Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/3138352e35382e3135382e302f32342d3234203d3e203239303636.roa
File: 3138352e35382e3135382e302f32342d3234203d3e203239303636.roa (raw, json)
Hash identifier: EK3UjLLyjmaMmV74umu/GLpiDN5Z2BDfo7bejD8Ms9w=
Subject key identifier: B0:76:D4:D1:20:E2:53:71:BF:B4:48:B3:03:B2:00:3B:ED:1E:F2:F2
Certificate issuer: /CN=38a93c81ecd308e6a7632717045b3d35150120f8
Certificate serial: 73FC5580716DBC2885E18A2292BD867B303A8DEF
Authority key identifier: 38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/3138352e35382e3135382e302f32342d3234203d3e203239303636.roa
Signing time: Thu 24 Sep 2026 18:49:35 +0000
ROA not before: Thu 24 Sep 2026 18:44:35 +0000
ROA not after: Thu 23 Sep 2027 18:49:35 +0000
asID: 29066
IP address blocks: 185.58.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl
rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:fc:55:80:71:6d:bc:28:85:e1:8a:22:92:bd:86:7b:30:3a:8d:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38a93c81ecd308e6a7632717045b3d35150120f8
Validity
Not Before: Sep 24 18:44:35 2026 GMT
Not After : Sep 23 18:49:35 2027 GMT
Subject: CN=B076D4D120E25371BFB448B303B2003BED1EF2F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b1:f4:c2:99:71:50:a2:12:30:11:3c:43:e5:
a8:99:a2:c4:2e:5e:b1:4b:57:df:e5:94:f1:4f:fa:
27:53:61:2a:8e:58:8b:b6:2f:0e:3f:e1:28:b3:c7:
02:a2:5f:34:92:c8:e3:ea:9a:76:bc:4a:e1:12:f8:
8e:e6:8c:01:9d:2f:c1:75:23:b7:6e:92:34:24:0c:
b4:12:3d:69:31:ec:99:a5:28:1b:c9:46:e3:97:ee:
58:7d:e5:ef:41:f1:a6:48:1e:23:98:15:c0:a0:96:
d2:b0:08:1c:36:91:f4:3c:8c:05:e1:c5:ed:39:3b:
80:1f:58:f4:7c:7a:f5:5e:32:81:0d:27:4f:63:3f:
27:75:92:69:2f:68:99:c4:c8:bb:c7:fa:67:1b:b0:
ae:31:ff:ab:92:ea:d5:3d:d4:2c:e8:d1:89:39:ae:
f0:72:dc:de:75:2c:36:4d:4b:e5:c5:b4:7b:b8:9e:
f7:d4:4b:f1:6e:4e:c6:ff:28:bb:30:3f:48:55:74:
f4:18:90:bd:65:de:fa:b2:e3:2a:f0:22:1f:db:f0:
21:d9:83:2a:9a:7e:b1:2c:37:e3:2b:06:88:92:cf:
dd:c7:24:07:dc:68:c7:d5:76:c9:ee:ad:9b:ed:7d:
c6:d3:0f:3b:df:93:39:31:ff:8b:87:01:f2:4d:d7:
7e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:76:D4:D1:20:E2:53:71:BF:B4:48:B3:03:B2:00:3B:ED:1E:F2:F2
X509v3 Authority Key Identifier:
keyid:38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/3138352e35382e3135382e302f32342d3234203d3e203239303636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.58.158.0/24
Signature Algorithm: sha256WithRSAEncryption
05:d2:c9:fa:25:14:a4:9d:82:06:10:41:57:24:0b:10:8c:f3:
4f:0a:88:4a:9c:d0:6d:81:f0:b2:5f:86:eb:df:66:8e:3f:2a:
e0:68:ea:91:51:26:ed:47:74:b1:f7:c5:30:75:70:20:8b:e0:
f5:fe:a5:55:48:1d:1f:ea:20:cd:49:e1:81:7b:6c:68:42:f8:
30:19:38:6b:11:f0:ae:b7:ff:fe:1a:85:e9:54:86:8f:dc:3f:
f1:7f:1d:a2:1b:1a:20:ab:57:7d:1d:a4:aa:6e:86:08:6e:34:
46:ee:8a:9b:6a:25:ef:e7:ef:4c:75:9c:ad:73:16:5f:e9:03:
84:1c:c2:e3:6c:38:02:05:1e:34:0c:e5:fc:7b:df:2d:38:2a:
ec:f4:96:e2:dd:c4:d4:4b:fb:32:2a:ea:1f:05:30:95:77:8e:
c2:9e:c4:68:65:48:07:7f:a2:df:07:b6:4f:b7:57:0a:ce:e3:
e4:f4:c5:0b:72:3c:3e:f8:78:b4:96:9b:de:fa:06:c1:ed:0f:
e8:16:2d:a4:85:ca:8e:7f:8c:3a:dd:6c:9a:70:2e:29:8e:e4:
41:c8:c4:4e:08:97:f9:01:1d:69:18:49:a5:4f:d8:94:9c:15:
94:63:29:80:e0:ff:a9:80:05:f3:75:4a:11:bc:54:60:17:8c:
97:8d:e8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:25:35 2026 by rpki-client