Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3138352e3132362e302f32342d3234203d3e2033313730.roa
File: 3138352e3138352e3132362e302f32342d3234203d3e2033313730.roa (raw, json)
Hash identifier: do/RrUjPY21PzP+r8ARmAs5HQfB+rnGTfdwvVxiBGyY=
Subject key identifier: 35:CF:9D:D3:6A:00:52:34:FF:06:C9:2A:A7:66:B0:FA:AB:D4:66:17
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 5B4269464C1C81B99743C6DA1A9B9027C7869CB2
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3138352e3132362e302f32342d3234203d3e2033313730.roa
Signing time: Tue 24 Mar 2026 17:39:22 +0000
ROA not before: Tue 24 Mar 2026 17:34:22 +0000
ROA not after: Tue 23 Mar 2027 17:39:22 +0000
asID: 3170
IP address blocks: 185.185.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:42:69:46:4c:1c:81:b9:97:43:c6:da:1a:9b:90:27:c7:86:9c:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Mar 24 17:34:22 2026 GMT
Not After : Mar 23 17:39:22 2027 GMT
Subject: CN=35CF9DD36A005234FF06C92AA766B0FAABD46617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d1:c4:a9:6a:f6:a5:2f:38:c4:e9:94:cd:a2:
1b:6f:17:ec:f6:4e:dc:d3:4b:d9:1a:15:59:77:19:
3b:65:7d:76:24:40:5e:be:b7:e2:72:d8:e4:69:93:
26:c6:75:d5:0b:9e:23:18:e4:c7:19:d5:0f:4a:13:
9c:7e:8a:98:58:a4:b2:26:ef:fa:7a:4c:1b:47:44:
99:35:3e:e6:6e:dc:5a:ba:d9:dd:91:da:fc:c3:3b:
ec:6c:5e:15:76:06:58:a0:35:17:ca:b7:7b:c9:4c:
44:97:18:7c:19:11:4e:d0:e8:1d:01:d4:70:2b:fd:
cd:01:a8:c6:7d:f3:60:04:22:35:cc:93:3f:93:26:
8c:05:8e:93:ca:b1:80:2b:58:88:d8:4a:a9:91:a7:
c2:34:7c:2f:b0:ac:f8:ed:c5:c0:5d:5a:64:cc:50:
08:6e:49:76:ab:27:02:e6:56:35:34:10:d4:29:1f:
28:51:0b:50:34:fb:d9:bc:f2:5f:d9:06:97:5f:3c:
48:8c:78:97:71:9c:c4:a3:4e:d9:19:34:21:8b:be:
33:e9:64:ce:db:ac:5d:88:85:c6:e8:75:06:99:7b:
06:63:30:e9:c2:13:b4:72:a1:f3:1d:67:72:47:23:
90:1f:cf:8f:b9:cc:65:44:80:59:62:73:02:3a:a3:
35:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:CF:9D:D3:6A:00:52:34:FF:06:C9:2A:A7:66:B0:FA:AB:D4:66:17
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3138352e3132362e302f32342d3234203d3e2033313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.185.126.0/24
Signature Algorithm: sha256WithRSAEncryption
75:9b:ae:17:27:3e:86:e0:cd:3c:5f:ab:49:9f:c2:15:1e:36:
51:ef:83:50:8d:21:c4:61:a2:17:62:81:1c:7f:e6:28:f9:6e:
12:68:42:c6:fe:41:b2:ed:a7:fe:ca:5a:d1:18:c6:3f:0c:29:
2f:74:7e:b1:8a:03:4e:ea:e5:54:66:28:12:40:c4:25:d4:7f:
6c:16:d8:dc:9b:d1:ab:04:19:5d:0d:00:33:ee:a7:73:4d:7a:
51:9a:03:d6:f4:8d:f1:3f:bf:63:24:e9:26:dc:9b:26:02:1d:
79:a4:14:f5:12:01:20:fa:2b:23:cd:53:99:42:88:c4:cb:ff:
c5:03:57:14:84:ea:16:23:79:21:3e:3b:e9:c1:41:b4:6b:70:
f3:70:81:61:6e:2e:e9:21:1b:bf:a0:f8:79:da:21:15:39:b9:
76:6a:99:a1:c4:af:ce:77:31:d9:64:01:f3:e2:b8:a9:43:72:
8f:b4:22:da:7e:d0:af:b1:2c:26:d9:4e:a9:50:6d:23:3b:40:
81:6c:4f:30:31:c7:ad:12:bd:67:00:e5:10:b2:eb:a7:d9:ea:
d2:32:c4:4a:b0:03:de:87:56:f4:96:2d:94:0a:eb:bb:8f:4b:
08:12:23:d4:db:32:98:98:1b:0b:e0:b3:ce:ea:74:3c:4f:b3:
49:c2:82:62
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUW0JpRkwcgbmXQ8baGpuQJ8eGnLIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj
MjMxM2EzYTAeFw0yNjAzMjQxNzM0MjJaFw0yNzAzMjMxNzM5MjJaMDMxMTAvBgNV
BAMTKDM1Q0Y5REQzNkEwMDUyMzRGRjA2QzkyQUE3NjZCMEZBQUJENDY2MTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX0cSpavalLzjE6ZTNohtvF+z2
TtzTS9kaFVl3GTtlfXYkQF6+t+Jy2ORpkybGddULniMY5McZ1Q9KE5x+iphYpLIm
7/p6TBtHRJk1PuZu3Fq62d2R2vzDO+xsXhV2BligNRfKt3vJTESXGHwZEU7Q6B0B
1HAr/c0BqMZ982AEIjXMkz+TJowFjpPKsYArWIjYSqmRp8I0fC+wrPjtxcBdWmTM
UAhuSXarJwLmVjU0ENQpHyhRC1A0+9m88l/ZBpdfPEiMeJdxnMSjTtkZNCGLvjPp
ZM7brF2IhcbodQaZewZjMOnCE7RyofMdZ3JHI5Afz4+5zGVEgFlicwI6ozWDAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUNc+d02oAUjT/Bskqp2aw+qvUZhcwHwYDVR0j
BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J
eE9qby5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzEzODM1MmUzMTM4MzUyZTMx
MzIzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMzMzEzNzMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
ubl+MA0GCSqGSIb3DQEBCwUAA4IBAQB1m64XJz6G4M08X6tJn8IVHjZR74NQjSHE
YaIXYoEcf+Yo+W4SaELG/kGy7af+ylrRGMY/DCkvdH6xigNO6uVUZigSQMQl1H9s
Ftjcm9GrBBldDQAz7qdzTXpRmgPW9I3xP79jJOkm3JsmAh15pBT1EgEg+isjzVOZ
QojEy//FA1cUhOoWI3khPjvpwUG0a3DzcIFhbi7pIRu/oPh52iEVObl2apmhxK/O
dzHZZAHz4ripQ3KPtCLaftCvsSwm2U6pUG0jO0CBbE8wMcetEr1nAOUQsuun2erS
MsRKsAPeh1b0li2UCuu7j0sIEiPU2zKYmBsL4LPO6nQ8T7NJwoJi
-----END CERTIFICATE-----
Generated at Wed Mar 25 21:27:10 2026 by rpki-client