Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/3138352e35382e3135382e302f32342d3234203d3e203239303636.roa
File: 3138352e35382e3135382e302f32342d3234203d3e203239303636.roa (raw, json)
Hash identifier: V5B4QzWLoE4oAz8O3q7zQJ3sjBQn40pU580oRG+qryA=
Subject key identifier: 80:4F:93:39:9F:E0:66:68:62:8D:0D:38:62:40:DF:B4:D4:6C:CC:94
Certificate issuer: /CN=38a93c81ecd308e6a7632717045b3d35150120f8
Certificate serial: 244A63929160525975186E96ED41528D8E5B66D4
Authority key identifier: 38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/3138352e35382e3135382e302f32342d3234203d3e203239303636.roa
Signing time: Thu 23 Oct 2025 17:57:53 +0000
ROA not before: Thu 23 Oct 2025 17:52:53 +0000
ROA not after: Thu 22 Oct 2026 17:57:53 +0000
asID: 29066
IP address blocks: 185.58.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl
rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:55:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:4a:63:92:91:60:52:59:75:18:6e:96:ed:41:52:8d:8e:5b:66:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38a93c81ecd308e6a7632717045b3d35150120f8
Validity
Not Before: Oct 23 17:52:53 2025 GMT
Not After : Oct 22 17:57:53 2026 GMT
Subject: CN=804F93399FE06668628D0D386240DFB4D46CCC94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ae:63:98:e9:c6:ff:08:b2:d0:ea:e0:a7:78:
ef:eb:85:fe:5a:8a:8b:2e:fe:39:bf:68:07:e2:41:
a4:3b:a3:b8:02:86:bd:22:ad:04:01:5e:a3:d0:98:
3b:f6:65:89:d2:f0:b4:72:92:30:40:e7:47:56:7e:
1b:48:03:03:01:8c:00:dd:c4:9c:db:9b:f3:52:ff:
cb:42:1c:50:96:be:b9:41:8c:40:a8:a5:81:08:48:
7a:da:8c:d1:d4:7a:a7:8d:5d:ed:a0:e3:88:79:8f:
13:f0:12:e6:38:16:8e:f6:c9:a5:f1:70:3e:17:9a:
06:b2:fe:a8:66:92:99:7b:c8:fc:39:97:2c:7f:38:
03:b3:e0:a2:cd:47:24:b5:00:c3:43:81:91:4f:63:
3d:86:98:f4:ff:b5:a2:ff:91:fa:82:8f:8c:a5:6e:
66:16:b2:66:1b:9f:fb:54:c2:ee:fb:17:75:56:9d:
24:12:39:40:d2:4b:ee:f7:d0:5d:f6:08:ef:69:68:
23:8e:8a:e8:9b:f3:cb:86:e9:da:43:f0:7e:c5:9a:
86:06:00:f7:3c:e0:2e:c8:eb:d4:4b:ce:40:f2:17:
c6:9a:d3:0b:88:3f:69:0f:1a:e4:7c:d6:69:61:0f:
c9:28:ef:36:ba:9c:0b:46:b6:1b:53:a1:21:37:e7:
eb:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:4F:93:39:9F:E0:66:68:62:8D:0D:38:62:40:DF:B4:D4:6C:CC:94
X509v3 Authority Key Identifier:
keyid:38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/3138352e35382e3135382e302f32342d3234203d3e203239303636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.58.158.0/24
Signature Algorithm: sha256WithRSAEncryption
76:b8:01:52:c7:53:31:51:26:b8:8b:e6:b0:00:d8:07:05:ba:
4a:f6:6b:11:0f:b9:2a:db:12:d0:8e:43:b2:71:c0:55:ae:31:
6c:d0:9d:e4:c1:cb:aa:33:65:68:5d:33:e7:8b:04:a4:b8:9e:
96:1f:01:d0:e4:a3:65:9a:f1:7a:b5:25:91:73:f3:c1:75:dc:
7a:00:e6:bb:f6:ef:99:40:f4:02:fb:2f:99:97:5a:02:05:5d:
51:d7:d3:c5:df:5a:be:90:3a:db:49:71:3b:0d:d5:97:b3:6a:
a4:d7:88:e8:fb:90:76:bf:0a:ee:66:f4:b6:bc:bb:2a:03:94:
d5:f5:c8:18:b7:1c:19:ea:d2:47:58:dd:4a:2b:6e:1c:92:36:
10:26:ef:a8:65:4c:77:a0:b7:85:b3:43:c0:87:ce:32:7e:09:
0c:a5:f1:03:a4:9d:9a:73:8a:6d:20:60:ec:6b:5b:94:cc:37:
14:34:e6:c9:c7:5b:2c:23:b0:a3:64:1a:ac:f7:23:4d:c0:93:
d8:35:95:85:03:43:cc:2e:af:c2:28:d4:52:b8:85:55:78:71:
f9:fb:8b:22:b9:76:c4:a3:f9:d8:8a:19:b9:3b:b4:c6:98:1d:
51:7e:99:8d:c6:5c:1e:da:51:3b:40:4a:e8:61:3e:a2:87:af:
e2:aa:6e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:03:33 2025 by rpki-client