Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3138352e3136322e3137362e302f32342d3234203d3e203537303433.roa
File: 3138352e3136322e3137362e302f32342d3234203d3e203537303433.roa (raw, json)
Hash identifier: SVrpMsQaq2+Of1pyWLABKDNguVH/um78jdJjsg2PZXk=
Subject key identifier: 10:87:EC:2D:4F:E4:17:69:D2:8E:55:AF:50:80:74:2B:22:20:0F:81
Certificate issuer: /CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Certificate serial: 12C6CE2BD382BD7102450B7BD108C827CB4425C7
Authority key identifier: E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3138352e3136322e3137362e302f32342d3234203d3e203537303433.roa
Signing time: Fri 15 Aug 2025 11:37:24 +0000
ROA not before: Fri 15 Aug 2025 11:32:24 +0000
ROA not after: Fri 14 Aug 2026 11:37:24 +0000
asID: 57043
IP address blocks: 185.162.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl
rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:c6:ce:2b:d3:82:bd:71:02:45:0b:7b:d1:08:c8:27:cb:44:25:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Validity
Not Before: Aug 15 11:32:24 2025 GMT
Not After : Aug 14 11:37:24 2026 GMT
Subject: CN=1087EC2D4FE41769D28E55AF5080742B22200F81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:11:1a:e9:12:b9:2f:9a:ff:fa:46:9f:62:b8:
55:fa:98:0d:de:30:f2:a9:98:61:81:3e:f4:a2:58:
6a:07:26:51:01:62:48:31:be:e7:39:ba:e6:4d:6c:
3a:8d:4d:75:f6:1b:19:e3:f7:a9:3a:68:41:4a:51:
5f:f6:eb:b0:94:48:78:9b:ac:e6:c2:46:ad:e6:3d:
ce:2b:fb:69:2c:06:de:25:3f:06:da:49:ef:3c:c4:
02:b5:a7:4c:17:1a:e3:e6:f3:be:08:0f:a4:2f:93:
2e:7b:5f:b2:63:ab:d0:68:c8:31:43:6b:39:86:e4:
e5:52:47:71:90:e0:08:ff:9b:6b:2a:df:b3:4e:f1:
ef:1d:ca:db:d1:9c:87:90:53:8d:90:e0:e1:c1:ad:
00:12:70:bb:28:64:e2:a5:fc:b1:34:55:64:f7:4c:
2a:2a:7a:63:fe:fc:32:96:a2:79:cb:71:47:8b:77:
e6:46:f9:84:46:ae:60:48:68:ee:a0:a3:95:89:fb:
01:73:35:4f:92:d1:70:ee:c4:b1:6c:94:a7:45:08:
0d:f2:28:38:cf:9a:fd:91:9d:2a:08:22:30:af:94:
58:b0:7b:30:da:e4:7e:39:cc:36:25:85:2a:f6:44:
e3:a9:74:88:04:f2:bd:a7:54:a3:b1:27:00:30:e4:
c0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:87:EC:2D:4F:E4:17:69:D2:8E:55:AF:50:80:74:2B:22:20:0F:81
X509v3 Authority Key Identifier:
keyid:E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3138352e3136322e3137362e302f32342d3234203d3e203537303433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.176.0/24
Signature Algorithm: sha256WithRSAEncryption
84:39:85:48:65:0f:86:d0:ad:09:21:04:71:9f:ff:a3:f1:48:
19:9c:7b:49:21:b3:38:97:99:54:8e:f1:b7:d8:77:7b:71:be:
30:dd:4f:fb:b0:38:14:50:03:6b:49:bb:6c:5a:9b:98:82:2c:
e8:52:84:3e:96:c6:b7:e3:65:29:ed:c6:09:3b:1c:84:aa:a7:
05:c3:dd:11:2d:4b:ce:ab:d7:84:ae:39:cd:e8:68:c2:61:06:
3e:0b:09:c2:32:4d:80:fe:4b:b3:1c:c9:e1:fe:e4:51:15:53:
c3:02:3c:9b:32:01:f8:93:ef:b1:cc:5d:4e:c0:43:77:bf:64:
9a:34:9d:79:07:b5:4e:95:b9:12:fc:bf:66:d1:e2:92:96:0e:
0d:e7:ca:26:37:a8:c7:1e:34:96:1b:e1:85:f5:e6:a4:44:b2:
09:6b:84:d7:db:4a:d0:3a:bb:3b:63:25:ef:53:41:5d:79:01:
8d:de:27:41:05:f1:a3:1a:f9:57:dd:90:3f:45:4c:8c:69:1b:
d6:94:51:f8:c1:f0:29:a7:31:e4:8a:94:35:2e:52:a7:47:ab:
f1:a3:44:89:dc:da:99:e9:1e:91:55:c3:7c:10:64:8a:d9:fc:
c2:e0:45:87:09:d0:04:3b:6e:cc:d5:83:ec:f9:83:e1:5f:7b:
f4:47:dd:3d
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUEsbOK9OCvXECRQt70QjIJ8tEJccwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZTFmMzUxMmY1MWRjNDJiYjllYjEyYWJjMGJiNTI5NjY4
YjJlZGVlNDAeFw0yNTA4MTUxMTMyMjRaFw0yNjA4MTQxMTM3MjRaMDMxMTAvBgNV
BAMTKDEwODdFQzJENEZFNDE3NjlEMjhFNTVBRjUwODA3NDJCMjIyMDBGODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlERrpErkvmv/6Rp9iuFX6mA3e
MPKpmGGBPvSiWGoHJlEBYkgxvuc5uuZNbDqNTXX2Gxnj96k6aEFKUV/267CUSHib
rObCRq3mPc4r+2ksBt4lPwbaSe88xAK1p0wXGuPm874ID6Qvky57X7Jjq9BoyDFD
azmG5OVSR3GQ4Aj/m2sq37NO8e8dytvRnIeQU42Q4OHBrQAScLsoZOKl/LE0VWT3
TCoqemP+/DKWonnLcUeLd+ZG+YRGrmBIaO6go5WJ+wFzNU+S0XDuxLFslKdFCA3y
KDjPmv2RnSoIIjCvlFiwezDa5H45zDYlhSr2ROOpdIgE8r2nVKOxJwAw5MAlAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUEIfsLU/kF2nSjlWvUIB0KyIgD4EwHwYDVR0j
BBgwFoAU4fNRL1HcQruesSq8C7UpZosu3uQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZTNjZGM2NDgtZDIwMy00NjJhLWJkMGYtZWMxYjYwZDg3
OWE3LzAvRTFGMzUxMkY1MURDNDJCQjlFQjEyQUJDMEJCNTI5NjY4QjJFREVFNC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRmTlJMMUhjUXJ1ZXNTcThDN1VwWm9z
dTN1US5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZTNjZGM2NDgt
ZDIwMy00NjJhLWJkMGYtZWMxYjYwZDg3OWE3LzAvMzEzODM1MmUzMTM2MzIyZTMx
MzczNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1MzczMDM0MzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAC5orAwDQYJKoZIhvcNAQELBQADggEBAIQ5hUhlD4bQrQkhBHGf/6PxSBmce0kh
sziXmVSO8bfYd3txvjDdT/uwOBRQA2tJu2xam5iCLOhShD6WxrfjZSntxgk7HISq
pwXD3REtS86r14SuOc3oaMJhBj4LCcIyTYD+S7McyeH+5FEVU8MCPJsyAfiT77HM
XU7AQ3e/ZJo0nXkHtU6VuRL8v2bR4pKWDg3nyiY3qMceNJYb4YX15qREsglrhNfb
StA6uztjJe9TQV15AY3eJ0EF8aMa+VfdkD9FTIxpG9aUUfjB8CmnMeSKlDUuUqdH
q/GjRInc2pnpHpFVw3wQZIrZ/MLgRYcJ0AQ7bszVg+z5g+Ffe/RH3T0=
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:53:41 2025 by rpki-client