Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/3138352e3234322e3138312e302f32342d3234203d3e203431373230.roa
File: 3138352e3234322e3138312e302f32342d3234203d3e203431373230.roa (raw, json)
Hash identifier: ivRYcKVBavH9t8GiJ9N3cjwe45NnnX0wNJoN9vaUIQU=
Subject key identifier: 70:0F:31:B3:AA:00:5C:C0:AF:6A:C4:E5:D2:BB:16:2B:79:14:A0:42
Certificate issuer: /CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
Certificate serial: 58438E78B1D7BFCA717656E1F15DA693A540D7F7
Authority key identifier: 88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/3138352e3234322e3138312e302f32342d3234203d3e203431373230.roa
Signing time: Thu 25 Jun 2026 16:42:20 +0000
ROA not before: Thu 25 Jun 2026 16:37:20 +0000
ROA not after: Thu 24 Jun 2027 16:42:20 +0000
asID: 41720
IP address blocks: 185.242.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl
rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 02:54:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:43:8e:78:b1:d7:bf:ca:71:76:56:e1:f1:5d:a6:93:a5:40:d7:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
Validity
Not Before: Jun 25 16:37:20 2026 GMT
Not After : Jun 24 16:42:20 2027 GMT
Subject: CN=700F31B3AA005CC0AF6AC4E5D2BB162B7914A042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:83:e7:c9:68:21:4f:99:51:4c:32:60:51:a7:
61:0d:54:ac:03:2e:f6:d1:1d:ed:33:4d:47:ea:f6:
35:d8:4d:bc:fc:00:2e:16:28:1d:ef:0d:a6:fc:16:
00:80:65:6e:d1:b4:d0:a2:36:70:e6:82:d6:bb:97:
34:e2:db:ce:e5:fc:96:d7:5b:a3:8c:56:85:c3:98:
14:e4:4c:5b:08:f5:25:69:9c:df:6a:89:54:75:02:
f4:37:e9:8d:df:a2:dd:33:17:bf:e5:2a:f6:2c:c7:
f0:dd:24:71:b5:98:b8:31:28:c1:32:8f:1a:be:6d:
2c:ee:ee:84:85:15:3e:ab:bb:35:84:cf:e9:af:fa:
4d:18:fe:0a:87:e0:ac:99:65:8d:31:3e:79:88:76:
93:c0:33:98:b0:a5:25:72:78:87:03:49:bd:e4:00:
23:cb:07:a8:aa:84:f4:2c:16:32:81:e5:42:0a:85:
9b:dd:c8:d6:3a:61:1d:ed:cf:da:12:f0:a4:23:34:
01:2d:73:94:7b:3e:a5:32:19:de:b3:ba:b1:c7:2a:
b9:f9:56:25:9b:91:97:03:af:61:cc:ed:65:81:e0:
20:14:ab:88:33:23:a7:76:9b:13:fe:68:0d:ed:06:
22:3b:40:b8:e0:4a:d8:e3:c5:8b:aa:62:68:91:4d:
d7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:0F:31:B3:AA:00:5C:C0:AF:6A:C4:E5:D2:BB:16:2B:79:14:A0:42
X509v3 Authority Key Identifier:
keyid:88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/3138352e3234322e3138312e302f32342d3234203d3e203431373230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.181.0/24
Signature Algorithm: sha256WithRSAEncryption
34:8b:0a:29:93:62:0d:48:2d:c1:ba:01:5b:5e:a5:66:9c:7b:
02:54:92:25:43:8a:63:3a:47:c4:f6:25:73:7b:a1:1d:a4:4a:
c4:ef:3e:f6:b0:52:e0:70:54:09:33:06:26:20:6a:79:eb:eb:
da:1e:1b:8e:a5:90:ba:67:47:cb:c3:ee:f7:98:d9:18:ee:63:
06:25:4d:1c:08:4a:21:1c:0a:84:fe:3c:92:a8:49:00:24:b3:
fa:c4:73:03:ac:59:ae:bb:bc:36:9d:84:56:d8:30:78:88:1b:
0a:d2:f4:a1:fd:a6:e7:77:d6:7e:71:9b:e8:e2:c6:f2:59:ac:
a7:38:4b:84:fe:5f:59:aa:9e:dd:6b:03:af:7c:e4:0a:96:dd:
b4:0e:89:68:e7:23:c7:f1:cf:69:4d:34:5d:80:56:56:a1:8f:
4e:36:ab:e7:ad:48:a2:4e:2a:e8:52:17:30:9b:f5:7b:74:a9:
85:3b:43:e1:fe:40:51:2a:ad:29:87:23:4e:b5:f3:22:f0:6b:
95:45:9f:e2:5e:ed:28:0a:29:22:6c:ae:80:8a:0f:a7:94:8c:
4c:16:7e:2c:85:1e:e2:4b:e6:d0:89:75:92:1e:bd:ff:74:d3:
76:ec:d4:88:6c:1b:b7:26:dd:24:d5:53:0b:67:a3:1e:c4:56:
66:60:2d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:22:45 2026 by rpki-client