Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3231332e3234312e302f32342d3234203d3e20383334.roa
File: 3138352e3231332e3234312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: iJn0hlLJ3oFxKr+7cMnKiCBSxJOhVbhgSdip2hnkomk=
Subject key identifier: 58:3B:28:43:47:C9:E9:D5:F0:96:2F:C8:AC:D9:20:C7:01:FC:B9:52
Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Certificate serial: 36EF54BD535D1BA228FA29E084DECAE9DB3F14C6
Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3231332e3234312e302f32342d3234203d3e20383334.roa
Signing time: Fri 17 Apr 2026 00:02:11 +0000
ROA not before: Thu 16 Apr 2026 23:57:11 +0000
ROA not after: Fri 16 Apr 2027 00:02:11 +0000
asID: 834
IP address blocks: 185.213.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft
rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:ef:54:bd:53:5d:1b:a2:28:fa:29:e0:84:de:ca:e9:db:3f:14:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Validity
Not Before: Apr 16 23:57:11 2026 GMT
Not After : Apr 16 00:02:11 2027 GMT
Subject: CN=583B284347C9E9D5F0962FC8ACD920C701FCB952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:85:4a:c3:8a:2b:37:eb:b5:40:1f:54:0d:91:
b4:0d:6f:a9:5f:88:50:8d:b8:97:2b:35:4f:c6:e6:
f0:58:2a:04:70:d1:e0:db:db:1b:33:e0:1e:27:eb:
03:11:38:9b:a0:43:d4:ef:96:90:33:0c:b5:e4:6f:
47:84:0d:08:68:f3:58:3e:36:93:67:e6:52:c9:a8:
65:2c:ef:8b:54:8f:8d:52:5d:9b:d7:fc:24:1e:4f:
e5:83:92:ed:cd:bf:4e:bc:5c:4d:8f:b5:4a:ae:ef:
4d:db:e6:26:ca:d0:a3:36:8e:3c:4e:df:1d:40:88:
6f:ee:da:27:ce:65:68:d9:e7:52:aa:fc:4e:f1:58:
62:0d:9c:c0:f0:c3:72:f3:26:8e:50:d0:6e:55:0c:
dc:94:25:d3:e7:78:01:47:e0:7b:d5:10:5c:b3:b4:
05:7a:4b:e5:90:92:4e:4a:d9:ab:d6:46:53:60:aa:
bd:36:30:83:ce:0e:3b:43:b7:b5:a9:e3:08:0e:c2:
d7:d9:20:73:40:14:6d:d6:b3:2d:07:5e:37:09:c8:
f6:ac:a3:ab:71:8a:da:92:f0:e8:52:14:fa:5b:9c:
dc:5e:e5:b5:1a:b8:2b:46:ee:67:d9:ef:4f:2c:73:
9c:2e:db:3d:3b:f2:20:53:56:64:d0:80:80:18:1a:
dd:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:3B:28:43:47:C9:E9:D5:F0:96:2F:C8:AC:D9:20:C7:01:FC:B9:52
X509v3 Authority Key Identifier:
keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3231332e3234312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.241.0/24
Signature Algorithm: sha256WithRSAEncryption
11:0a:68:22:e0:1c:ad:64:94:97:f7:2c:86:43:7e:fd:91:b4:
90:a9:67:0a:d5:b7:c1:14:51:54:04:4f:21:17:7e:f2:6c:c1:
2d:24:76:1e:49:51:78:ef:9f:8d:c3:13:33:b2:74:47:46:a1:
14:db:e6:4a:8f:42:31:64:53:84:11:da:fb:54:81:45:08:11:
3b:96:70:e8:4f:e0:89:9d:fa:38:b1:15:c6:f1:5e:07:09:27:
1c:3d:b7:05:c8:77:38:18:19:20:d0:fc:ce:79:be:c2:87:df:
10:3f:69:5f:32:48:21:2f:93:4c:a1:ca:cc:08:29:3f:7d:9e:
1c:6e:6b:82:17:10:25:fe:ba:8e:ab:66:0f:57:9d:9c:3e:d4:
c1:58:77:c4:f0:50:fe:8e:6b:f8:f8:a2:6b:08:f4:d3:5d:5a:
33:3e:9a:48:db:ea:34:58:e0:6a:f5:b5:2c:7e:31:02:65:33:
5e:4b:24:7d:e2:b1:3b:e8:f9:9d:55:c3:d4:3f:33:0c:3c:30:
f0:58:c3:3c:cb:23:90:0c:e0:7a:6b:19:7d:65:56:01:c6:02:
6a:20:a3:73:49:ec:57:ff:dc:a3:59:a9:41:6c:d8:9c:ee:34:
ed:ca:97:d6:fd:31:9c:72:25:25:f4:fa:ba:5a:e2:8b:6b:43:
78:2b:d3:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:02:14 2026 by rpki-client