Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/25c81eb0-1521-4005-86c8-332ef2c869cb/0/3138352e3235312e3134342e302f32322d3232203d3e20333937343233.roa
File: 3138352e3235312e3134342e302f32322d3232203d3e20333937343233.roa (raw, json)
Hash identifier: EujYDAEvWheVUX+5zyMLxg56IY6SlTmfDh+zV3yAF08=
Subject key identifier: 68:4A:0C:89:3A:6E:FE:EF:41:73:E8:45:20:F2:94:BB:80:AB:9D:39
Certificate issuer: /CN=a65febc1c46adfa57072286562c5b598165c67ee
Certificate serial: 1A674FA1E91978593C7D866B1B08FCB82589BEE8
Authority key identifier: A6:5F:EB:C1:C4:6A:DF:A5:70:72:28:65:62:C5:B5:98:16:5C:67:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pl_rwcRq36VwcihlYsW1mBZcZ-4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/25c81eb0-1521-4005-86c8-332ef2c869cb/0/3138352e3235312e3134342e302f32322d3232203d3e20333937343233.roa
Signing time: Wed 14 Oct 2026 22:01:28 +0000
ROA not before: Wed 14 Oct 2026 21:56:28 +0000
ROA not after: Wed 13 Oct 2027 22:01:28 +0000
asID: 397423
IP address blocks: 185.251.144.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/25c81eb0-1521-4005-86c8-332ef2c869cb/0/A65FEBC1C46ADFA57072286562C5B598165C67EE.crl
rsync://rsync.paas.rpki.ripe.net/repository/25c81eb0-1521-4005-86c8-332ef2c869cb/0/A65FEBC1C46ADFA57072286562C5B598165C67EE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pl_rwcRq36VwcihlYsW1mBZcZ-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:67:4f:a1:e9:19:78:59:3c:7d:86:6b:1b:08:fc:b8:25:89:be:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a65febc1c46adfa57072286562c5b598165c67ee
Validity
Not Before: Oct 14 21:56:28 2026 GMT
Not After : Oct 13 22:01:28 2027 GMT
Subject: CN=684A0C893A6EFEEF4173E84520F294BB80AB9D39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0c:29:e0:ea:33:77:f6:74:67:8f:c8:15:4f:
62:10:dd:cc:75:ff:6f:fb:91:74:03:68:d2:18:d4:
37:66:28:a3:9e:66:5b:13:71:0d:34:cb:52:9c:71:
93:fa:42:08:12:66:49:8e:67:62:4e:ea:18:ea:1f:
fa:12:d3:a5:ab:30:2d:14:02:0d:9a:f4:b0:04:dc:
01:95:02:57:0a:61:6d:cb:32:3e:5d:af:2f:e1:d1:
d7:ef:f5:42:32:c8:a6:11:56:66:6b:d8:29:a9:2b:
a6:7d:40:c2:c9:7c:a5:3b:f1:8e:03:38:4d:b4:25:
7f:80:87:4d:66:61:c6:dd:d5:86:77:0a:7f:ce:8f:
3b:26:bf:7a:97:be:87:79:61:fd:08:85:1d:72:da:
77:6c:55:fc:19:14:fa:34:63:fa:a6:75:a2:17:23:
0c:a8:5c:33:16:fe:9c:b6:ad:22:08:d2:43:fe:cf:
9b:8f:0d:ba:b9:b9:be:58:6e:4d:a4:02:f9:44:54:
59:8b:56:7d:33:7e:0b:7b:bf:ab:e9:88:1d:77:69:
d9:85:68:b4:9a:42:bc:e1:c4:43:38:29:72:b9:24:
74:27:52:13:fa:f2:f3:ce:12:3d:87:d9:9a:f2:b0:
97:c3:ac:95:da:c1:a3:71:c2:20:19:3f:ef:8f:7d:
4d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:4A:0C:89:3A:6E:FE:EF:41:73:E8:45:20:F2:94:BB:80:AB:9D:39
X509v3 Authority Key Identifier:
keyid:A6:5F:EB:C1:C4:6A:DF:A5:70:72:28:65:62:C5:B5:98:16:5C:67:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/25c81eb0-1521-4005-86c8-332ef2c869cb/0/A65FEBC1C46ADFA57072286562C5B598165C67EE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pl_rwcRq36VwcihlYsW1mBZcZ-4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/25c81eb0-1521-4005-86c8-332ef2c869cb/0/3138352e3235312e3134342e302f32322d3232203d3e20333937343233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.144.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:e1:1e:98:34:f5:00:b0:21:ef:3e:09:50:0f:44:72:00:84:
d8:d5:be:4d:f0:51:c9:53:88:72:fe:d6:47:66:d5:a4:b8:4a:
9e:0b:12:c7:ab:21:08:99:dc:6e:88:38:5e:df:07:66:4d:14:
38:5d:fc:7a:40:10:d6:6e:c4:b0:ba:14:a1:17:4d:46:83:91:
6d:27:b3:31:b8:d3:da:49:71:60:66:da:26:3d:84:a0:8a:74:
21:e5:fa:45:b7:24:13:03:3d:46:f5:0e:e4:24:77:e6:80:e6:
62:ab:84:e3:8e:8b:c8:3d:07:3c:e1:c1:10:2c:8a:bb:3c:e5:
6d:8d:5b:72:29:29:aa:ba:86:a1:e6:15:58:b1:c2:66:d9:b3:
12:b2:a6:ef:2e:48:f8:13:3f:a0:eb:ce:3b:20:b3:ac:02:c5:
77:c4:59:83:06:56:80:38:e9:16:de:82:38:d5:96:9a:8f:27:
91:f1:81:73:ab:9d:69:3f:c7:d1:03:fb:92:f6:d3:e2:29:9b:
60:30:16:82:4a:45:55:2d:19:27:d6:f1:41:af:95:79:ee:9b:
8f:87:10:03:3c:49:4b:92:da:5b:c3:53:5f:10:2e:8e:50:a4:
56:8c:77:b8:ef:db:cc:00:a1:08:3e:fb:2a:8d:26:db:1d:28:
11:d8:06:13
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUGmdPoekZeFk8fYZrGwj8uCWJvugwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTY1ZmViYzFjNDZhZGZhNTcwNzIyODY1NjJjNWI1OTgx
NjVjNjdlZTAeFw0yNjEwMTQyMTU2MjhaFw0yNzEwMTMyMjAxMjhaMDMxMTAvBgNV
BAMTKDY4NEEwQzg5M0E2RUZFRUY0MTczRTg0NTIwRjI5NEJCODBBQjlEMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGDCng6jN39nRnj8gVT2IQ3cx1
/2/7kXQDaNIY1DdmKKOeZlsTcQ00y1KccZP6QggSZkmOZ2JO6hjqH/oS06WrMC0U
Ag2a9LAE3AGVAlcKYW3LMj5dry/h0dfv9UIyyKYRVmZr2CmpK6Z9QMLJfKU78Y4D
OE20JX+Ah01mYcbd1YZ3Cn/Ojzsmv3qXvod5Yf0IhR1y2ndsVfwZFPo0Y/qmdaIX
IwyoXDMW/py2rSII0kP+z5uPDbq5ub5Ybk2kAvlEVFmLVn0zfgt7v6vpiB13admF
aLSaQrzhxEM4KXK5JHQnUhP68vPOEj2H2ZrysJfDrJXawaNxwiAZP++PfU2dAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUaEoMiTpu/u9Bc+hFIPKUu4CrnTkwHwYDVR0j
BBgwFoAUpl/rwcRq36VwcihlYsW1mBZcZ+4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjVjODFlYjAtMTUyMS00MDA1LTg2YzgtMzMyZWYyYzg2
OWNiLzAvQTY1RkVCQzFDNDZBREZBNTcwNzIyODY1NjJDNUI1OTgxNjVDNjdFRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3BsX3J3Y1JxMzZWd2NpaGxZc1cxbUJa
Y1otNC5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMjVjODFlYjAt
MTUyMS00MDA1LTg2YzgtMzMyZWYyYzg2OWNiLzAvMzEzODM1MmUzMjM1MzEyZTMx
MzQzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMzMzkzNzM0MzIzMy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEArn7kDANBgkqhkiG9w0BAQsFAAOCAQEAG+EemDT1ALAh7z4JUA9EcgCE2NW+
TfBRyVOIcv7WR2bVpLhKngsSx6shCJncbog4Xt8HZk0UOF38ekAQ1m7EsLoUoRdN
RoORbSezMbjT2klxYGbaJj2EoIp0IeX6RbckEwM9RvUO5CR35oDmYquE446LyD0H
POHBECyKuzzlbY1bcikpqrqGoeYVWLHCZtmzErKm7y5I+BM/oOvOOyCzrALFd8RZ
gwZWgDjpFt6CONWWmo8nkfGBc6udaT/H0QP7kvbT4imbYDAWgkpFVS0ZJ9bxQa+V
ee6bj4cQAzxJS5LaW8NTXxAujlCkVox3uO/bzAChCD77Ko0m2x0oEdgGEw==
-----END CERTIFICATE-----
Generated at Thu Nov 5 04:56:45 2026 by rpki-client