Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/3138352e35382e3135392e302f32342d3234203d3e203633313530.roa
File: 3138352e35382e3135392e302f32342d3234203d3e203633313530.roa (raw, json)
Hash identifier: e5s2Yb7TVZML9070ZZ1W7yMbNeK9i8gaNwxWx8a/KY8=
Subject key identifier: 19:57:39:5E:43:3A:D6:FA:15:DE:44:0E:36:CA:00:FD:4D:BE:D6:C2
Certificate issuer: /CN=38a93c81ecd308e6a7632717045b3d35150120f8
Certificate serial: AA971A6487C911ED291C20D1A58F08F463F42A
Authority key identifier: 38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/3138352e35382e3135392e302f32342d3234203d3e203633313530.roa
Signing time: Wed 04 Feb 2026 12:55:36 +0000
ROA not before: Wed 04 Feb 2026 12:50:36 +0000
ROA not after: Wed 03 Feb 2027 12:55:36 +0000
asID: 63150
IP address blocks: 185.58.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl
rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
aa:97:1a:64:87:c9:11:ed:29:1c:20:d1:a5:8f:08:f4:63:f4:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38a93c81ecd308e6a7632717045b3d35150120f8
Validity
Not Before: Feb 4 12:50:36 2026 GMT
Not After : Feb 3 12:55:36 2027 GMT
Subject: CN=1957395E433AD6FA15DE440E36CA00FD4DBED6C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:81:05:30:39:2b:d5:86:4d:83:47:ac:59:f4:
f3:89:31:93:b6:6d:f3:11:76:c0:5b:a7:0f:d1:ba:
bb:68:2b:1b:2c:34:f7:fb:61:7a:0c:3e:71:43:42:
f3:9c:25:3e:0a:0e:51:52:d0:d3:93:bf:30:87:a9:
5b:09:a2:f4:f5:cd:bc:dc:5b:94:e9:c6:13:5c:fc:
25:eb:07:8d:7e:b4:64:b4:4d:4c:43:30:77:47:7a:
b9:ef:74:72:37:45:0c:5a:4b:e6:60:d7:64:98:c9:
e0:ed:79:6a:a5:79:d3:c8:d6:b0:21:09:73:80:15:
e7:9f:67:43:c1:57:08:31:4b:7c:45:c9:a9:25:0f:
5b:aa:d3:ba:37:19:b3:70:17:0b:b9:07:4c:d0:0a:
73:8e:3b:9b:8c:96:72:a3:58:63:c1:7d:16:ee:b9:
51:69:38:e7:23:44:86:61:63:94:6f:53:2c:61:ce:
cd:d8:41:a9:1c:21:71:00:ee:a7:18:72:4e:0e:48:
b6:46:20:29:41:9e:c4:4e:57:e5:db:a9:1d:86:e7:
ea:b3:a2:89:47:8c:9f:0b:b7:2a:cd:94:7f:08:f0:
c7:4b:ff:fb:75:d8:88:a3:9a:17:10:c4:97:28:49:
d1:b0:79:8b:eb:b8:0d:de:8c:e0:a5:a8:be:56:37:
50:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:57:39:5E:43:3A:D6:FA:15:DE:44:0E:36:CA:00:FD:4D:BE:D6:C2
X509v3 Authority Key Identifier:
keyid:38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/3138352e35382e3135392e302f32342d3234203d3e203633313530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.58.159.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:14:60:26:36:63:6b:7a:af:51:71:db:04:ec:3c:8c:bf:0f:
90:7c:1e:79:c8:18:32:b1:17:d2:bd:26:d1:49:26:ac:3a:dd:
3c:dd:f9:aa:dd:f2:0e:73:9d:6b:af:d6:be:6d:36:c0:e3:7a:
c6:64:52:a4:ec:9e:58:bb:86:dd:76:b6:e9:5e:32:83:de:69:
7b:c0:f3:72:5e:2d:57:14:30:0e:3d:cb:ea:fb:0b:31:f3:5e:
8f:44:cb:b3:47:e2:75:86:04:cd:73:d4:3c:68:42:3d:ae:8d:
d6:a0:85:b9:c1:b0:48:6e:48:67:8f:76:8a:bd:6d:74:4b:de:
c4:ae:38:d7:3c:55:9e:13:c7:5d:5e:b3:70:d1:e1:67:09:ef:
dc:56:b1:4d:5c:96:13:08:52:45:b7:0a:af:50:84:f2:93:25:
68:f3:4c:e8:b4:b6:15:fd:9e:b9:05:3e:52:b5:5d:4b:ee:a1:
23:67:a3:73:ab:0c:0f:2d:73:a0:41:30:f0:f2:3f:67:3b:ca:
0c:e0:c1:c8:a0:c1:35:1e:54:f7:cb:84:01:e8:e0:4b:6d:b4:
0b:e9:9e:e5:0b:2f:e9:b8:b4:40:19:0a:9c:8b:94:9e:d1:42:
f8:b6:64:34:7c:8b:97:a8:33:5f:db:17:f2:38:1d:f4:5e:46:
7c:2b:52:de
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUAKqXGmSHyRHtKRwg0aWPCPRj9CowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzhhOTNjODFlY2QzMDhlNmE3NjMyNzE3MDQ1YjNkMzUx
NTAxMjBmODAeFw0yNjAyMDQxMjUwMzZaFw0yNzAyMDMxMjU1MzZaMDMxMTAvBgNV
BAMTKDE5NTczOTVFNDMzQUQ2RkExNURFNDQwRTM2Q0EwMEZENERCRUQ2QzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCigQUwOSvVhk2DR6xZ9POJMZO2
bfMRdsBbpw/RurtoKxssNPf7YXoMPnFDQvOcJT4KDlFS0NOTvzCHqVsJovT1zbzc
W5TpxhNc/CXrB41+tGS0TUxDMHdHernvdHI3RQxaS+Zg12SYyeDteWqledPI1rAh
CXOAFeefZ0PBVwgxS3xFyaklD1uq07o3GbNwFwu5B0zQCnOOO5uMlnKjWGPBfRbu
uVFpOOcjRIZhY5RvUyxhzs3YQakcIXEA7qcYck4OSLZGIClBnsROV+XbqR2G5+qz
oolHjJ8LtyrNlH8I8MdL//t12IijmhcQxJcoSdGweYvruA3ejOClqL5WN1DHAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUGVc5XkM61voV3kQONsoA/U2+1sIwHwYDVR0j
BBgwFoAUOKk8gezTCOanYycXBFs9NRUBIPgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTgyYzY1YjktNzI1ZC00YmIwLWEyMTYtOGU3NzE5MWZm
OWI4LzAvMzhBOTNDODFFQ0QzMDhFNkE3NjMyNzE3MDQ1QjNEMzUxNTAxMjBGOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL09LazhnZXpUQ09hbll5Y1hCRnM5TlJV
QklQZy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOTgyYzY1Yjkt
NzI1ZC00YmIwLWEyMTYtOGU3NzE5MWZmOWI4LzAvMzEzODM1MmUzNTM4MmUzMTM1
MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMzMzEzNTMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
uTqfMA0GCSqGSIb3DQEBCwUAA4IBAQB/FGAmNmNreq9RcdsE7DyMvw+QfB55yBgy
sRfSvSbRSSasOt083fmq3fIOc51rr9a+bTbA43rGZFKk7J5Yu4bddrbpXjKD3ml7
wPNyXi1XFDAOPcvq+wsx816PRMuzR+J1hgTNc9Q8aEI9ro3WoIW5wbBIbkhnj3aK
vW10S97ErjjXPFWeE8ddXrNw0eFnCe/cVrFNXJYTCFJFtwqvUITykyVo80zotLYV
/Z65BT5StV1L7qEjZ6NzqwwPLXOgQTDw8j9nO8oM4MHIoME1HlT3y4QB6OBLbbQL
6Z7lCy/puLRAGQqci5Se0UL4tmQ0fIuXqDNf2xfyOB30XkZ8K1Le
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:16:13 2026 by rpki-client