Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/3138352e3139302e3232382e302f32332d3234203d3e203230343733.roa
File: 3138352e3139302e3232382e302f32332d3234203d3e203230343733.roa (raw, json)
Hash identifier: sSjQo0gwcaB1VwvZuBlzZHXLcXQx3UMY0dQE8gGvjAA=
Subject key identifier: 75:40:12:56:84:D8:8F:35:30:C6:E1:9F:C4:B4:31:2E:BA:2D:86:9B
Certificate issuer: /CN=78d65d4a22df705beed7b3432fbe48a356597724
Certificate serial: 571D74946DA3A9B138D9CCA57102DF24560F0951
Authority key identifier: 78:D6:5D:4A:22:DF:70:5B:EE:D7:B3:43:2F:BE:48:A3:56:59:77:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/3138352e3139302e3232382e302f32332d3234203d3e203230343733.roa
Signing time: Mon 27 Jul 2026 08:50:08 +0000
ROA not before: Mon 27 Jul 2026 08:45:08 +0000
ROA not after: Mon 26 Jul 2027 08:50:08 +0000
asID: 20473
IP address blocks: 185.190.228.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.crl
rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft
rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 06:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:1d:74:94:6d:a3:a9:b1:38:d9:cc:a5:71:02:df:24:56:0f:09:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78d65d4a22df705beed7b3432fbe48a356597724
Validity
Not Before: Jul 27 08:45:08 2026 GMT
Not After : Jul 26 08:50:08 2027 GMT
Subject: CN=7540125684D88F3530C6E19FC4B4312EBA2D869B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2d:e5:e5:50:c6:6a:12:57:bd:60:5b:ac:30:
b6:b7:f7:e1:09:11:65:61:e6:c0:32:4d:1a:09:78:
20:dd:a0:81:d0:f2:13:09:de:2f:4a:57:40:c8:87:
33:53:3f:68:0f:ac:36:3e:6e:83:be:d5:08:42:8b:
a0:56:50:44:58:f4:22:48:6e:d2:42:a8:84:fb:c1:
a0:59:17:91:f7:b0:4b:43:26:b6:0d:05:2d:4e:38:
0f:b3:21:f9:5f:81:d3:08:c0:5b:ca:e3:a8:bc:0f:
b3:fd:62:ff:9b:a5:ff:de:f0:0e:5e:85:d7:65:09:
ca:03:10:bf:f2:11:a2:41:b8:e0:d6:ec:e1:c0:f6:
0e:86:9a:73:a1:84:ce:ab:dc:28:91:78:2b:17:a3:
89:af:dd:e4:b4:2c:72:34:8f:74:92:65:4a:5a:f4:
cc:66:94:50:64:32:9a:4f:a5:3d:b1:a1:5d:1f:18:
2c:39:65:f9:56:c7:81:e1:c5:19:89:91:2d:41:7a:
2a:9b:f4:55:83:fe:40:d8:d8:92:fc:0b:0e:e2:2c:
c3:78:8a:96:9c:4f:bd:c9:c2:97:74:f2:8d:ac:88:
38:cd:d7:a3:22:e2:d2:69:55:af:c8:34:29:f3:ac:
c8:a4:f4:0a:d5:3b:f3:8f:2f:f1:54:ee:b9:67:be:
83:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:40:12:56:84:D8:8F:35:30:C6:E1:9F:C4:B4:31:2E:BA:2D:86:9B
X509v3 Authority Key Identifier:
keyid:78:D6:5D:4A:22:DF:70:5B:EE:D7:B3:43:2F:BE:48:A3:56:59:77:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/3138352e3139302e3232382e302f32332d3234203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.228.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:fb:ba:b4:10:02:bf:f3:d4:d4:fb:99:03:2f:3b:6c:99:7a:
c3:14:53:c3:b0:9d:05:6b:59:ab:25:7a:f9:55:01:d1:e3:31:
84:13:97:a5:8f:6b:17:f8:e5:b1:81:e6:39:2c:90:92:1d:57:
a3:5b:d7:c9:f0:5a:73:73:74:6c:d8:a0:e9:4f:a1:e4:12:c9:
80:15:97:9a:8f:d7:80:7a:6e:fe:69:f1:4e:5b:28:6e:21:0f:
67:17:1a:45:af:e9:cc:95:64:4b:7e:68:c7:91:12:4c:b6:bd:
3d:2a:0d:56:6d:dc:ea:5d:8b:fa:f3:ca:42:92:1b:4d:ff:55:
f4:f4:77:7b:3e:57:42:e9:51:8f:c0:ae:55:8b:c6:c3:7e:df:
88:73:a3:3b:e3:e9:fa:1a:08:91:70:d9:d8:4b:68:15:61:25:
9b:5a:e3:86:be:36:98:b2:7b:0f:76:c6:e2:63:a0:19:68:98:
7b:19:f3:38:d9:63:7e:48:9f:fa:6d:43:07:cd:6d:c9:99:46:
0a:d0:fe:8a:98:ae:ca:6a:a4:81:fe:84:83:05:19:ec:9c:c1:
b4:0c:99:75:00:1e:8a:ca:97:bc:28:62:8a:dd:27:9b:28:f2:
b6:bb:a0:81:80:ee:8d:04:51:63:40:a2:23:63:b2:d5:77:8e:
f9:4b:68:82
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUVx10lG2jqbE42cylcQLfJFYPCVEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzhkNjVkNGEyMmRmNzA1YmVlZDdiMzQzMmZiZTQ4YTM1
NjU5NzcyNDAeFw0yNjA3MjcwODQ1MDhaFw0yNzA3MjYwODUwMDhaMDMxMTAvBgNV
BAMTKDc1NDAxMjU2ODREODhGMzUzMEM2RTE5RkM0QjQzMTJFQkEyRDg2OUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8LeXlUMZqEle9YFusMLa39+EJ
EWVh5sAyTRoJeCDdoIHQ8hMJ3i9KV0DIhzNTP2gPrDY+boO+1QhCi6BWUERY9CJI
btJCqIT7waBZF5H3sEtDJrYNBS1OOA+zIflfgdMIwFvK46i8D7P9Yv+bpf/e8A5e
hddlCcoDEL/yEaJBuODW7OHA9g6GmnOhhM6r3CiReCsXo4mv3eS0LHI0j3SSZUpa
9MxmlFBkMppPpT2xoV0fGCw5ZflWx4HhxRmJkS1Beiqb9FWD/kDY2JL8Cw7iLMN4
ipacT73Jwpd08o2siDjN16Mi4tJpVa/INCnzrMik9ArVO/OPL/FU7rlnvoN9AgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUdUASVoTYjzUwxuGfxLQxLrothpswHwYDVR0j
BBgwFoAUeNZdSiLfcFvu17NDL75Io1ZZdyQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODkyNWFkMTUtYWYwYi00NWNkLWI4ODMtMWEwNThmYTBl
YmExLzAvNzhENjVENEEyMkRGNzA1QkVFRDdCMzQzMkZCRTQ4QTM1NjU5NzcyNC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VOWmRTaUxmY0Z2dTE3TkRMNzVJbzFa
WmR5US5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODkyNWFkMTUt
YWYwYi00NWNkLWI4ODMtMWEwNThmYTBlYmExLzAvMzEzODM1MmUzMTM5MzAyZTMy
MzIzODJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMyMzAzNDM3MzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAG5vuQwDQYJKoZIhvcNAQELBQADggEBAIv7urQQAr/z1NT7mQMvO2yZesMUU8Ow
nQVrWaslevlVAdHjMYQTl6WPaxf45bGB5jkskJIdV6Nb18nwWnNzdGzYoOlPoeQS
yYAVl5qP14B6bv5p8U5bKG4hD2cXGkWv6cyVZEt+aMeREky2vT0qDVZt3Opdi/rz
ykKSG03/VfT0d3s+V0LpUY/ArlWLxsN+34hzozvj6foaCJFw2dhLaBVhJZta44a+
Npiyew92xuJjoBlomHsZ8zjZY35In/ptQwfNbcmZRgrQ/oqYrspqpIH+hIMFGeyc
wbQMmXUAHorKl7woYordJ5so8ra7oIGA7o0EUWNAoiNjstV3jvlLaII=
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:06:33 2026 by rpki-client