Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/3138382e3234342e3131332e302f32342d3234203d3e20323131343339.roa
File: 3138382e3234342e3131332e302f32342d3234203d3e20323131343339.roa (raw, json)
Hash identifier: lzKGUq9e6WEOxjU9fEiZs+XvjPLc/qut/jPBXboiWgc=
Subject key identifier: E6:A3:10:09:19:7D:CE:BB:E7:88:08:28:79:72:F8:77:B2:8A:9A:62
Certificate issuer: /CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Certificate serial: 4FA3222BF8E00DD7DB4FE9829F91E15461B8FA00
Authority key identifier: FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/3138382e3234342e3131332e302f32342d3234203d3e20323131343339.roa
Signing time: Mon 09 Feb 2026 18:55:37 +0000
ROA not before: Mon 09 Feb 2026 18:50:37 +0000
ROA not after: Mon 08 Feb 2027 18:55:37 +0000
asID: 211439
IP address blocks: 188.244.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl
rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:a3:22:2b:f8:e0:0d:d7:db:4f:e9:82:9f:91:e1:54:61:b8:fa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Validity
Not Before: Feb 9 18:50:37 2026 GMT
Not After : Feb 8 18:55:37 2027 GMT
Subject: CN=E6A31009197DCEBBE78808287972F877B28A9A62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:42:a9:46:38:20:8b:a1:94:57:ba:7e:fb:9d:
2b:03:2e:bd:0b:78:a2:05:32:4b:db:f3:2a:dc:0d:
a5:cd:ea:ae:91:7e:a3:ab:ce:ba:cc:7f:4d:c0:23:
f2:aa:a3:30:63:08:ac:c4:1d:de:3a:88:4f:ae:f0:
54:2f:e6:4f:82:d6:93:25:c7:9f:4f:b7:2c:13:28:
7f:05:0e:6b:ed:5a:e6:c4:78:23:16:00:3f:5b:15:
60:7d:25:50:7f:80:d5:4a:8c:7c:70:60:0d:81:84:
6f:41:87:3f:6b:82:7e:2d:43:fd:50:82:9f:8e:95:
ff:65:df:b8:c2:75:ce:b0:d3:22:e6:ab:2f:60:c9:
a1:8c:1c:4e:bc:82:7f:18:13:0a:9d:c4:03:4b:29:
c0:c2:c3:0d:79:66:62:f0:27:be:0c:70:5b:e6:ea:
2c:75:7b:7f:dd:ce:df:68:b8:66:eb:3a:fa:2a:6b:
78:2b:e0:6c:b6:29:73:85:b2:27:bf:50:68:d5:7e:
f3:1b:87:60:fd:27:74:fb:60:8f:78:97:df:36:2b:
1c:6d:18:cc:1d:43:6d:a8:28:aa:58:c8:d6:56:62:
a0:54:8c:8a:eb:f4:d4:1f:96:16:07:5a:43:f6:67:
e5:d3:ea:40:84:d5:de:6c:74:4f:c6:7e:f1:9b:24:
d2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A3:10:09:19:7D:CE:BB:E7:88:08:28:79:72:F8:77:B2:8A:9A:62
X509v3 Authority Key Identifier:
keyid:FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/3138382e3234342e3131332e302f32342d3234203d3e20323131343339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.244.113.0/24
Signature Algorithm: sha256WithRSAEncryption
09:03:35:cf:db:98:58:ae:b2:57:8c:0d:cc:d5:6a:46:3a:c4:
70:14:3e:69:07:5d:b8:18:f0:31:d8:27:80:0a:32:36:5d:ea:
b9:f1:e1:50:4c:55:3e:68:f3:75:5c:c6:39:bb:5c:cd:5c:90:
21:fb:38:a9:57:8c:09:ce:ea:6a:28:dd:f6:2b:36:26:9c:ae:
f5:06:cb:fb:b0:d9:37:f2:de:57:0a:26:4d:08:3e:e2:3d:e1:
c1:20:ac:2a:c3:53:b8:c6:b2:e9:0d:a9:a1:2d:fe:89:40:63:
1b:20:8a:89:70:13:13:ec:ad:d7:9a:98:be:5c:71:dc:ff:16:
43:ab:bd:b8:12:3e:46:f8:cf:d3:9e:e9:7a:10:3a:35:60:ab:
72:c8:b4:9d:10:17:79:5c:ad:2a:49:46:ac:2d:ee:7c:5d:ad:
d6:e7:24:df:ad:89:9b:45:3b:eb:6b:e6:2d:91:1f:0e:e8:e5:
d9:45:8c:6f:55:de:ec:28:bf:ed:07:89:30:86:bb:43:58:7e:
bd:13:34:9c:e3:de:64:b1:df:e7:32:3d:56:58:4d:e3:46:22:
bf:3d:e1:40:1a:6b:0f:15:f7:a8:c7:66:c8:65:cc:ba:dd:b7:
c2:7f:a3:5d:77:bf:af:eb:34:73:90:25:47:7a:04:a5:b2:d0:
83:ed:01:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:41:21 2026 by rpki-client