Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3138332e3138322e302f32342d3234203d3e20323031303032.roa
File: 3138352e3138332e3138322e302f32342d3234203d3e20323031303032.roa (raw, json)
Hash identifier: TVpl1Gtd9RpqzTs6bw3TrDbjVnzlLbOOUe8mvvOFQFI=
Subject key identifier: EE:5B:89:77:92:6F:4A:0E:5D:AB:8E:E0:37:CF:38:46:5B:C5:92:97
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 3A277C90BCCE52D0444DC7E94B89C86512AE852C
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3138332e3138322e302f32342d3234203d3e20323031303032.roa
Signing time: Sat 21 Mar 2026 08:00:12 +0000
ROA not before: Sat 21 Mar 2026 07:55:12 +0000
ROA not after: Sat 20 Mar 2027 08:00:12 +0000
asID: 201002
IP address blocks: 185.183.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:27:7c:90:bc:ce:52:d0:44:4d:c7:e9:4b:89:c8:65:12:ae:85:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Mar 21 07:55:12 2026 GMT
Not After : Mar 20 08:00:12 2027 GMT
Subject: CN=EE5B8977926F4A0E5DAB8EE037CF38465BC59297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1e:ef:f0:30:01:64:e4:37:ba:f0:fe:55:c5:
77:6e:36:f8:f8:84:6c:f8:48:d2:4c:22:64:f1:13:
6c:1d:e7:73:4b:bf:b4:0d:7f:fc:f5:67:37:94:43:
f6:53:db:b6:f4:45:c5:73:53:4c:77:d2:5b:f3:55:
65:0f:38:3c:45:96:c1:93:00:fc:2b:bb:50:d7:d4:
4d:ab:3f:b7:c4:21:4d:25:5c:2e:e6:b6:5b:29:09:
a6:dc:8e:48:a5:ae:b7:11:72:e5:31:82:02:d3:9d:
0c:cd:06:d2:3f:49:b8:3c:11:2f:30:be:53:d1:29:
34:02:49:95:e6:af:34:71:79:98:d6:ca:bf:10:dc:
93:b6:0a:42:ac:cc:4a:80:ec:6b:0f:f3:99:52:14:
14:df:4a:f2:21:97:a8:1c:b8:c9:cb:13:bb:5a:65:
ce:5c:73:98:4d:78:90:16:31:02:29:56:c0:bc:63:
09:6a:8b:32:f2:85:de:a9:3b:d3:db:2f:25:17:9a:
24:e1:23:78:56:b8:40:1f:d2:11:01:c1:3c:c0:bb:
ad:bb:8b:ad:51:0e:cf:23:49:b9:1b:ae:92:b9:5d:
3c:79:e4:a6:81:b0:3e:16:e0:16:d2:cf:36:40:33:
6d:60:1f:d3:12:8c:e0:9c:76:40:93:47:f9:38:2c:
75:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:5B:89:77:92:6F:4A:0E:5D:AB:8E:E0:37:CF:38:46:5B:C5:92:97
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3138332e3138322e302f32342d3234203d3e20323031303032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.183.182.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:0b:a4:f8:71:82:09:6e:55:88:c1:fd:4c:62:4f:7d:2b:65:
cb:af:9e:c7:1d:6d:55:c0:32:4b:0d:55:a5:a9:f9:7e:b8:80:
83:84:90:89:33:cf:8b:26:3b:2f:66:01:4e:0e:c6:97:c0:7c:
a5:f9:a9:d6:06:5c:14:4f:1f:94:dc:7c:46:37:5b:a6:d6:3e:
43:12:c7:50:1c:cd:32:2d:53:f3:cb:a6:f0:19:ec:8e:ec:47:
db:74:72:2e:a9:6b:3b:aa:09:48:24:3f:e9:be:35:b4:0a:cf:
c0:11:da:e9:96:4b:ee:38:d4:4c:f9:d6:be:15:7b:a7:bb:fd:
20:94:a0:46:8d:48:b2:0b:6f:5d:38:09:dd:cb:57:97:b1:36:
1a:b8:c2:84:93:6e:47:f7:df:f6:2c:4d:8f:fb:c0:b8:a6:15:
c2:14:ce:0d:26:4f:89:d7:85:c2:8a:c7:cb:75:aa:73:04:13:
5e:bc:e2:df:14:eb:56:6b:1d:24:33:cc:02:9f:e5:ca:41:e2:
ee:80:68:de:a2:56:46:c3:2a:41:42:06:0b:a6:9f:93:1d:fb:
18:74:7f:44:1d:5c:30:a8:2f:39:a6:84:f4:ac:95:b8:67:09:
c3:b4:d8:30:1f:da:3e:fb:0f:90:44:69:1b:1c:6c:b3:ee:e9:
a6:c5:38:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:53:50 2026 by rpki-client