Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/3138352e322e34392e302f32342d3234203d3e20323138393834.roa
File: 3138352e322e34392e302f32342d3234203d3e20323138393834.roa (raw, json)
Hash identifier: nTsoGcm7nRBrh89HCX58wiux4+2N2yxuhGfFc9vQwsc=
Subject key identifier: E5:CC:E6:CE:6B:18:7F:B8:47:45:4B:B9:D2:D9:54:FB:CD:AF:55:21
Certificate issuer: /CN=a29ef21c1397ab4b2f08778305a37ffd1cc25c4e
Certificate serial: 6F50464B223559853F8C0646875F286DF095D3F4
Authority key identifier: A2:9E:F2:1C:13:97:AB:4B:2F:08:77:83:05:A3:7F:FD:1C:C2:5C:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/op7yHBOXq0svCHeDBaN__RzCXE4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/3138352e322e34392e302f32342d3234203d3e20323138393834.roa
Signing time: Sat 15 Aug 2026 15:20:56 +0000
ROA not before: Sat 15 Aug 2026 15:15:56 +0000
ROA not after: Sat 14 Aug 2027 15:20:56 +0000
asID: 218984
IP address blocks: 185.2.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.crl
rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/op7yHBOXq0svCHeDBaN__RzCXE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 18:39:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:50:46:4b:22:35:59:85:3f:8c:06:46:87:5f:28:6d:f0:95:d3:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a29ef21c1397ab4b2f08778305a37ffd1cc25c4e
Validity
Not Before: Aug 15 15:15:56 2026 GMT
Not After : Aug 14 15:20:56 2027 GMT
Subject: CN=E5CCE6CE6B187FB847454BB9D2D954FBCDAF5521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d4:24:40:ef:b5:d5:20:ae:03:d3:b6:38:62:
ee:30:18:91:a3:db:00:8a:1c:87:73:c5:a3:ce:b5:
cb:38:16:ef:f6:89:3f:2f:9e:87:65:7e:7f:42:cd:
1e:bf:25:1f:4c:a0:27:7e:5a:9b:6e:4b:59:26:28:
1c:dc:a6:2a:82:1f:52:7b:e0:7a:a4:e1:ab:1e:c6:
50:2e:e4:65:4a:41:04:dc:b6:dc:6b:4c:9e:f6:e5:
1e:d8:ac:c9:36:72:d9:73:23:f0:a3:97:43:9d:5d:
4d:c2:bf:89:b3:35:04:d8:87:ea:07:d5:c3:34:e8:
43:ce:52:09:9f:08:ad:9f:97:47:31:87:3b:36:7f:
be:ba:cc:03:fa:45:8e:5b:fc:90:4c:f8:bf:51:14:
a8:3b:d8:f0:4d:48:6d:73:ff:15:e5:e4:ee:1f:55:
01:eb:44:c5:88:6c:11:04:c4:a7:01:eb:ae:51:80:
e4:ee:ae:0e:51:79:a3:90:a8:57:6a:a5:a0:50:33:
96:0d:a7:96:34:63:c5:93:59:0e:74:51:3d:f7:1e:
e1:51:78:e6:f6:f7:39:6a:a5:40:04:15:cb:fa:24:
f3:f7:ab:05:2a:09:82:cb:da:02:a1:e4:93:1b:5a:
96:34:68:d9:3b:05:27:8f:46:dd:85:31:c3:ff:3d:
fc:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:CC:E6:CE:6B:18:7F:B8:47:45:4B:B9:D2:D9:54:FB:CD:AF:55:21
X509v3 Authority Key Identifier:
keyid:A2:9E:F2:1C:13:97:AB:4B:2F:08:77:83:05:A3:7F:FD:1C:C2:5C:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/op7yHBOXq0svCHeDBaN__RzCXE4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/3138352e322e34392e302f32342d3234203d3e20323138393834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.2.49.0/24
Signature Algorithm: sha256WithRSAEncryption
02:83:70:68:d1:cb:d4:68:9e:c9:b2:bc:88:08:f6:e4:fd:dd:
26:58:af:11:24:60:e0:bd:7b:96:65:8a:47:de:03:5b:11:1c:
6e:91:39:30:f7:ef:ba:57:6a:86:c3:53:4e:52:6a:65:e4:1d:
12:62:aa:4c:9f:6e:fc:ef:c5:2f:23:2f:b4:48:c8:3c:07:46:
33:e3:78:4c:6c:16:3c:2c:49:a2:d9:8d:d2:59:81:d4:d8:b2:
f7:d1:ff:74:8d:9e:46:a3:e1:17:f4:3d:96:e3:59:74:72:6c:
d3:94:54:9f:e0:24:46:4d:ef:b4:1c:94:56:ed:58:8b:1c:fe:
7c:ae:d5:31:d6:31:71:3c:cd:79:87:09:1d:1b:99:30:2a:85:
4b:5e:0b:54:17:1f:10:ea:89:e9:1b:7d:95:48:e1:ed:7e:bf:
92:c2:e7:b8:b5:47:b4:b8:cc:3a:2c:6a:a7:2e:01:81:d6:34:
3a:4b:0f:a8:da:ec:50:f7:c0:d7:56:18:3e:a0:ca:16:b3:dd:
e9:44:b7:e7:b3:80:de:18:9a:fe:a2:e8:5b:dc:f6:a4:48:ec:
35:44:1a:7a:ee:31:bf:4d:df:d3:64:39:bc:b8:a1:c9:17:4c:
f3:95:db:a6:a6:7c:85:10:7e:3c:a5:d9:60:90:97:34:d0:7a:
1f:17:74:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 02:59:35 2026 by rpki-client