Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/3138352e3235312e31392e302f32342d3234203d3e20323036303932.roa
File: 3138352e3235312e31392e302f32342d3234203d3e20323036303932.roa (raw, json)
Hash identifier: LdHKLOhJhzl41We9BNwjvOcsg2A+zhlEI37K8ifS5/I=
Subject key identifier: 35:7F:58:3D:F5:23:83:A1:2F:13:16:32:83:E0:C2:12:85:D8:2D:09
Certificate issuer: /CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Certificate serial: 227B14245E6EFC5DF17C0FE4797D652171FD2F9D
Authority key identifier: FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/3138352e3235312e31392e302f32342d3234203d3e20323036303932.roa
Signing time: Mon 09 Feb 2026 18:55:38 +0000
ROA not before: Mon 09 Feb 2026 18:50:38 +0000
ROA not after: Mon 08 Feb 2027 18:55:38 +0000
asID: 206092
IP address blocks: 185.251.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl
rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:47:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:7b:14:24:5e:6e:fc:5d:f1:7c:0f:e4:79:7d:65:21:71:fd:2f:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Validity
Not Before: Feb 9 18:50:38 2026 GMT
Not After : Feb 8 18:55:38 2027 GMT
Subject: CN=357F583DF52383A12F13163283E0C21285D82D09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b1:fd:0c:d9:cf:50:8a:6b:23:ae:8c:d9:d9:
07:50:11:6a:c2:10:de:9b:74:6c:2c:34:52:81:fc:
38:7b:13:06:0a:e3:3a:27:a2:f1:6d:cb:c1:1f:0f:
c0:45:7e:b7:3a:5e:5e:ec:2b:6b:10:fd:5b:cf:19:
e8:04:12:dc:75:e5:26:21:0d:7b:4c:23:63:ef:11:
87:62:64:98:6c:03:1f:23:5e:24:36:04:03:e1:18:
51:8f:d2:3c:2c:79:9c:07:fd:fd:6b:ef:20:34:dd:
c3:b4:39:a7:9b:73:6a:e5:ec:31:0c:a1:de:f2:b0:
6e:d4:44:4b:1d:ca:4a:99:bd:f2:db:ed:93:b0:f1:
b0:39:91:e4:0c:66:4a:fa:19:4a:c0:ae:44:ea:fe:
79:86:cb:b1:d5:cc:57:7b:8f:f1:c6:c7:e6:cf:17:
6a:a0:25:76:cd:1a:2c:1d:15:31:45:ca:e2:0b:f7:
b8:73:9d:9a:eb:e9:c7:d0:28:4b:dd:97:25:56:41:
16:3c:99:ec:9f:04:9a:82:34:0c:d8:e1:d2:17:dd:
89:a1:1b:29:1b:88:2f:5f:c5:56:ec:27:b4:99:98:
80:95:82:9f:46:6b:d7:13:d4:06:a7:44:53:2f:d0:
38:7a:a5:ab:c3:20:b1:9a:88:e1:38:7d:47:3f:41:
b0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:7F:58:3D:F5:23:83:A1:2F:13:16:32:83:E0:C2:12:85:D8:2D:09
X509v3 Authority Key Identifier:
keyid:FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/3138352e3235312e31392e302f32342d3234203d3e20323036303932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.19.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:c0:f9:04:00:3d:e4:e2:6f:76:2f:3e:92:05:57:a5:ad:fa:
57:f2:20:a5:96:ca:91:ef:b2:23:35:87:88:c8:7a:20:e5:f4:
3f:03:00:d6:ea:2c:23:4c:ac:fe:f0:cf:38:c0:01:ae:f5:dd:
34:21:12:7c:62:07:21:3a:91:f1:d1:ee:e4:93:fe:9d:06:49:
f9:69:72:0f:35:7f:e2:f2:5e:3f:ea:d6:da:68:af:e2:3d:c8:
b7:2e:49:8b:e9:20:19:fd:fc:f0:c0:81:cc:eb:92:10:a3:f2:
51:06:de:5b:65:63:76:b6:91:de:57:0e:28:f9:b6:e2:5b:05:
a0:46:2e:ff:13:68:51:1e:78:47:30:10:07:5c:e5:15:25:fb:
b2:e3:3f:e8:a0:a6:eb:65:43:a1:a3:2a:d0:55:35:13:f4:54:
34:c9:9a:80:90:dd:23:b9:bc:42:03:9e:96:a7:53:c1:8e:80:
97:61:de:2b:3c:eb:f9:8a:60:35:32:e3:8b:d4:81:83:b0:87:
bc:b3:e2:cd:eb:f1:f9:44:96:57:3d:ac:d8:4a:32:d9:42:0c:
c0:e5:e1:e7:e0:eb:4f:24:0c:69:f5:47:7e:37:72:04:b9:e9:
5a:ea:1a:16:39:ca:b1:1b:28:00:2e:d9:fa:3f:19:d6:f8:f3:
b1:5f:28:a6
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUInsUJF5u/F3xfA/keX1lIXH9L50wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZmY0MjZmMTliYTY3YmM4OWRlNWFlNmRmNDg3YzFjOGMx
ZTc1MmUyNzAeFw0yNjAyMDkxODUwMzhaFw0yNzAyMDgxODU1MzhaMDMxMTAvBgNV
BAMTKDM1N0Y1ODNERjUyMzgzQTEyRjEzMTYzMjgzRTBDMjEyODVEODJEMDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfsf0M2c9QimsjrozZ2QdQEWrC
EN6bdGwsNFKB/Dh7EwYK4zonovFty8EfD8BFfrc6Xl7sK2sQ/VvPGegEEtx15SYh
DXtMI2PvEYdiZJhsAx8jXiQ2BAPhGFGP0jwseZwH/f1r7yA03cO0Oaebc2rl7DEM
od7ysG7UREsdykqZvfLb7ZOw8bA5keQMZkr6GUrArkTq/nmGy7HVzFd7j/HGx+bP
F2qgJXbNGiwdFTFFyuIL97hznZrr6cfQKEvdlyVWQRY8meyfBJqCNAzY4dIX3Ymh
GykbiC9fxVbsJ7SZmICVgp9Ga9cT1AanRFMv0Dh6pavDILGaiOE4fUc/QbBlAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUNX9YPfUjg6EvExYyg+DCEoXYLQkwHwYDVR0j
BBgwFoAU/0JvGbpnvIneWubfSHwcjB51LicwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDY4YjA4MWUtYmE5My00NjVmLTliNmUtN2ZiZDYzYmRm
ZjYzLzAvRkY0MjZGMTlCQTY3QkM4OURFNUFFNkRGNDg3QzFDOEMxRTc1MkUyNy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL18wSnZHYnBudkluZVd1YmZTSHdjakI1
MUxpYy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDY4YjA4MWUt
YmE5My00NjVmLTliNmUtN2ZiZDYzYmRmZjYzLzAvMzEzODM1MmUzMjM1MzEyZTMx
MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzYzMDM5MzIucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAC5+xMwDQYJKoZIhvcNAQELBQADggEBAGvA+QQAPeTib3YvPpIFV6Wt+lfyIKWW
ypHvsiM1h4jIeiDl9D8DANbqLCNMrP7wzzjAAa713TQhEnxiByE6kfHR7uST/p0G
Sflpcg81f+LyXj/q1tpor+I9yLcuSYvpIBn9/PDAgczrkhCj8lEG3ltlY3a2kd5X
Dij5tuJbBaBGLv8TaFEeeEcwEAdc5RUl+7LjP+igputlQ6GjKtBVNRP0VDTJmoCQ
3SO5vEIDnpanU8GOgJdh3is86/mKYDUy44vUgYOwh7yz4s3r8flEllc9rNhKMtlC
DMDl4efg608kDGn1R343cgS56VrqGhY5yrEbKAAu2fo/Gdb487FfKKY=
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:00:47 2026 by rpki-client