Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3137352e35362e302f32342d3234203d3e203633343733.roa
File: 3138352e3137352e35362e302f32342d3234203d3e203633343733.roa (raw, json)
Hash identifier: IjQ9/n2i+UHVzkd1Nn3ofqMe1ojTWI0jaarQW/5ALtA=
Subject key identifier: 0E:C3:5B:8C:BB:A2:CA:34:87:B5:F4:7C:CE:C9:7E:24:33:0F:27:E8
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 5BBB936766DB1005BA13148225149D38A0F4E834
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3137352e35362e302f32342d3234203d3e203633343733.roa
Signing time: Mon 02 Nov 2026 16:32:46 +0000
ROA not before: Mon 02 Nov 2026 16:27:46 +0000
ROA not after: Mon 01 Nov 2027 16:32:46 +0000
asID: 63473
IP address blocks: 185.175.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:bb:93:67:66:db:10:05:ba:13:14:82:25:14:9d:38:a0:f4:e8:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Nov 2 16:27:46 2026 GMT
Not After : Nov 1 16:32:46 2027 GMT
Subject: CN=0EC35B8CBBA2CA3487B5F47CCEC97E24330F27E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7e:ee:b7:cc:e4:df:67:59:38:ae:f1:13:ce:
4e:0f:0e:83:07:32:f8:1b:4d:48:6a:27:d9:0e:4f:
66:64:2e:52:18:0b:c3:48:68:c4:70:e8:7e:74:8c:
77:75:f5:03:cb:f0:55:69:c8:e1:27:da:64:07:37:
8b:b2:5d:ac:fc:10:12:d0:12:6f:2c:a3:30:f9:b5:
84:55:4b:94:ed:4e:45:37:65:59:83:fa:b0:8a:da:
9f:e6:82:43:6c:a4:fa:5c:78:f6:53:1a:03:0a:fc:
41:bb:f5:a9:5f:24:3c:c6:12:e4:91:9e:7f:c1:62:
b7:7f:12:37:58:c5:0b:d2:20:e1:b7:ad:ed:a2:14:
d6:6b:6b:9d:d9:96:f0:42:a6:e2:17:e8:df:5e:88:
ba:38:3f:29:b3:b2:26:29:d5:f9:29:da:7c:23:cf:
65:05:eb:73:a8:c8:df:c7:79:f3:5a:58:b7:28:62:
09:2f:09:c6:87:0a:bd:40:ae:66:03:74:6a:d0:59:
5f:75:40:f3:c3:c6:f0:73:94:0d:72:bd:59:7a:91:
b5:48:1a:1c:ed:cf:1c:64:d6:a8:60:19:82:80:bb:
d2:0a:9a:4d:aa:ae:97:c2:78:aa:01:69:ce:88:90:
c1:5b:01:37:85:f9:1e:12:6f:71:77:15:0b:c4:c0:
e5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C3:5B:8C:BB:A2:CA:34:87:B5:F4:7C:CE:C9:7E:24:33:0F:27:E8
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3137352e35362e302f32342d3234203d3e203633343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.175.56.0/24
Signature Algorithm: sha256WithRSAEncryption
60:d9:c8:91:20:6f:26:49:a2:7e:9e:82:fd:5b:15:82:c7:e3:
a3:8e:80:57:e3:89:83:d0:e6:38:f4:16:7b:1c:31:95:7a:9d:
10:80:0e:93:8b:44:0b:c5:b7:c3:2a:69:79:d9:5d:ac:2f:4c:
88:82:a3:d2:fe:39:60:b0:a0:50:bf:66:ab:21:eb:17:50:0a:
1c:1c:98:e0:18:0f:19:d6:aa:ab:fe:12:75:81:a9:bd:a4:0d:
92:ec:6c:86:0a:02:72:f7:98:58:13:8f:54:20:67:34:0e:3f:
63:d5:1e:37:ee:1e:64:0d:f0:a2:6c:4c:73:62:4c:c6:e9:fc:
ec:7c:55:0f:08:36:ad:03:19:19:c4:6c:f8:7f:f8:5d:6b:bc:
64:7c:47:70:1b:b4:24:f7:08:a9:ac:45:fd:f2:39:e5:8d:3d:
28:48:fe:17:8b:fb:03:f8:21:74:5c:c0:8a:8a:e3:c4:64:0d:
2e:6f:4a:05:a1:60:e0:d8:08:c8:34:d0:b7:4c:58:d3:bb:f7:
37:91:05:32:bf:df:1a:1a:15:8f:b5:37:b9:0c:a0:26:22:71:
b0:d7:11:61:89:13:dd:d4:b6:b2:94:f5:6c:11:53:75:14:c7:
f8:6a:5e:86:09:da:77:12:36:27:98:75:db:6c:94:a9:e0:75:
9d:b1:b0:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:03:51 2026 by rpki-client