Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e342e3232322e302f32342d3234203d3e20383334.roa
File: 3138352e342e3232322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: kq15p/8ENJwNoaPyGEA4nU+3QFlxSYJaEM2PqyjBR0M=
Subject key identifier: CA:FD:05:F1:24:A7:4B:E7:3E:56:E7:B6:8D:6F:30:4A:F4:AB:64:FC
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 2F9E34F591BF00A3F56EDBA06802EEC2C85ED65C
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e342e3232322e302f32342d3234203d3e20383334.roa
Signing time: Tue 17 Feb 2026 00:04:18 +0000
ROA not before: Mon 16 Feb 2026 23:59:18 +0000
ROA not after: Tue 16 Feb 2027 00:04:18 +0000
asID: 834
IP address blocks: 185.4.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:9e:34:f5:91:bf:00:a3:f5:6e:db:a0:68:02:ee:c2:c8:5e:d6:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Feb 16 23:59:18 2026 GMT
Not After : Feb 16 00:04:18 2027 GMT
Subject: CN=CAFD05F124A74BE73E56E7B68D6F304AF4AB64FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1e:5d:81:56:ff:0b:d8:0a:d9:c5:77:e0:3f:
81:da:c4:34:b1:e4:c0:79:81:e3:c8:91:6f:b5:2a:
49:35:8b:16:75:ae:7c:ac:9f:12:2d:48:09:de:b7:
e2:04:bb:5c:5c:1a:59:55:e7:f2:6a:2d:53:fb:e1:
80:d7:dd:ae:97:09:9b:7b:2a:74:95:cd:32:3f:b8:
37:64:8f:ec:0a:d7:99:b5:11:1a:a4:64:a9:71:83:
a4:1c:f7:c5:a4:d3:2b:25:ac:01:34:c1:6e:b5:49:
07:05:31:21:08:37:d1:18:d5:51:1a:e5:ea:1f:e7:
45:61:44:e4:65:38:f0:ff:9f:92:ee:d9:38:f7:1e:
fc:fd:ef:34:81:1a:ce:17:cd:93:06:82:67:92:29:
f8:93:e2:c7:e1:06:fa:60:f2:9e:6b:48:e0:cb:54:
c7:84:1b:29:1f:da:00:5d:da:47:61:3e:df:5c:07:
27:f4:cc:4c:b2:20:f0:79:e4:48:6f:5f:fe:bb:17:
9d:76:ee:af:2b:40:1c:8b:33:8d:bb:21:ce:18:53:
34:12:de:47:c8:5d:05:4d:c8:1c:d8:04:5f:93:03:
5c:1c:70:41:8b:0c:e5:2f:b0:41:a6:04:af:28:18:
65:b3:0d:8b:33:8c:84:ca:a7:27:88:c5:3c:b7:eb:
2a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:FD:05:F1:24:A7:4B:E7:3E:56:E7:B6:8D:6F:30:4A:F4:AB:64:FC
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e342e3232322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.4.222.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:dd:ab:1a:69:c0:c6:dc:b6:85:10:cf:c2:7a:81:af:1d:e9:
8c:bd:85:37:39:9d:c1:7c:7f:d6:9d:b0:bd:a8:86:49:bd:78:
34:f8:40:e3:4e:10:35:75:96:5d:94:15:f8:8a:3a:f8:73:75:
6e:dd:69:0c:cc:4b:5d:9e:94:a9:c0:64:21:79:54:ed:2d:e6:
0a:7e:d9:78:3b:a6:13:b3:b3:b1:c8:51:68:26:ac:30:75:cb:
24:91:18:06:d5:4a:d7:55:fd:03:ca:55:cc:76:7a:12:ac:0e:
43:f3:12:83:34:df:cf:3e:04:d8:22:e2:5a:4f:16:d2:a5:04:
49:c9:18:a7:38:f1:2e:34:c9:c4:13:43:c5:04:5e:c0:a7:99:
3f:7b:d0:b1:be:ee:50:18:1e:7b:90:e1:14:1e:2c:0f:d5:17:
da:73:e8:9a:9a:6b:ef:7e:53:b3:b6:14:49:a7:7f:35:26:ba:
0c:c8:17:ba:01:0a:da:d3:c2:29:4f:2b:98:c8:87:bb:a8:16:
bb:07:58:ea:89:be:2f:60:c6:e1:2f:5b:5c:f5:73:20:43:c6:
ce:78:1b:ea:de:bc:b8:45:ca:fd:fa:19:88:39:d1:55:f9:29:
9c:d5:c4:74:e2:ba:2a:e4:f4:4c:10:dc:4c:20:ac:ee:a1:ba:
43:fa:87:ba
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUL5409ZG/AKP1btugaALuwshe1lwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2FkZjYzZTM3NWIwYjc4NTA4MWI1OTQ1YjFkMThkOWRl
ODZlMGVmYzAeFw0yNjAyMTYyMzU5MThaFw0yNzAyMTYwMDA0MThaMDMxMTAvBgNV
BAMTKENBRkQwNUYxMjRBNzRCRTczRTU2RTdCNjhENkYzMDRBRjRBQjY0RkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKHl2BVv8L2ArZxXfgP4HaxDSx
5MB5gePIkW+1Kkk1ixZ1rnysnxItSAnet+IEu1xcGllV5/JqLVP74YDX3a6XCZt7
KnSVzTI/uDdkj+wK15m1ERqkZKlxg6Qc98Wk0yslrAE0wW61SQcFMSEIN9EY1VEa
5eof50VhRORlOPD/n5Lu2Tj3Hvz97zSBGs4XzZMGgmeSKfiT4sfhBvpg8p5rSODL
VMeEGykf2gBd2kdhPt9cByf0zEyyIPB55EhvX/67F5127q8rQByLM427Ic4YUzQS
3kfIXQVNyBzYBF+TA1wccEGLDOUvsEGmBK8oGGWzDYszjITKpyeIxTy36yo7AgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUyv0F8SSnS+c+Vue2jW8wSvSrZPwwHwYDVR0j
BBgwFoAUet9j43Wwt4UIG1lFsdGNnehuDvwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQtOTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2Fi
MDAyLzAvN0FERjYzRTM3NUIwQjc4NTA4MUI1OTQ1QjFEMThEOURFODZFMEVGQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2V0OWo0M1d3dDRVSUcxbEZzZEdObmVo
dUR2dy5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQt
OTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2FiMDAyLzAvMzEzODM1MmUzNDJlMzIzMjMy
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQTeMA0G
CSqGSIb3DQEBCwUAA4IBAQCn3asaacDG3LaFEM/CeoGvHemMvYU3OZ3BfH/WnbC9
qIZJvXg0+EDjThA1dZZdlBX4ijr4c3Vu3WkMzEtdnpSpwGQheVTtLeYKftl4O6YT
s7OxyFFoJqwwdcskkRgG1UrXVf0DylXMdnoSrA5D8xKDNN/PPgTYIuJaTxbSpQRJ
yRinOPEuNMnEE0PFBF7Ap5k/e9Cxvu5QGB57kOEUHiwP1Rfac+iammvvflOzthRJ
p381JroMyBe6AQra08IpTyuYyIe7qBa7B1jqib4vYMbhL1tc9XMgQ8bOeBvq3ry4
Rcr9+hmIOdFV+Smc1cR04roq5PRMENxMIKzuobpD+oe6
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:58:30 2026 by rpki-client