Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3137352e35372e302f32342d3234203d3e203633343733.roa
File: 3138352e3137352e35372e302f32342d3234203d3e203633343733.roa (raw, json)
Hash identifier: q0MclU2C5HxbLqm1uSneZeIVhJlCEMgnwaWYitYwr60=
Subject key identifier: 91:32:DB:04:4A:6F:17:67:BF:97:BD:09:26:1B:82:37:08:73:B4:41
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 65E188CEE57AAAABE9F43C09D9B7091DB589138A
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3137352e35372e302f32342d3234203d3e203633343733.roa
Signing time: Mon 02 Nov 2026 16:32:44 +0000
ROA not before: Mon 02 Nov 2026 16:27:44 +0000
ROA not after: Mon 01 Nov 2027 16:32:44 +0000
asID: 63473
IP address blocks: 185.175.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:e1:88:ce:e5:7a:aa:ab:e9:f4:3c:09:d9:b7:09:1d:b5:89:13:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Nov 2 16:27:44 2026 GMT
Not After : Nov 1 16:32:44 2027 GMT
Subject: CN=9132DB044A6F1767BF97BD09261B82370873B441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:67:94:c2:3f:47:f7:75:ba:1f:6c:91:f6:63:
ac:00:b1:15:b7:81:0a:63:b5:e2:3f:d9:51:46:71:
34:93:0a:fc:26:64:04:8c:92:31:18:dd:ed:60:0d:
0f:bd:c1:b6:d6:b4:46:36:e1:32:fe:81:da:c0:3f:
7b:36:f7:42:4a:66:e9:35:21:dd:56:77:e4:4f:40:
db:04:29:18:1d:8d:a6:16:f0:da:5b:a0:af:c6:70:
42:af:ee:49:ff:ec:7e:ae:c8:85:d7:04:44:f8:c5:
e3:ae:77:86:34:b1:f1:31:a4:45:05:12:b7:ef:24:
8e:fc:a7:bc:65:54:00:8e:2a:ab:95:fc:a1:fb:37:
b5:9e:8c:ec:1f:df:ed:62:6f:a9:a6:1b:67:82:14:
a1:f7:f1:d7:46:68:bf:5c:ad:be:4f:95:f0:3d:de:
5c:da:b2:e6:6f:9f:3f:e2:bb:4b:7b:6a:d8:f3:25:
e1:36:38:0c:fa:ee:55:8e:ac:33:6d:d1:c2:54:25:
b3:cf:fc:f3:fe:e3:7a:a0:8d:fe:ff:da:07:af:2e:
c7:31:5c:7e:87:c9:4b:c1:21:b7:39:1d:bb:6f:7d:
00:d0:73:db:78:09:ed:4f:2f:b2:78:25:ff:82:77:
78:18:b9:a2:98:43:23:8d:2d:71:94:d9:46:a4:20:
64:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:32:DB:04:4A:6F:17:67:BF:97:BD:09:26:1B:82:37:08:73:B4:41
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3137352e35372e302f32342d3234203d3e203633343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.175.57.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:c9:02:22:13:79:22:a2:7a:ba:5b:77:da:2b:14:aa:8f:2d:
0e:00:d6:af:4e:9b:be:6d:e5:6b:08:44:a9:92:54:9c:fb:16:
58:89:08:a4:4e:3d:ad:98:f1:b3:dc:63:1a:54:d2:ee:e3:35:
98:d6:c3:84:cd:09:7a:34:2a:e1:40:be:13:2b:64:44:f1:d8:
46:d7:4b:b9:06:05:f4:b9:a6:bb:ac:6f:d3:c1:46:e9:49:bc:
7a:6c:7b:38:9b:61:86:7e:c3:67:5f:d1:c3:24:47:74:ad:cb:
40:ee:1d:2f:90:5b:38:11:88:c2:5e:15:5e:6b:33:04:3b:dc:
d7:5e:a2:9a:c4:34:71:dd:fd:3f:f2:dc:4a:34:0f:2d:9b:e0:
31:24:f2:7d:46:2f:58:cb:92:94:51:d7:42:6a:39:42:46:99:
37:7d:bb:bc:58:9c:32:23:ee:15:08:9f:a6:c5:01:25:5c:f1:
bc:23:d2:5e:93:ef:77:a8:62:1d:d5:72:9c:81:a0:62:a3:64:
ec:af:bf:c6:7e:ea:b3:36:c6:97:6d:4a:33:a8:17:02:c1:81:
f4:8a:50:bd:56:c2:47:62:56:0b:f0:64:ab:df:fa:b9:ff:0f:
e3:f6:f1:f1:74:82:ff:b0:1a:f2:6d:51:d5:0f:d2:97:60:ea:
51:bf:4b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:11:43 2026 by rpki-client