Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/3138352e3234322e3138332e302f32342d3234203d3e203431373230.roa
File: 3138352e3234322e3138332e302f32342d3234203d3e203431373230.roa (raw, json)
Hash identifier: I/iO3YAfj293FmGBTRLAPscviIPgQbl+nLgu16ZbM5M=
Subject key identifier: 91:02:B0:4E:08:A9:51:BB:64:D4:77:E2:CB:EA:66:91:EA:4A:28:D3
Certificate issuer: /CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
Certificate serial: 14315E06DA74DED0DCAD02CBFF6D297CFE57CFB6
Authority key identifier: 88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/3138352e3234322e3138332e302f32342d3234203d3e203431373230.roa
Signing time: Thu 25 Jun 2026 16:42:20 +0000
ROA not before: Thu 25 Jun 2026 16:37:20 +0000
ROA not after: Thu 24 Jun 2027 16:42:20 +0000
asID: 41720
IP address blocks: 185.242.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl
rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 02:54:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:31:5e:06:da:74:de:d0:dc:ad:02:cb:ff:6d:29:7c:fe:57:cf:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
Validity
Not Before: Jun 25 16:37:20 2026 GMT
Not After : Jun 24 16:42:20 2027 GMT
Subject: CN=9102B04E08A951BB64D477E2CBEA6691EA4A28D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:92:19:a3:52:2f:54:66:ac:80:0d:a7:14:91:
d8:76:84:7c:ef:d9:ec:d3:be:ef:4f:94:28:be:88:
f1:9a:8e:45:e0:31:92:11:21:55:b0:5c:10:63:4d:
55:33:cb:b2:f3:5b:f0:a3:0f:62:c0:dc:39:b3:25:
23:e1:4d:10:bd:9e:6c:11:d4:17:69:93:29:56:14:
30:9d:1f:91:19:8e:c6:17:96:4e:07:b3:7a:a1:f7:
df:12:4b:a8:85:40:8e:f9:29:e3:96:8a:2b:3c:44:
19:2c:d8:0a:7b:11:0f:e5:3e:fb:dd:cf:b6:1e:32:
b6:8b:b6:7b:c9:76:17:4a:aa:71:0b:b7:2b:9a:f4:
db:68:56:e6:92:ff:bf:0a:2b:d4:a3:9d:56:b5:22:
75:d8:81:07:6f:54:0a:93:f3:31:2c:6f:1e:a7:42:
4c:6f:3e:b9:04:26:fc:17:bb:dd:b2:e5:fd:73:ec:
82:e6:74:9d:1e:0c:8b:3d:73:df:33:59:34:31:6b:
e3:7e:05:2d:82:c7:2f:5d:9a:65:72:1c:cd:21:ea:
45:db:2a:cc:ed:4b:43:d9:3e:e4:70:26:66:1f:5d:
c1:ab:8b:33:e7:4a:ab:98:39:31:10:2d:ea:5a:cd:
3b:09:44:55:da:94:71:00:47:3c:2a:f8:a5:d3:1f:
48:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:02:B0:4E:08:A9:51:BB:64:D4:77:E2:CB:EA:66:91:EA:4A:28:D3
X509v3 Authority Key Identifier:
keyid:88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/3138352e3234322e3138332e302f32342d3234203d3e203431373230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.183.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:ee:30:74:1e:25:cf:1d:e9:18:63:1b:d9:63:f3:9c:fe:40:
90:8b:4e:08:93:76:1b:db:78:f7:8f:7e:3c:16:33:9e:f4:49:
87:34:34:59:8b:32:08:24:3a:76:34:b4:24:10:67:4d:df:9d:
4e:b2:49:10:78:e6:a7:59:63:34:b4:0e:66:a9:f0:4e:66:ee:
3a:38:4d:e1:84:2f:47:15:96:fd:17:e0:27:f8:60:54:37:f4:
05:5b:b0:76:da:58:e3:97:98:4b:ea:3a:97:b1:ae:1b:cb:28:
10:e4:d6:33:58:2f:52:9c:36:49:af:b1:5b:dc:36:42:85:3f:
94:32:0d:04:34:91:d2:4c:50:9d:16:97:65:ce:b5:97:9c:89:
31:77:46:ef:68:37:fb:6f:ba:57:9b:e0:7b:f1:44:f2:27:5c:
e5:0c:93:08:c7:50:23:e9:a2:bc:db:31:8b:69:14:b2:eb:95:
0d:01:c6:0f:39:b0:97:3f:1c:5c:17:4e:34:e8:2f:2f:87:41:
ab:4d:3b:fa:f3:76:f2:4e:08:ba:97:8e:8f:21:f3:0d:18:b4:
7e:5d:06:09:97:9a:1f:c9:02:a3:3f:29:fc:9a:9f:40:0a:6d:
67:f1:fe:6b:c9:9d:7f:68:b3:68:10:4d:a4:f7:f4:8b:25:b5:
cc:1d:9d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:23:00 2026 by rpki-client