Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3234352e3235332e302f32342d3234203d3e203133333335.roa
File: 3138352e3234352e3235332e302f32342d3234203d3e203133333335.roa (raw, json)
Hash identifier: QTCro9raAuy8HIcjpkQ/3XWEAE44DCvBODFip36hEik=
Subject key identifier: 8C:5F:63:98:1F:BB:21:96:76:3F:B1:C8:E3:56:4E:99:AC:DE:D4:33
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 71212F2A0FCD8CE8A14D2A91BBA11F8EFDC0168C
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3234352e3235332e302f32342d3234203d3e203133333335.roa
Signing time: Wed 09 Sep 2026 19:36:04 +0000
ROA not before: Wed 09 Sep 2026 19:31:04 +0000
ROA not after: Wed 08 Sep 2027 19:36:04 +0000
asID: 13335
IP address blocks: 185.245.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:21:2f:2a:0f:cd:8c:e8:a1:4d:2a:91:bb:a1:1f:8e:fd:c0:16:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Sep 9 19:31:04 2026 GMT
Not After : Sep 8 19:36:04 2027 GMT
Subject: CN=8C5F63981FBB2196763FB1C8E3564E99ACDED433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b7:09:12:c8:ae:8f:56:df:ff:f9:b3:2f:22:
36:fd:02:b6:7c:43:c8:aa:d1:b9:ca:9c:85:90:77:
ed:04:ed:d0:87:bc:f5:45:d7:b6:7e:56:2a:72:0b:
bf:97:76:48:6c:39:c2:27:c8:12:3b:30:99:31:bf:
96:cb:a7:1c:6b:1e:50:23:df:f2:e5:06:ca:50:91:
7c:7d:93:d9:9e:47:5d:7d:db:f4:70:1a:38:09:80:
e9:eb:24:0a:70:d7:4e:a2:91:c4:1e:cf:a8:19:d6:
d2:81:ed:03:9f:8d:63:f3:d3:ee:6d:97:b9:df:f0:
1e:42:0c:a0:11:74:0f:a8:e0:da:44:21:b2:a9:5c:
16:e4:e6:6b:bf:7f:89:49:8b:1c:04:fe:f5:31:01:
f6:aa:74:3e:90:a3:b0:51:2e:db:52:13:fe:5a:17:
b9:32:4c:20:08:66:47:4f:72:3b:ba:49:40:f3:4f:
fe:ee:a5:d5:74:17:43:ee:83:e0:e7:02:c1:48:4d:
5a:e3:3f:40:73:d6:fb:5b:1c:43:8a:37:38:61:09:
4c:24:66:ee:6d:cb:09:2c:4f:29:ee:b7:37:05:b7:
9a:ac:9f:b3:03:32:cb:fa:bc:26:c0:58:ba:a5:67:
a4:31:6d:03:2b:b1:7c:80:86:0b:6a:1d:8b:01:1a:
34:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:5F:63:98:1F:BB:21:96:76:3F:B1:C8:E3:56:4E:99:AC:DE:D4:33
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3234352e3235332e302f32342d3234203d3e203133333335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.253.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:32:db:ce:93:a6:db:9b:87:fc:59:99:63:2b:85:75:0a:98:
dd:3a:41:eb:9a:48:bd:64:54:c0:60:6e:d2:c0:86:e4:43:75:
3a:89:f3:d7:a2:14:0b:f5:f0:33:a7:41:c9:20:e3:72:b3:6a:
90:d0:0c:0e:41:d8:4c:df:26:87:34:af:34:63:aa:5a:ba:02:
fa:5b:ad:18:28:31:28:7e:1c:1f:b7:b5:26:eb:77:32:56:ae:
95:c9:61:21:90:b4:0d:3b:95:1c:4e:4d:ba:97:7e:e7:71:13:
49:6e:e6:77:11:20:79:ce:dc:40:bf:94:38:d7:40:b4:4c:43:
7c:1b:d4:51:f9:bb:00:4c:11:08:98:af:da:8d:e9:0a:e3:69:
06:b6:e8:12:27:36:fa:82:d9:b3:90:42:28:b7:9c:bf:8b:05:
f4:d7:c5:65:1d:eb:9c:94:ec:1a:a6:dd:29:94:58:0d:53:03:
f7:c5:4e:3a:a6:82:73:4c:cf:b8:59:6b:c4:c5:8d:af:7d:4b:
51:4f:bb:ed:81:8f:da:f8:68:94:04:2f:14:33:a9:1e:17:f8:
2a:7e:c8:21:de:dc:65:af:89:87:42:99:69:74:ac:19:03:80:
19:d2:ca:4e:05:3c:db:8a:e3:ad:1a:d7:c2:8b:75:f4:f9:eb:
64:7b:05:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:18:34 2026 by rpki-client