Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3139372e33302e302f32342d3234203d3e203633343733.roa
File: 3138352e3139372e33302e302f32342d3234203d3e203633343733.roa (raw, json)
Hash identifier: cDkOy0BUJhy46tbe9lqnUZOcl/yyHh5xgJToohN0TnA=
Subject key identifier: E8:3C:5A:DA:5B:91:1D:17:13:46:43:A4:15:C0:FB:22:F0:5C:89:0A
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 607D521B4FFD6061BA63AD1C0CB275419039C786
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3139372e33302e302f32342d3234203d3e203633343733.roa
Signing time: Mon 02 Nov 2026 16:33:00 +0000
ROA not before: Mon 02 Nov 2026 16:28:00 +0000
ROA not after: Mon 01 Nov 2027 16:33:00 +0000
asID: 63473
IP address blocks: 185.197.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 22:05:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:7d:52:1b:4f:fd:60:61:ba:63:ad:1c:0c:b2:75:41:90:39:c7:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Nov 2 16:28:00 2026 GMT
Not After : Nov 1 16:33:00 2027 GMT
Subject: CN=E83C5ADA5B911D17134643A415C0FB22F05C890A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:68:1f:73:b2:88:5d:30:1c:cb:25:9f:7d:01:
80:66:82:a4:36:e9:f0:f9:26:32:d4:0a:06:d5:75:
04:13:75:79:fc:f9:4d:62:c0:40:e3:97:7f:ab:f7:
63:ec:d5:f9:cb:29:c1:78:d9:6d:d8:40:9a:77:4d:
20:af:99:8b:c1:f3:15:3e:ad:72:71:6c:cb:97:96:
46:29:9a:89:aa:19:75:d6:84:b1:7e:6e:d3:50:23:
95:33:10:66:a6:df:7c:bf:ab:23:93:60:47:9f:be:
af:81:e0:47:67:e9:37:df:b9:ea:ed:3d:24:23:e8:
f9:21:af:fd:0d:c3:b2:72:00:38:3b:b3:4d:b2:a1:
bd:e7:3b:58:4f:c1:40:6e:bf:77:ed:93:a6:4d:be:
6b:c7:3a:85:6c:f3:80:c0:41:8b:59:84:8a:b7:d9:
4c:a5:41:5a:d2:0c:da:2f:bc:1b:af:4e:e6:e1:c4:
45:45:d8:dc:7f:3b:77:9c:29:40:80:a0:0e:5c:ac:
91:5d:cd:3a:ba:25:b5:93:03:c1:c8:ea:7d:c3:29:
86:e9:d8:6d:05:bd:12:5c:be:f0:9c:e9:21:7e:40:
63:b7:fd:c7:6b:e7:69:ff:4a:86:b5:a3:87:08:87:
07:02:17:d1:d2:9a:9b:e1:f3:23:a8:f4:a6:c6:72:
c9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:3C:5A:DA:5B:91:1D:17:13:46:43:A4:15:C0:FB:22:F0:5C:89:0A
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3139372e33302e302f32342d3234203d3e203633343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.30.0/24
Signature Algorithm: sha256WithRSAEncryption
91:1b:0b:ca:90:e0:c6:b7:ea:74:42:72:4f:66:56:f8:27:07:
45:66:ad:0a:bc:5f:f4:d2:43:9f:6f:11:83:0f:15:9a:b0:da:
d1:1d:2d:41:84:f5:2b:e6:2e:86:d7:9f:11:e5:89:7a:45:7f:
aa:12:aa:06:55:04:9c:5a:a8:4f:dc:0f:f3:e5:a8:6c:a2:34:
6f:33:74:3c:5c:cb:11:46:67:a7:30:34:22:ec:86:fb:6f:17:
5c:ee:71:a8:4f:40:ee:aa:d8:97:bc:67:c0:cd:76:af:ee:27:
0b:23:4c:29:9b:2b:4e:87:8e:1d:07:4d:03:70:7d:c0:74:e1:
61:43:1d:3d:60:82:71:c2:89:c3:42:f7:f1:82:8b:41:4e:22:
f7:55:7e:2c:9a:47:03:b7:47:f7:e2:f8:b2:32:14:30:f7:7b:
2b:94:c8:5c:63:42:f9:15:1b:b8:4d:66:9b:3c:79:dc:bf:88:
c2:6d:ff:ed:da:4c:05:3e:e6:fa:dd:92:55:3b:41:37:af:5f:
2e:61:0b:ea:02:f5:30:81:4d:e4:d0:bf:ca:82:a1:29:70:c5:
54:d8:d1:88:eb:cd:e0:7e:7a:a7:d6:04:06:1a:cc:e8:49:82:
a1:d7:11:89:a5:13:37:3e:5a:93:88:82:6f:6b:3d:5e:6a:df:
36:48:df:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:29:53 2026 by rpki-client