Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3138392e32342e302f32342d3234203d3e20313336373837.roa
File: 3138352e3138392e32342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: Covay3gqwTHIsdcfei0DkUuHxm6RT6TsGPN1EDH9HyY=
Subject key identifier: 4E:39:44:23:A5:20:8B:60:31:B4:31:9C:27:1C:3A:20:51:7C:79:C5
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 784CA766C36F5A41F9DCCB20C7451B6DF1D208D1
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3138392e32342e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 02 Nov 2026 16:32:44 +0000
ROA not before: Mon 02 Nov 2026 16:27:44 +0000
ROA not after: Mon 01 Nov 2027 16:32:44 +0000
asID: 136787
IP address blocks: 185.189.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:4c:a7:66:c3:6f:5a:41:f9:dc:cb:20:c7:45:1b:6d:f1:d2:08:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Nov 2 16:27:44 2026 GMT
Not After : Nov 1 16:32:44 2027 GMT
Subject: CN=4E394423A5208B6031B4319C271C3A20517C79C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:89:66:3a:4f:ae:b9:b5:eb:83:e1:20:37:47:
42:a9:65:9a:d2:1c:bd:67:fe:52:7a:11:2e:df:84:
66:bf:2c:4c:6a:85:d2:50:a7:e3:ae:35:dd:ff:66:
9f:b1:3e:cd:6e:6b:d0:cf:57:a9:fe:5f:e4:1d:f9:
df:29:05:6d:85:b6:15:e0:37:d8:78:fb:d5:71:23:
d4:dc:2f:56:d1:93:52:92:c8:0f:be:9d:15:c9:eb:
f3:37:36:1e:12:f4:e7:72:c7:48:bb:d3:1b:36:12:
56:46:62:69:bf:e2:10:b6:bf:c3:ab:ca:2c:78:ab:
91:8d:e2:b5:99:43:fb:d4:0d:4f:88:39:2c:3e:57:
c3:5f:2f:b7:44:bc:23:40:27:d0:39:7a:09:c4:a0:
6f:9b:01:2b:f1:a4:c2:92:16:56:ec:57:59:93:3b:
26:4a:95:6e:25:7b:93:fc:7c:8b:90:50:7d:28:02:
bb:f6:0b:33:8b:31:89:d3:6f:a8:3c:57:45:e8:30:
ef:c7:8d:10:31:c8:fe:55:8e:64:82:0a:bf:88:da:
29:35:b8:c8:64:8a:11:33:50:87:e0:0c:0c:b6:0c:
16:d9:c1:e2:b9:fd:ba:cc:62:fd:eb:78:70:5e:29:
a5:65:1e:e9:77:14:38:24:a4:75:ab:52:27:cd:cc:
50:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:39:44:23:A5:20:8B:60:31:B4:31:9C:27:1C:3A:20:51:7C:79:C5
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3138392e32342e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.189.24.0/24
Signature Algorithm: sha256WithRSAEncryption
47:cf:b3:e1:57:fa:07:e9:49:41:09:61:6a:05:76:c4:63:33:
8b:31:bc:a2:2d:c8:cc:16:c7:9b:cf:5b:65:01:7e:64:0f:a2:
89:d4:66:29:f8:71:30:56:ea:da:42:78:2f:97:2b:61:37:f8:
d2:fa:a3:fe:93:5c:2d:73:4d:bb:0f:ef:d1:bc:87:af:9e:58:
b7:e8:e2:1d:fe:ce:d0:40:e2:b9:23:0e:ef:ea:05:61:b0:e4:
d5:94:d1:d7:84:9f:c3:1d:fe:36:fb:e7:ae:3d:c4:73:53:06:
9f:be:81:6d:8e:17:2d:1d:90:e1:af:64:fa:75:70:bb:a3:eb:
78:13:c8:c8:57:85:35:16:e8:b3:74:b0:07:12:f4:00:10:f0:
4d:68:6e:68:d7:bf:1a:20:18:c4:71:f0:37:1e:db:51:8c:d9:
d0:67:94:9a:2b:85:27:a4:d7:96:6f:58:a9:ec:f3:85:b4:5f:
f4:53:c8:42:93:98:7e:1f:61:42:68:6f:49:4a:3b:68:19:6d:
9e:f3:a6:cb:16:40:23:fc:03:55:5e:70:d7:64:25:52:ec:66:
4c:28:71:93:f4:ba:c6:37:34:62:6b:e3:a6:8e:77:16:84:19:
11:e7:7b:79:f4:3f:52:82:5a:d5:8b:a2:51:d9:f3:88:e0:86:
3b:dd:fa:e3
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUeEynZsNvWkH53Msgx0UbbfHSCNEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj
MjMxM2EzYTAeFw0yNjExMDIxNjI3NDRaFw0yNzExMDExNjMyNDRaMDMxMTAvBgNV
BAMTKDRFMzk0NDIzQTUyMDhCNjAzMUI0MzE5QzI3MUMzQTIwNTE3Qzc5QzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWiWY6T665teuD4SA3R0KpZZrS
HL1n/lJ6ES7fhGa/LExqhdJQp+OuNd3/Zp+xPs1ua9DPV6n+X+Qd+d8pBW2FthXg
N9h4+9VxI9TcL1bRk1KSyA++nRXJ6/M3Nh4S9Odyx0i70xs2ElZGYmm/4hC2v8Or
yix4q5GN4rWZQ/vUDU+IOSw+V8NfL7dEvCNAJ9A5egnEoG+bASvxpMKSFlbsV1mT
OyZKlW4le5P8fIuQUH0oArv2CzOLMYnTb6g8V0XoMO/HjRAxyP5VjmSCCr+I2ik1
uMhkihEzUIfgDAy2DBbZweK5/brMYv3reHBeKaVlHul3FDgkpHWrUifNzFDvAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUTjlEI6Ugi2AxtDGcJxw6IFF8ecUwHwYDVR0j
BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J
eE9qby5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzEzODM1MmUzMTM4MzkyZTMy
MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAC5vRgwDQYJKoZIhvcNAQELBQADggEBAEfPs+FX+gfpSUEJYWoFdsRjM4sxvKIt
yMwWx5vPW2UBfmQPoonUZin4cTBW6tpCeC+XK2E3+NL6o/6TXC1zTbsP79G8h6+e
WLfo4h3+ztBA4rkjDu/qBWGw5NWU0deEn8Md/jb75649xHNTBp++gW2OFy0dkOGv
ZPp1cLuj63gTyMhXhTUW6LN0sAcS9AAQ8E1obmjXvxogGMRx8Dce21GM2dBnlJor
hSek15ZvWKns84W0X/RTyEKTmH4fYUJob0lKO2gZbZ7zpssWQCP8A1VecNdkJVLs
ZkwocZP0usY3NGJr46aOdxaEGRHne3n0P1KCWtWLolHZ84jghjvd+uM=
-----END CERTIFICATE-----
Generated at Sun Nov 15 21:45:53 2026 by rpki-client