Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3137362e3135392e302f32342d3234203d3e203133333335.roa
File: 3138352e3137362e3135392e302f32342d3234203d3e203133333335.roa (raw, json)
Hash identifier: BZdZ9G/K3FSJd/vlMdncHwr1eEZTGQvDvbf54CqyAFU=
Subject key identifier: 45:7B:9B:D6:4A:10:AA:22:59:79:AC:E5:39:B8:85:FB:DD:AD:D7:03
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 6D235819DD5E8A34A98315A68FC8B07447EED977
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3137362e3135392e302f32342d3234203d3e203133333335.roa
Signing time: Wed 09 Sep 2026 19:36:07 +0000
ROA not before: Wed 09 Sep 2026 19:31:07 +0000
ROA not after: Wed 08 Sep 2027 19:36:07 +0000
asID: 13335
IP address blocks: 185.176.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 18:05:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:23:58:19:dd:5e:8a:34:a9:83:15:a6:8f:c8:b0:74:47:ee:d9:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Sep 9 19:31:07 2026 GMT
Not After : Sep 8 19:36:07 2027 GMT
Subject: CN=457B9BD64A10AA225979ACE539B885FBDDADD703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:eb:ce:42:67:4a:51:4d:39:45:88:88:cb:af:
82:84:d6:18:a3:30:d2:46:f4:20:bd:84:d4:4a:a5:
c0:9a:c8:76:07:d7:1e:83:15:e7:03:76:f5:c0:55:
04:47:62:79:4f:24:fd:9a:77:86:ce:43:ef:50:04:
47:33:ed:9b:f1:ec:d9:41:bc:e6:e7:f6:c7:7e:90:
97:24:64:0f:0e:67:84:8b:fe:f8:7d:4b:91:a0:32:
05:d1:ad:8c:a1:0a:df:d8:da:65:56:a4:8a:02:8f:
2d:25:a9:bf:21:8b:8b:76:14:87:d4:ce:22:fc:3f:
58:d5:55:d4:75:26:19:b1:1e:34:7e:1c:ba:93:bf:
80:5d:ed:60:33:ee:c3:98:62:3c:69:3c:80:16:5b:
17:c7:3e:6b:06:1c:c1:03:a8:27:50:81:43:df:a2:
21:a5:dd:55:12:75:fd:5c:7b:d0:ea:a5:42:42:fd:
24:b5:8a:f3:83:ce:71:5a:01:df:6c:84:ca:66:bc:
26:61:0c:b6:5d:29:61:cb:36:38:e1:64:1b:25:41:
45:24:f9:02:cb:2b:65:22:44:73:26:52:fc:e6:77:
9d:f5:c5:96:0e:b4:30:e9:83:a0:70:2f:6d:6a:f6:
45:08:56:ff:61:45:24:5a:62:e3:95:af:d2:b1:26:
09:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:7B:9B:D6:4A:10:AA:22:59:79:AC:E5:39:B8:85:FB:DD:AD:D7:03
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3137362e3135392e302f32342d3234203d3e203133333335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.176.159.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:14:4b:13:78:25:6f:d0:b6:a6:53:0a:e8:1d:e8:89:0d:ff:
47:f2:de:d3:72:b1:75:3c:ae:a3:07:ba:ca:4f:a6:17:ba:6a:
6f:08:98:a5:d4:41:97:9f:09:1b:22:98:79:97:59:61:b9:d8:
4e:41:fb:96:a9:b2:16:bb:6d:da:57:09:ba:5a:e6:32:a3:11:
8b:93:db:01:84:56:33:46:ff:07:6d:39:8e:1a:ab:e6:3b:e0:
04:3d:86:a2:bd:c9:5b:89:cc:9d:99:c5:18:d9:86:d1:09:69:
34:45:ee:5d:8b:72:62:70:e7:9c:16:c6:57:65:9a:aa:99:6c:
6b:6d:d7:11:81:59:87:2b:e8:e6:41:44:6b:d1:13:31:ef:2b:
af:bf:05:f4:97:2e:5c:fa:04:0e:fd:63:6a:ed:7d:46:54:20:
c6:a7:d9:28:ed:79:8d:0c:2d:5b:82:a4:9b:18:a3:d0:17:65:
92:fb:8f:20:50:d2:5c:82:a1:e5:02:56:74:85:5c:97:ec:ed:
d7:63:b0:cb:f8:d4:b6:45:81:86:6c:37:8f:f4:89:b5:26:b7:
c2:d9:53:72:a6:ba:23:19:aa:9e:be:34:7d:a1:34:b4:2a:97:
31:a7:45:36:03:c0:93:1d:d2:b6:e6:0c:0a:da:4a:62:e1:cf:
db:83:2c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:41:36 2026 by rpki-client