Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3138352e3136392e3132302e302f32332d3234203d3e20383334.roa
File: 3138352e3136392e3132302e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: rpy+vxdsHxdgLmJcq25lhXoP4f8YvJQoJtgEZQw0M2I=
Subject key identifier: 8D:6E:94:5A:4F:23:1A:F0:82:54:03:11:CD:49:84:2F:58:43:48:7F
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 6E4C8003CA4F986F1AF8FF6FFC24CB4A90227311
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3138352e3136392e3132302e302f32332d3234203d3e20383334.roa
Signing time: Fri 05 Jun 2026 05:55:28 +0000
ROA not before: Fri 05 Jun 2026 05:50:28 +0000
ROA not after: Fri 04 Jun 2027 05:55:28 +0000
asID: 834
IP address blocks: 185.169.120.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 12:49:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:4c:80:03:ca:4f:98:6f:1a:f8:ff:6f:fc:24:cb:4a:90:22:73:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Jun 5 05:50:28 2026 GMT
Not After : Jun 4 05:55:28 2027 GMT
Subject: CN=8D6E945A4F231AF082540311CD49842F5843487F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:23:39:16:50:9f:0d:43:02:c8:b6:82:2c:1d:
ae:f4:22:ee:39:49:35:d8:cb:95:3f:17:3e:a4:9f:
64:87:04:e1:8d:fd:0d:29:bb:a2:c3:f1:4e:5c:54:
97:e5:73:69:e8:f1:62:b9:a9:18:97:e5:4b:86:87:
72:1c:06:37:9e:1e:53:3e:71:fe:df:96:00:fb:af:
1b:b1:ed:b9:16:28:0f:f1:0d:3c:bf:47:fe:b9:68:
9a:cc:62:27:7d:21:95:f9:f5:9d:02:2e:d0:2d:05:
92:9e:59:f4:ed:2f:0c:d3:1a:6e:38:9a:6d:ca:23:
c4:66:96:20:57:75:50:9a:99:d1:00:f5:1c:52:4e:
97:76:8d:a3:84:5f:3f:03:cc:bb:87:32:10:51:8e:
a6:91:fe:a6:91:14:60:aa:dc:53:62:60:b3:ab:d7:
98:ef:44:62:23:1e:4b:45:eb:c7:c4:d0:fc:49:39:
01:8a:9e:76:fd:d4:82:96:c3:45:b0:b2:4f:32:5e:
ec:a3:db:1f:7d:72:fb:2c:e9:c2:89:04:89:47:11:
f9:4b:f3:46:47:4d:92:5c:53:06:ae:6b:15:32:0d:
da:2e:82:3a:55:87:9c:1f:2b:2a:6a:8b:80:57:45:
25:ab:d3:8d:7f:a0:53:43:f7:2f:3c:c8:fa:5d:e6:
6f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:6E:94:5A:4F:23:1A:F0:82:54:03:11:CD:49:84:2F:58:43:48:7F
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3138352e3136392e3132302e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.169.120.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:e9:a2:6b:c9:ec:12:c0:28:36:ed:31:56:57:58:22:d1:61:
e9:8b:7e:15:bc:6a:07:04:d2:45:e1:60:77:a4:67:b3:53:86:
56:d0:34:1d:46:55:ca:1e:ad:db:99:15:47:d6:36:20:7a:f9:
8b:e9:19:1d:d5:05:c9:ca:6d:6c:26:cf:96:0b:c8:1a:da:ce:
3c:cc:19:d9:7d:09:8c:ec:54:cb:02:55:3c:3e:51:1f:dd:a8:
70:df:99:5a:1a:ef:40:2f:e2:f4:33:5d:bd:9f:91:10:4c:fa:
cd:8f:88:9d:09:73:99:8e:06:5e:17:3b:8c:c3:31:29:e2:8e:
c2:ed:1e:67:cb:fc:c7:56:80:8e:c3:10:67:5c:51:d7:cc:77:
52:59:b4:c6:d3:8b:5f:cb:65:c0:15:81:44:85:5e:73:e5:25:
3c:29:bf:08:fa:a7:fa:ea:9b:80:71:d4:43:f5:66:4f:06:2f:
c6:9c:a1:41:a4:2d:33:d3:ee:d0:07:5b:04:a4:8b:1b:47:e0:
53:29:45:d6:76:7e:3c:c5:40:6a:69:6e:48:36:59:27:f9:1e:
27:0f:cc:40:04:b6:28:e9:48:a3:c4:68:97:56:86:f6:ac:0a:
d9:32:a2:fa:62:5a:1a:80:08:75:90:34:bc:47:9e:42:44:d1:
4d:64:7c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:51:18 2026 by rpki-client