Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3232302e32322e302f32342d3234203d3e203437353833.roa
File: 3138352e3232302e32322e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier: gD/iF3/HJbpNIiC8Z+9vv8hGCNlpmyasPxH6F3VXdgs=
Subject key identifier: E4:B8:03:78:2F:CA:38:BE:D6:F7:E2:C0:E6:72:C5:BD:F2:4E:32:EB
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 2DD273E7ABF8EC947D6D06C61ACCC482936F9817
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3232302e32322e302f32342d3234203d3e203437353833.roa
Signing time: Mon 02 Nov 2026 16:32:46 +0000
ROA not before: Mon 02 Nov 2026 16:27:46 +0000
ROA not after: Mon 01 Nov 2027 16:32:46 +0000
asID: 47583
IP address blocks: 185.220.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:d2:73:e7:ab:f8:ec:94:7d:6d:06:c6:1a:cc:c4:82:93:6f:98:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Nov 2 16:27:46 2026 GMT
Not After : Nov 1 16:32:46 2027 GMT
Subject: CN=E4B803782FCA38BED6F7E2C0E672C5BDF24E32EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0e:bd:41:9d:e9:26:ed:d7:64:56:44:29:fd:
44:a9:79:b2:79:a0:ab:62:5d:ab:c4:e6:16:b2:f8:
ce:7a:42:66:32:61:32:95:bb:5c:17:7d:33:3a:e1:
07:19:56:9e:10:93:e4:74:f3:73:8b:17:4a:01:5f:
a1:2f:c3:0d:a3:87:fb:67:03:f6:95:f1:73:15:64:
f4:f1:07:63:75:20:cc:5d:b8:82:0d:3c:1a:b2:4c:
9e:53:d8:a8:fa:17:9e:3a:a3:18:59:b6:23:2a:e6:
77:e6:f4:3f:0e:00:3e:14:8a:7b:d4:ce:9b:13:b8:
fa:4b:6a:95:4f:f4:74:b4:69:68:0e:c4:f3:56:16:
12:ee:17:7c:c7:34:c2:16:2b:4b:c6:4c:ef:39:9f:
6d:02:24:8d:f2:87:fb:f9:98:03:6b:d3:f3:96:fe:
cb:d7:19:86:b9:79:61:1f:bf:9f:e6:50:fa:7d:77:
43:2d:e3:58:1c:61:a8:de:d8:d0:3c:1e:af:96:ad:
14:15:3c:81:01:88:f5:49:5d:89:0b:6e:a7:10:d1:
ba:9d:fb:c7:82:f2:4a:5f:30:5d:8a:a9:35:be:7f:
b9:7d:a2:2b:2f:1f:a3:ae:92:38:88:b1:bc:be:b4:
79:6d:a9:d1:a8:4e:70:00:52:59:15:fd:2d:2c:21:
0b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:B8:03:78:2F:CA:38:BE:D6:F7:E2:C0:E6:72:C5:BD:F2:4E:32:EB
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3232302e32322e302f32342d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.22.0/24
Signature Algorithm: sha256WithRSAEncryption
80:c7:20:81:d7:f4:d7:d0:57:12:81:af:52:d7:cd:db:54:11:
4d:62:5e:b3:c6:6b:00:3e:7e:c7:9c:07:a1:79:77:97:c8:51:
3a:10:c1:b1:dd:d4:cd:69:89:5a:d8:7f:43:ae:ea:53:59:f0:
98:40:d5:90:98:6c:0c:45:9b:a5:70:78:7d:33:e9:e8:a7:2e:
11:79:b0:04:d3:3a:b8:2e:7c:05:8f:a0:3f:c6:73:d9:19:4b:
3e:ce:47:ec:83:da:43:66:02:fd:dc:fa:6e:0a:25:99:4e:4e:
54:d8:3e:21:56:d7:5b:4b:2e:f1:3b:d4:c6:0a:c2:11:07:e7:
09:c5:54:10:f5:be:9f:3f:37:a4:39:05:5c:39:be:03:73:0b:
85:f0:c0:bc:42:dd:85:c8:fb:79:6a:2c:19:6d:dd:8f:06:1c:
05:50:20:19:4d:da:58:60:68:89:f6:6e:52:9a:a9:63:9d:7b:
53:b6:af:16:80:e4:9b:b7:4f:b7:bc:58:82:f9:8e:cf:64:19:
ba:91:d4:71:c2:fe:7e:7f:15:37:df:a2:3c:8d:15:78:43:5f:
18:3a:76:02:2c:f7:25:fb:50:3c:a5:dc:64:1f:65:19:26:54:
25:ed:de:a9:0c:88:6f:2f:0f:11:7c:43:16:07:4c:d7:76:e9:
9d:3d:5a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:44:41 2026 by rpki-client