Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3138352e33392e3138302e302f32342d3234203d3e203438353932.roa
File: 3138352e33392e3138302e302f32342d3234203d3e203438353932.roa (raw, json)
Hash identifier: ZWyLSTcE9mAQsDVjLP4sbforwwRF0gy7YQkGUCm2B9s=
Subject key identifier: BA:8C:4F:D2:7B:AC:B1:E2:B1:DA:3C:B2:D2:EB:6C:CF:9A:DF:BB:3B
Certificate issuer: /CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Certificate serial: 2383129BD9062F1C24BE6077093BC7EDB7EBD7D0
Authority key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3138352e33392e3138302e302f32342d3234203d3e203438353932.roa
Signing time: Tue 24 Feb 2026 06:55:40 +0000
ROA not before: Tue 24 Feb 2026 06:50:40 +0000
ROA not after: Tue 23 Feb 2027 06:55:40 +0000
asID: 48592
IP address blocks: 185.39.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:09:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:83:12:9b:d9:06:2f:1c:24:be:60:77:09:3b:c7:ed:b7:eb:d7:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Validity
Not Before: Feb 24 06:50:40 2026 GMT
Not After : Feb 23 06:55:40 2027 GMT
Subject: CN=BA8C4FD27BACB1E2B1DA3CB2D2EB6CCF9ADFBB3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:18:1f:fc:ec:36:aa:c8:5a:5d:16:52:4e:a5:
fb:b1:30:2d:ce:6f:fd:55:a9:5b:7f:a3:a5:87:7e:
e9:b9:d6:45:81:e0:51:fd:6c:e8:19:47:40:59:3d:
28:60:d1:0d:f4:e2:bd:29:3a:05:d3:c5:97:39:e5:
c7:9e:02:74:52:ec:56:55:87:0c:05:60:74:52:c8:
3f:11:66:8b:07:2e:92:b9:41:23:b0:f5:cf:b1:8a:
2f:a2:90:c6:03:11:9d:a7:48:0d:0a:fb:9b:dd:99:
4d:71:e4:ed:67:24:8a:ae:85:f5:3c:c5:97:97:85:
46:67:2b:97:9a:05:f8:4a:40:63:d6:b2:f7:b7:52:
d7:92:76:95:26:2a:4e:05:9a:2e:9f:99:85:b9:c8:
18:f9:70:45:fe:73:68:94:3f:95:0c:95:48:54:bb:
b6:41:ce:ac:13:97:e3:d1:0d:06:8c:e3:7a:84:a3:
5b:ab:51:6f:18:15:1b:15:3e:be:33:0d:01:b2:b8:
d8:c0:91:bf:5f:a5:8d:ef:17:70:5f:ff:e0:24:b3:
98:d8:62:c8:c8:11:27:bf:40:fb:8f:44:36:c8:80:
01:82:84:d0:0e:ec:61:23:3c:8f:07:93:4d:15:66:
c2:cc:5d:cf:8e:8e:af:01:d0:dc:4a:e7:40:9d:9d:
da:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:8C:4F:D2:7B:AC:B1:E2:B1:DA:3C:B2:D2:EB:6C:CF:9A:DF:BB:3B
X509v3 Authority Key Identifier:
keyid:45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3138352e33392e3138302e302f32342d3234203d3e203438353932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.39.180.0/24
Signature Algorithm: sha256WithRSAEncryption
87:48:f7:75:d5:c3:1f:52:ce:71:4a:49:33:1a:e5:d0:3f:0b:
5e:c1:b3:fb:76:51:08:2a:f0:24:93:7e:bf:2e:0b:37:1b:e8:
24:d5:5e:0f:c0:6a:35:59:fb:f9:c1:cd:15:ca:fc:f0:24:75:
72:29:b5:eb:2f:76:9a:fe:11:d1:bd:0c:c6:05:90:3e:ab:9e:
c7:aa:dd:1c:fb:05:f6:79:63:a2:9d:e4:3f:a9:85:fc:c5:2d:
87:19:3d:63:a0:24:ea:b0:d2:83:ed:e9:60:53:4f:e3:f3:f4:
14:a7:8e:c5:ab:8c:bc:f9:a2:dc:d8:ac:1e:ff:b4:0b:64:f4:
db:dd:6b:a6:a9:1d:06:2c:02:1c:ea:f6:9b:8f:6b:14:22:b5:
cd:64:17:74:d8:fc:10:f9:ca:50:92:18:7a:21:a3:7a:cc:70:
8e:ce:1f:73:b6:21:76:cb:17:a3:da:be:52:48:8c:c5:36:2f:
f0:a0:e9:29:f0:73:50:82:d7:bf:48:37:11:7b:30:de:b9:0d:
d9:ff:3f:b9:e9:e4:4f:0a:d8:fd:91:ac:91:10:6a:28:26:7e:
86:0a:b3:ac:2a:8c:86:62:e5:8b:8d:2d:86:7a:b1:ab:ba:9c:
7e:8c:86:aa:c3:a5:4a:f4:b2:60:2c:41:3a:ee:d8:3f:b4:5b:
c4:e0:d2:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:15:04 2026 by rpki-client