Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3138352e3130302e3231342e302f32342d3234203d3e20383334.roa
File: 3138352e3130302e3231342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: CeD8A8qw64U3P93Msp/kWFnbkHflZD5QyGyKc99EPIY=
Subject key identifier: D8:77:62:E1:29:8C:6E:A7:58:70:DC:5B:8D:C4:10:13:CB:2A:8D:FB
Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d
Certificate serial: 5CE00B5C34A6205DC077DC7E31DB8B281690E905
Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3138352e3130302e3231342e302f32342d3234203d3e20383334.roa
Signing time: Sun 20 Sep 2026 06:18:15 +0000
ROA not before: Sun 20 Sep 2026 06:13:15 +0000
ROA not after: Sun 19 Sep 2027 06:18:15 +0000
asID: 834
IP address blocks: 185.100.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl
rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:e0:0b:5c:34:a6:20:5d:c0:77:dc:7e:31:db:8b:28:16:90:e9:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d
Validity
Not Before: Sep 20 06:13:15 2026 GMT
Not After : Sep 19 06:18:15 2027 GMT
Subject: CN=D87762E1298C6EA75870DC5B8DC41013CB2A8DFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2c:e4:93:48:11:bc:4a:51:8f:55:a6:a0:d4:
97:28:42:10:e6:e2:ef:7b:a6:72:2f:27:77:78:11:
01:0b:1c:05:bd:8c:0b:2f:78:f4:66:00:38:e7:11:
af:33:33:c6:d4:f6:35:79:28:08:f9:81:89:3a:72:
f0:31:a2:10:3c:fd:ea:c0:13:cd:c8:67:e4:9f:14:
af:00:34:44:70:3b:c7:51:6c:30:82:5a:e8:c2:4c:
9e:18:a9:54:64:bc:97:e8:39:5d:4f:1a:c7:52:b5:
2e:3e:2a:5b:f5:67:8c:71:af:2b:5d:a1:81:db:5f:
c0:1e:6e:51:7e:e7:fa:4f:3d:fb:99:55:a5:44:09:
5d:00:1b:56:55:57:99:4b:3f:ba:3c:f3:49:0d:ab:
11:05:40:c7:27:6f:b5:50:f7:64:45:b1:5e:67:49:
ef:cb:a3:0e:4f:d3:e2:d5:37:61:a9:e1:86:fc:19:
58:4a:fd:c2:17:4d:61:b2:52:5d:7c:13:38:06:73:
18:db:cd:77:e5:b8:3b:4e:40:a4:e4:3d:55:ef:59:
d9:43:6b:75:72:1e:4a:3d:bd:ec:ea:a4:90:b5:bd:
cf:22:fd:87:68:bb:bc:56:02:ce:59:07:41:2b:cc:
66:3f:ec:80:8f:05:72:b3:b8:21:b7:f3:c9:ac:33:
55:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:77:62:E1:29:8C:6E:A7:58:70:DC:5B:8D:C4:10:13:CB:2A:8D:FB
X509v3 Authority Key Identifier:
keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3138352e3130302e3231342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.214.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:37:04:04:79:d5:5c:c8:81:f5:f0:81:b5:c9:71:79:b6:7a:
74:06:4e:53:e8:ec:e1:07:90:f6:00:6e:ab:45:a3:04:d3:b7:
54:ec:18:d2:4a:ce:6c:42:2c:57:cf:ef:71:1c:41:47:03:7b:
71:ac:e9:a7:08:45:46:f9:5d:d8:ff:66:fa:33:37:d0:24:dc:
64:f9:64:bd:26:da:b2:48:fc:c4:ab:6f:88:8a:49:08:3a:26:
de:64:8f:7f:08:3f:9c:46:8f:0f:33:2b:93:e6:ea:84:e8:8c:
1c:cf:9b:af:a2:eb:18:6b:c7:ad:b8:65:c8:3f:be:45:90:a6:
ed:da:92:e1:10:51:05:db:7b:f1:c3:40:c7:ad:43:59:a9:56:
f1:52:2b:87:ef:0d:f3:ed:d2:80:af:63:f7:06:0f:b1:83:8d:
ee:9c:8f:93:62:b7:fc:f1:38:d8:c9:e5:02:9d:66:7f:01:15:
d3:ce:16:52:9b:66:cc:bd:1c:a8:b9:08:ff:7c:75:f4:3f:48:
a2:f4:fa:4c:9e:55:16:5e:12:89:5b:f8:02:bd:c8:0a:24:b0:
d8:b2:78:67:6e:c6:f5:be:e0:7e:7b:c1:26:f5:79:3f:1b:38:
52:c5:54:b3:90:9e:97:9d:bc:99:43:3c:47:f7:4e:d3:60:86:
f1:9a:02:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:54:59 2026 by rpki-client