Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3138382e39342e3139312e302f32342d3234203d3e203236333833.roa
File: 3138382e39342e3139312e302f32342d3234203d3e203236333833.roa (raw, json)
Hash identifier: /M+EHgtAJg40NHNQTHbudfsd5rXtJO1qGVlybBfNku0=
Subject key identifier: 6C:EB:E5:B4:50:C8:68:EE:C1:62:C1:2C:ED:F9:70:CF:82:9D:55:E8
Certificate issuer: /CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Certificate serial: 67C6C3CF34F1A50D8E2985B7F4EAD8D6076C2D89
Authority key identifier: E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3138382e39342e3139312e302f32342d3234203d3e203236333833.roa
Signing time: Tue 03 Nov 2026 17:49:39 +0000
ROA not before: Tue 03 Nov 2026 17:44:39 +0000
ROA not after: Tue 02 Nov 2027 17:49:39 +0000
asID: 26383
IP address blocks: 188.94.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl
rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 23:58:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:c6:c3:cf:34:f1:a5:0d:8e:29:85:b7:f4:ea:d8:d6:07:6c:2d:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Validity
Not Before: Nov 3 17:44:39 2026 GMT
Not After : Nov 2 17:49:39 2027 GMT
Subject: CN=6CEBE5B450C868EEC162C12CEDF970CF829D55E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e2:70:89:d8:95:91:d3:53:54:9c:e4:63:32:
0b:58:ff:92:94:30:a6:e6:03:17:6d:2d:a3:3d:f8:
76:86:f6:e6:f4:fb:83:98:21:01:1f:86:ee:ba:4e:
bf:5c:5c:5e:21:a2:2e:61:a8:08:17:36:16:d0:f1:
51:96:5e:d3:ee:72:ed:0a:fd:f4:30:4d:04:8f:0c:
21:a9:2c:69:21:76:b7:3d:a0:b6:f4:6f:71:e9:be:
21:d0:00:11:24:29:7e:f7:de:31:e7:d5:c2:a2:3b:
07:d2:82:f8:ce:cf:bc:ad:5a:4d:07:55:45:44:b1:
cd:74:1d:4b:f7:5a:ee:4e:70:c8:e6:8b:82:3d:aa:
52:16:8c:2e:b2:71:1e:05:e0:cb:99:84:4c:d0:71:
f0:7c:9a:0f:a5:8c:04:24:78:b5:69:ee:9f:1b:28:
35:f4:c1:49:56:58:8b:06:16:f1:d6:1e:11:1f:f2:
e8:4e:43:87:73:dc:f4:69:a9:bf:eb:09:9f:40:a3:
3d:a6:b7:a4:11:95:96:37:37:35:3e:80:8a:84:3d:
13:51:5c:9c:fe:47:c5:6c:56:ea:b7:72:42:d2:b5:
5c:d5:57:16:53:c6:9a:4c:28:1e:b2:c2:d8:eb:e6:
d5:07:8d:4f:e5:e2:c8:d8:5e:20:da:a3:a2:7e:cc:
1e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:EB:E5:B4:50:C8:68:EE:C1:62:C1:2C:ED:F9:70:CF:82:9D:55:E8
X509v3 Authority Key Identifier:
keyid:E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3138382e39342e3139312e302f32342d3234203d3e203236333833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.94.191.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:70:c3:92:d6:10:37:8f:d0:3d:ad:38:f7:65:85:05:ef:b9:
d9:dc:f2:7c:95:b5:7f:75:01:3c:9c:77:4d:53:14:f6:90:d2:
5e:e9:71:94:92:b0:f6:39:27:7f:62:92:6c:ef:57:83:29:78:
e3:d5:5f:cc:6a:10:7c:8f:44:f6:cf:3f:1f:ad:86:d6:0d:91:
d5:a5:b7:bb:bb:26:19:b4:47:0a:5f:0d:94:80:dd:01:ac:5d:
c2:14:e1:03:4a:1a:76:a7:29:6d:9a:7d:07:61:48:8e:f0:38:
d0:74:19:9a:11:54:2b:19:51:a2:ba:fa:28:4a:64:e5:7c:07:
34:c2:ed:48:8c:97:9c:8c:65:39:63:70:23:04:c6:44:c2:03:
53:31:7a:1b:74:38:42:04:cc:6f:e2:75:7e:1c:be:7c:23:6f:
d8:70:10:93:5a:89:35:df:30:e5:30:a3:76:d1:79:ac:61:06:
16:a9:62:1e:58:75:a1:86:0a:3b:05:3c:d1:89:9f:7d:7e:6c:
a3:6a:1e:8d:ce:58:f1:2e:ef:f7:44:15:e8:fc:b4:60:62:12:
5e:e5:8f:75:ee:20:e1:c0:67:e2:81:ec:44:94:ba:ad:63:c3:
26:c5:73:9e:eb:5f:9f:fb:e2:ec:31:20:af:8f:73:4e:07:de:
67:b4:81:cc
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUZ8bDzzTxpQ2OKYW39OrY1gdsLYkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZTFmMzUxMmY1MWRjNDJiYjllYjEyYWJjMGJiNTI5NjY4
YjJlZGVlNDAeFw0yNjExMDMxNzQ0MzlaFw0yNzExMDIxNzQ5MzlaMDMxMTAvBgNV
BAMTKDZDRUJFNUI0NTBDODY4RUVDMTYyQzEyQ0VERjk3MENGODI5RDU1RTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK4nCJ2JWR01NUnORjMgtY/5KU
MKbmAxdtLaM9+HaG9ub0+4OYIQEfhu66Tr9cXF4hoi5hqAgXNhbQ8VGWXtPucu0K
/fQwTQSPDCGpLGkhdrc9oLb0b3HpviHQABEkKX733jHn1cKiOwfSgvjOz7ytWk0H
VUVEsc10HUv3Wu5OcMjmi4I9qlIWjC6ycR4F4MuZhEzQcfB8mg+ljAQkeLVp7p8b
KDX0wUlWWIsGFvHWHhEf8uhOQ4dz3PRpqb/rCZ9Aoz2mt6QRlZY3NzU+gIqEPRNR
XJz+R8VsVuq3ckLStVzVVxZTxppMKB6ywtjr5tUHjU/l4sjYXiDao6J+zB5NAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUbOvltFDIaO7BYsEs7flwz4KdVegwHwYDVR0j
BBgwFoAU4fNRL1HcQruesSq8C7UpZosu3uQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZTNjZGM2NDgtZDIwMy00NjJhLWJkMGYtZWMxYjYwZDg3
OWE3LzAvRTFGMzUxMkY1MURDNDJCQjlFQjEyQUJDMEJCNTI5NjY4QjJFREVFNC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRmTlJMMUhjUXJ1ZXNTcThDN1VwWm9z
dTN1US5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZTNjZGM2NDgt
ZDIwMy00NjJhLWJkMGYtZWMxYjYwZDg3OWE3LzAvMzEzODM4MmUzOTM0MmUzMTM5
MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzMzODMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
vF6/MA0GCSqGSIb3DQEBCwUAA4IBAQBLcMOS1hA3j9A9rTj3ZYUF77nZ3PJ8lbV/
dQE8nHdNUxT2kNJe6XGUkrD2OSd/YpJs71eDKXjj1V/MahB8j0T2zz8frYbWDZHV
pbe7uyYZtEcKXw2UgN0BrF3CFOEDShp2pyltmn0HYUiO8DjQdBmaEVQrGVGiuvoo
SmTlfAc0wu1IjJecjGU5Y3AjBMZEwgNTMXobdDhCBMxv4nV+HL58I2/YcBCTWok1
3zDlMKN20XmsYQYWqWIeWHWhhgo7BTzRiZ99fmyjah6NzljxLu/3RBXo/LRgYhJe
5Y917iDhwGfigexElLqtY8MmxXOe61+f++LsMSCvj3NOB95ntIHM
-----END CERTIFICATE-----
Generated at Sun Nov 15 10:08:07 2026 by rpki-client