Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3138352e3132342e302f32342d3234203d3e20323034313730.roa
File: 3138352e3138352e3132342e302f32342d3234203d3e20323034313730.roa (raw, json)
Hash identifier: lndJAj5AqUvVTLtcM0YqwESANPJlXseFjJKd1a6I0oE=
Subject key identifier: A5:6E:86:D3:0B:58:0B:64:E5:A9:5F:41:0E:B5:88:C6:61:98:B3:88
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 484AFF3E42EFFBCEB973FBDE339781D8178EBA20
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3138352e3132342e302f32342d3234203d3e20323034313730.roa
Signing time: Mon 02 Nov 2026 16:32:45 +0000
ROA not before: Mon 02 Nov 2026 16:27:45 +0000
ROA not after: Mon 01 Nov 2027 16:32:45 +0000
asID: 204170
IP address blocks: 185.185.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:4a:ff:3e:42:ef:fb:ce:b9:73:fb:de:33:97:81:d8:17:8e:ba:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Nov 2 16:27:45 2026 GMT
Not After : Nov 1 16:32:45 2027 GMT
Subject: CN=A56E86D30B580B64E5A95F410EB588C66198B388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9e:7c:d4:aa:9e:50:5a:64:5e:d5:b6:42:92:
de:f8:29:c8:f9:a6:11:4e:05:e8:36:55:b6:f1:96:
19:58:bd:a3:3f:24:b9:07:3f:6e:46:d6:7e:63:b2:
0b:58:d5:77:5a:55:e2:65:81:f6:75:90:b1:f5:20:
ec:08:9b:9d:06:3e:b3:35:24:f1:e2:17:96:ca:0e:
f0:22:30:14:f8:7b:1e:18:d1:f7:74:8f:c2:1f:1a:
a9:65:b2:8e:cc:d2:18:2b:48:6b:73:06:e0:bb:4a:
c3:ac:3c:33:68:bf:3a:ff:61:8d:4c:37:3d:58:2e:
41:14:9b:90:bb:10:d3:fc:e6:8a:01:f8:7a:05:c8:
f1:a6:e0:bb:2e:93:35:1f:0d:65:e4:07:e2:ef:16:
f8:b5:8d:f6:eb:fd:56:6d:24:b1:12:30:46:09:7b:
1c:6d:b1:b4:4e:d2:5a:12:1c:54:ba:3a:c3:f6:cc:
f6:6e:71:34:37:66:f0:f0:3e:45:61:0f:ff:27:d4:
0d:db:ff:ad:a9:1d:6a:22:0f:f3:5a:07:de:2e:a7:
70:0a:2d:9d:9b:fe:72:4d:17:fe:39:2a:00:24:09:
14:c7:5d:a3:71:6a:4b:80:64:bd:ca:f2:6b:4b:8f:
a2:1a:59:ea:ed:a1:bf:a9:07:dc:e2:2f:6c:5a:bf:
c8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:6E:86:D3:0B:58:0B:64:E5:A9:5F:41:0E:B5:88:C6:61:98:B3:88
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3138352e3132342e302f32342d3234203d3e20323034313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.185.124.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:04:27:82:e1:15:45:60:54:6e:bc:79:19:d1:cf:22:cb:60:
03:04:b5:b5:43:9c:73:f9:09:d5:d6:e3:2c:4f:f7:96:04:34:
3b:04:dc:52:76:e2:13:df:32:ea:f8:ba:34:aa:76:34:f8:64:
ec:8f:1d:6c:cf:73:81:02:6c:48:1d:bc:64:44:ba:9b:c4:53:
b9:79:71:fc:e3:59:76:b0:16:c0:5a:69:1b:65:25:70:ad:e7:
ab:a5:a8:46:7c:ca:0b:e3:31:a0:b3:f2:f7:b4:2e:8f:a1:0a:
d9:e3:e0:81:13:fc:7b:8a:e0:67:03:48:5c:2f:37:2a:8e:92:
9d:05:8a:6a:6b:00:3f:ff:eb:14:30:a0:cc:b6:e6:94:38:4a:
ce:77:9a:7a:02:1a:b7:57:16:dd:09:56:7d:4c:35:77:b5:00:
cf:a6:c2:4a:88:16:43:84:16:a0:83:75:fb:e3:72:e4:b6:18:
50:4a:ca:86:b1:1a:78:fb:9c:c2:3e:4b:0f:f2:c6:f4:ce:eb:
29:f6:02:cb:28:35:d8:92:f0:18:be:63:0b:56:e7:2a:cb:04:
e0:1b:39:62:43:6f:be:10:ad:3e:a6:fa:ba:71:e1:38:7a:20:
24:41:ff:11:37:20:ba:aa:bc:58:80:c0:0b:42:da:69:51:cc:
5b:71:72:41
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUSEr/PkLv+865c/veM5eB2BeOuiAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj
MjMxM2EzYTAeFw0yNjExMDIxNjI3NDVaFw0yNzExMDExNjMyNDVaMDMxMTAvBgNV
BAMTKEE1NkU4NkQzMEI1ODBCNjRFNUE5NUY0MTBFQjU4OEM2NjE5OEIzODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4nnzUqp5QWmRe1bZCkt74Kcj5
phFOBeg2VbbxlhlYvaM/JLkHP25G1n5jsgtY1XdaVeJlgfZ1kLH1IOwIm50GPrM1
JPHiF5bKDvAiMBT4ex4Y0fd0j8IfGqllso7M0hgrSGtzBuC7SsOsPDNovzr/YY1M
Nz1YLkEUm5C7ENP85ooB+HoFyPGm4LsukzUfDWXkB+LvFvi1jfbr/VZtJLESMEYJ
exxtsbRO0loSHFS6OsP2zPZucTQ3ZvDwPkVhD/8n1A3b/62pHWoiD/NaB94up3AK
LZ2b/nJNF/45KgAkCRTHXaNxakuAZL3K8mtLj6IaWertob+pB9ziL2xav8inAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUpW6G0wtYC2TlqV9BDrWIxmGYs4gwHwYDVR0j
BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J
eE9qby5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzEzODM1MmUzMTM4MzUyZTMx
MzIzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzNDMxMzczMC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEALm5fDANBgkqhkiG9w0BAQsFAAOCAQEATQQnguEVRWBUbrx5GdHPIstgAwS1
tUOcc/kJ1dbjLE/3lgQ0OwTcUnbiE98y6vi6NKp2NPhk7I8dbM9zgQJsSB28ZES6
m8RTuXlx/ONZdrAWwFppG2UlcK3nq6WoRnzKC+MxoLPy97Quj6EK2ePggRP8e4rg
ZwNIXC83Ko6SnQWKamsAP//rFDCgzLbmlDhKzneaegIat1cW3QlWfUw1d7UAz6bC
SogWQ4QWoIN1++Ny5LYYUErKhrEaePucwj5LD/LG9M7rKfYCyyg12JLwGL5jC1bn
KssE4Bs5YkNvvhCtPqb6unHhOHogJEH/ETcguqq8WIDAC0LaaVHMW3FyQQ==
-----END CERTIFICATE-----
Generated at Sun Nov 15 16:41:38 2026 by rpki-client