Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3138352e3231302e3136382e302f32342d3234203d3e20383334.roa
File: 3138352e3231302e3136382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: PO6lININeTzy9+OgxiLUcDdp0+yx5XkE6ZtQ5rmO+Oc=
Subject key identifier: A7:9E:82:C9:9D:87:05:23:1C:19:2B:CD:32:D5:71:2D:38:E2:FA:F8
Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial: 7BF2637F71E8607CA982AF5B3C7B095152C4DA6B
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3138352e3231302e3136382e302f32342d3234203d3e20383334.roa
Signing time: Thu 16 Apr 2026 09:32:42 +0000
ROA not before: Thu 16 Apr 2026 09:27:42 +0000
ROA not after: Thu 15 Apr 2027 09:32:42 +0000
asID: 834
IP address blocks: 185.210.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:f2:63:7f:71:e8:60:7c:a9:82:af:5b:3c:7b:09:51:52:c4:da:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Validity
Not Before: Apr 16 09:27:42 2026 GMT
Not After : Apr 15 09:32:42 2027 GMT
Subject: CN=A79E82C99D8705231C192BCD32D5712D38E2FAF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3f:1f:df:32:72:b2:65:29:12:b7:73:d5:d7:
4a:64:90:9c:0e:d8:12:df:a1:55:49:68:3d:71:9e:
78:e8:0b:2e:62:cc:b4:79:0c:cf:5d:62:58:8e:14:
a0:cd:a4:a5:9b:7d:e1:9c:3e:68:16:85:30:8d:3a:
ae:df:73:83:9c:8a:78:61:80:64:d6:87:71:80:40:
ae:bb:0d:4f:42:80:de:0f:63:df:70:46:5b:60:94:
30:73:fa:39:dd:fa:7e:bc:ae:e7:14:db:e3:58:ba:
77:64:00:a2:d8:db:1f:0e:b4:fc:44:95:a8:85:60:
fc:84:86:01:fa:f2:f4:86:88:9a:a9:57:82:f2:43:
a6:69:a7:6b:3b:e0:68:7b:23:ac:7f:e6:a5:06:25:
d2:2b:bb:04:5d:ba:9c:27:ac:6a:88:d9:ca:47:8a:
6d:d8:5f:d6:8f:60:ff:50:3d:11:48:df:10:eb:9a:
3c:db:d5:48:0e:f4:08:36:42:a8:9d:2c:13:a3:6c:
7d:fb:22:13:3d:3b:11:58:9b:b4:3b:74:2c:91:7c:
b8:1c:42:e1:d2:95:1f:d7:d4:b8:c1:1f:54:6f:9a:
f5:80:78:a4:9d:52:f2:62:a6:31:37:34:30:72:d6:
25:af:6f:04:86:a3:fd:1a:d9:53:f6:07:4e:2f:45:
db:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:9E:82:C9:9D:87:05:23:1C:19:2B:CD:32:D5:71:2D:38:E2:FA:F8
X509v3 Authority Key Identifier:
keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/3138352e3231302e3136382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.168.0/24
Signature Algorithm: sha256WithRSAEncryption
45:b4:2d:b1:f2:86:c1:01:f2:f4:88:6c:69:68:7f:4f:3d:38:
f4:5b:19:fb:0a:df:41:9b:7d:7d:0a:ac:31:c1:09:03:e4:bd:
b6:cc:ca:77:81:99:65:46:38:93:9c:97:15:52:d8:25:f1:50:
a6:87:08:3f:78:1c:2b:4e:e4:7f:c5:cb:02:6f:b0:04:68:c5:
a2:5d:3d:23:c8:18:82:05:14:41:f1:57:12:76:f5:6e:67:43:
9b:30:b3:d2:d8:0b:a7:f9:36:c9:fb:99:62:87:06:09:95:58:
00:25:ae:77:96:68:02:3d:ca:41:08:63:25:8a:8e:7e:af:2a:
db:b6:0f:13:f4:de:b7:6b:da:02:9e:f1:aa:44:e6:2d:6f:91:
f3:50:e7:97:9f:a5:67:3f:90:4d:3e:9c:e1:7c:3f:23:a7:c8:
28:53:1c:d1:f8:99:28:36:b7:24:da:0e:8a:81:37:57:53:cf:
bf:8c:0d:df:a3:58:f2:f7:b6:a6:25:a8:3d:3d:fa:c0:71:d1:
25:11:ab:a6:98:e9:6d:44:1b:02:28:76:c0:f3:3d:eb:b4:cf:
5b:a3:32:b3:2a:0b:94:ce:75:8d:20:7a:e2:d8:6e:21:60:59:
8e:25:4b:c6:24:ef:29:0d:da:27:1a:07:55:0b:54:b2:95:4e:
95:22:b2:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:41:22 2026 by rpki-client