Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3232322e3132342e302f32322d3234203d3e20323034313730.roa
File: 3138352e3232322e3132342e302f32322d3234203d3e20323034313730.roa (raw, json)
Hash identifier: sKc0/o6hczjJR4GPHETKTJJMa/T0YtsowgHkFegUP9g=
Subject key identifier: 92:8B:C7:A6:96:76:AF:B8:19:2F:51:FD:66:70:DD:6E:CA:A7:BF:53
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 27E5A9E1CF11BEE3A0ADC9D22110134489D03CC4
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3232322e3132342e302f32322d3234203d3e20323034313730.roa
Signing time: Mon 02 Nov 2026 16:32:49 +0000
ROA not before: Mon 02 Nov 2026 16:27:49 +0000
ROA not after: Mon 01 Nov 2027 16:32:49 +0000
asID: 204170
IP address blocks: 185.222.124.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:e5:a9:e1:cf:11:be:e3:a0:ad:c9:d2:21:10:13:44:89:d0:3c:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Nov 2 16:27:49 2026 GMT
Not After : Nov 1 16:32:49 2027 GMT
Subject: CN=928BC7A69676AFB8192F51FD6670DD6ECAA7BF53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bd:fb:8e:72:11:f9:df:81:eb:65:dc:6c:fa:
05:fa:a1:7d:be:2b:f0:c5:5f:8a:19:e2:b0:31:d8:
4d:3a:d4:ea:81:ef:73:0a:ba:67:7f:b6:af:54:27:
d0:53:e8:c3:a2:55:04:96:ff:84:f9:68:77:76:47:
ab:0e:5e:2d:f6:90:b1:ae:b1:73:37:60:6c:55:22:
0c:36:ab:07:c5:b9:a8:e5:ad:11:79:51:8c:2d:19:
a5:fc:29:35:e7:07:fb:4a:fb:08:bc:e8:cc:65:e5:
4b:1a:3e:03:87:d3:fb:ae:57:a7:b1:f8:83:78:b9:
ff:d0:ab:32:d2:4f:ce:2d:2f:b6:c2:6c:94:78:96:
a8:73:06:5f:c9:32:50:ec:4a:6e:41:47:af:85:6d:
b6:32:59:52:8c:98:cb:66:79:0a:c6:2b:6f:b4:ae:
7b:3b:9d:50:e0:b8:33:0d:87:d4:f6:6e:64:c3:7b:
72:86:58:90:5b:8e:d4:9f:8d:c5:de:89:6a:24:e4:
ce:be:18:5a:79:37:9c:08:f5:be:f7:5b:83:32:2b:
7c:b1:01:d1:4b:9c:1a:64:49:74:16:a1:9b:79:63:
96:aa:07:04:9d:10:32:96:b1:ac:58:3f:e2:e2:72:
1a:3a:ec:74:fc:4d:eb:f9:a5:a6:d1:d1:cf:a0:1c:
06:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:8B:C7:A6:96:76:AF:B8:19:2F:51:FD:66:70:DD:6E:CA:A7:BF:53
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3232322e3132342e302f32322d3234203d3e20323034313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.124.0/22
Signature Algorithm: sha256WithRSAEncryption
08:b8:10:4a:a9:b1:91:9d:ea:e5:71:c4:1c:66:11:64:20:5d:
bb:72:e2:88:dd:69:41:17:7f:df:06:60:7d:c6:f0:e8:18:13:
a9:b9:e3:25:b2:64:aa:4f:f9:27:3c:0a:d9:c7:12:0b:36:d4:
44:2a:07:5d:cc:9d:d4:cd:f9:5e:ba:d6:8f:59:36:54:7d:75:
e2:94:fc:3a:e6:da:f8:9e:25:80:db:cb:40:e8:b2:6d:24:73:
ec:a5:37:36:a3:8b:07:08:6d:61:ff:a0:7c:54:8e:b5:ad:d9:
9f:13:93:9f:ba:b9:79:de:22:3e:cf:da:1b:fb:2b:f8:28:2b:
57:04:30:63:d8:70:dc:08:30:10:19:5e:64:44:bd:18:72:87:
a9:7d:61:39:01:32:14:08:bd:ca:7e:ad:17:a0:d9:ff:9f:2f:
69:3b:c1:3f:89:07:f1:cb:67:26:db:24:5d:52:77:89:ae:c7:
70:5d:e9:50:0a:bd:0c:31:21:e9:18:3a:37:3c:50:2c:45:77:
31:95:36:5d:3a:de:5e:1e:1f:7b:8e:c2:48:6e:fe:09:b1:71:
63:93:18:13:93:9e:d1:1a:a9:2e:9c:2e:3d:c2:9e:84:0e:61:
8b:8a:90:39:ef:e7:f9:33:be:5b:50:33:c0:29:c6:ed:f5:4f:
94:79:3f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:46:57 2026 by rpki-client