3a:92:56:af:9b:73:
0b:9a:e2:7f:0b:02:f7:ee:64:c2:e9:37:ee:29:d2:
97:be:68:7e:c2:28:ce:f7:ac:3d:85:9f:65:3f:35:
ed:20:99:89:53:40:35:4d:b5:85:17:3a:89:00:16:
c6:2a:2e:15:35:0a:e6:cc:44:8c:83:f6:c0:a6:e7:
ae:a5:2a:1a:06:f3:fe:c8:1c:23:7f:e3:ca:69:cc:
23:fa:07:b7:0a:6f:9b:96:7a:0b:24:74:b2:42:cf:
87:78:25:c9:fd:3c:ad:9b:7c:a8:c3:0d:e1:f1:7e:
37:32:de:ea:45:d9:b9:ef:8f:bf:8c:17:85:98:bb:
61:29:e0:49:7d:e5:09:ac:73:e6:71:19:28:e1:77:
19:35:3d:c7:dd:b2:85:f6:d9:e7:e4:b7:2c:95:78:
2a:f8:b2:ef:c9:b3:e4:df:eb:2c:1c:97:c9:0b:49:
8b:1c:ec:c0:e0:6e:6b:71:8f:aa:53:13:4e:8c:47:
dd:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:CE:BB:15:0B:A0:E2:D7:70:57:FC:19:64:B8:0E:12:70:24:74:C7
X509v3 Authority Key Identifier:
keyid:E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3138352e3136322e3137362e302f32342d3234203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.176.0/24
Signature Algorithm: sha256WithRSAEncryption
54:87:6b:80:fb:9a:18:d3:a5:bd:ec:9a:ba:6a:ed:34:73:76:
27:ed:44:f0:35:27:5e:4b:3d:d8:c5:d3:b7:36:d9:6c:c6:27:
8e:d4:96:95:d3:54:4f:a7:03:6a:67:b2:f8:4f:a2:4b:99:dc:
df:bb:07:3b:9e:72:7c:37:f6:68:1c:38:2d:7a:e5:5a:98:6f:
90:a7:ac:63:a7:61:d5:a6:d8:2a:48:55:21:9f:f0:b2:04:f0:
51:41:31:e4:fe:fd:bf:27:50:fd:50:b0:ed:6a:3d:bb:bf:7b:
d1:16:ca:7d:40:5e:fb:f8:e5:12:31:d9:67:af:0b:40:af:8c:
2a:1e:df:b2:67:a9:a9:01:ce:10:73:12:13:3b:a2:ff:f9:66:
38:2d:68:6c:05:cb:b8:23:36:4f:26:13:5c:e1:d9:e2:f8:c5:
30:e8:45:5f:69:38:b6:f5:ff:6d:11:b3:e9:0f:81:c8:f8:d0:
89:dc:8e:9f:8d:a1:27:39:65:0d:97:2f:a3:53:0f:a8:cd:5d:
32:15:8e:04:3c:c1:72:47:b9:3d:c6:eb:17:d2:99:eb:b7:1d:
3d:01:c5:3d:f9:6f:07:74:2c:a4:74:45:81:cb:c0:2e:9c:df:
bb:9f:ec:f7:cb:b2:c2:8a:3b:4e:37:6f:dc:e0:e0:cc:38:48:
80:1e:1b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:31:10 2026 by rpki-client