Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/3138352e3138312e312e302f32342d3234203d3e203232313638.roa
File: 3138352e3138312e312e302f32342d3234203d3e203232313638.roa (raw, json)
Hash identifier: kL/USbewZ5F9rgl6OrE+AodqJSBjzH+0rgbH/DsidT0=
Subject key identifier: 64:0E:1A:48:5C:2A:63:CE:07:78:76:B8:F3:D2:A9:42:AD:D9:0F:98
Certificate issuer: /CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Certificate serial: 32BCF3009CB6ED33D84CF2F93B33FF8BF91EA801
Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/3138352e3138312e312e302f32342d3234203d3e203232313638.roa
Signing time: Thu 26 Feb 2026 13:46:29 +0000
ROA not before: Thu 26 Feb 2026 13:41:29 +0000
ROA not after: Thu 25 Feb 2027 13:46:29 +0000
asID: 22168
IP address blocks: 185.181.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft
rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:bc:f3:00:9c:b6:ed:33:d8:4c:f2:f9:3b:33:ff:8b:f9:1e:a8:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Validity
Not Before: Feb 26 13:41:29 2026 GMT
Not After : Feb 25 13:46:29 2027 GMT
Subject: CN=640E1A485C2A63CE077876B8F3D2A942ADD90F98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fe:c9:ba:e5:a2:de:f1:72:f1:8a:e8:db:82:
8c:ba:d0:5d:b4:fe:cf:ff:41:87:2c:d6:cb:fc:8e:
d0:42:3f:3c:ae:be:f2:36:90:c7:3b:b5:4a:19:84:
ae:bf:d1:c9:19:1e:c8:d2:39:f1:a9:b1:17:87:87:
22:8e:1d:2f:7d:1c:a4:89:47:e1:32:5e:5d:25:06:
c9:5d:23:81:0f:6e:7f:39:29:77:3a:23:76:60:a7:
0c:1a:bc:a4:56:0a:9a:fd:16:a1:38:8c:c5:fc:bf:
06:0f:13:c6:1f:b6:98:b7:6d:a3:0a:75:cd:2f:4c:
43:57:26:54:9f:2e:6d:19:64:07:b9:2f:66:85:58:
3e:e5:d7:31:aa:fc:6b:b3:df:4f:c1:f5:f6:1d:ab:
60:0d:ef:2c:9a:21:2a:88:7e:7a:8a:26:14:28:ed:
4b:8b:20:1f:1e:df:fa:b2:52:0f:96:16:ec:d0:73:
74:15:0b:9d:5e:ea:cd:66:4e:85:0e:02:30:c0:17:
0e:60:6c:57:05:90:1c:4e:2d:cf:2a:13:81:64:b1:
00:3d:9a:9b:b7:1b:c1:5a:38:f7:b1:65:32:41:1e:
f4:ed:0a:05:2d:02:91:99:5a:97:7e:fa:71:60:ea:
8a:39:90:63:6e:97:dd:b7:36:ac:57:96:43:5e:63:
38:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:0E:1A:48:5C:2A:63:CE:07:78:76:B8:F3:D2:A9:42:AD:D9:0F:98
X509v3 Authority Key Identifier:
keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/3138352e3138312e312e302f32342d3234203d3e203232313638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.181.1.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:e2:bb:85:98:6f:fe:24:30:e2:ab:a1:77:c5:9b:0a:0e:4c:
c0:5c:43:40:16:e9:8c:52:cf:5b:59:9a:14:14:56:f1:8d:7b:
c8:18:5b:b4:66:7a:0f:3f:5b:74:b3:47:20:40:8d:2d:be:20:
cc:81:b3:3e:43:bd:b5:35:11:c4:46:9d:42:ae:73:4f:c8:e8:
50:5c:f3:00:82:18:12:8b:b5:e2:2a:d8:2c:8e:62:52:ea:8b:
f7:31:10:99:3f:05:92:94:10:f6:79:fc:d5:a9:a0:68:14:e9:
82:07:6f:54:c0:28:fe:19:69:6d:04:de:13:6c:13:76:40:94:
f3:82:e4:af:f7:73:9d:d7:f3:0e:cf:e5:88:52:bb:4a:11:75:
e4:1f:36:6d:c9:ac:72:d8:7c:65:60:2f:c4:59:16:71:06:f3:
97:4d:be:5d:fa:a0:ef:4d:89:b3:6a:a9:16:2d:0f:03:0a:6f:
52:64:e9:3b:96:2d:d5:31:09:6e:73:3c:76:e9:80:9d:30:0a:
d7:a1:cb:92:ff:95:2c:34:70:e7:3e:62:aa:c1:70:b1:21:b3:
49:a4:29:57:37:81:c2:fb:24:c8:82:a5:ca:0a:81:de:f8:80:
25:e9:71:f1:34:c7:6b:fb:ee:3e:bb:3b:a8:b9:ae:83:2e:4a:
08:5c:d5:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:30:00 2026 by rpki-client