Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3231332e3234312e302f32342d3234203d3e20383334.roa
File: 3138352e3231332e3234312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: NT24G3YBxt+Nx48SRGwFgZp6k5CCt9Z8IH8ktbk2nbc=
Subject key identifier: 70:57:B9:1E:32:94:A7:C0:EE:C6:B4:19:D4:DF:1A:49:10:36:7E:6C
Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Certificate serial: 2B7A230D7010C9878462880AA9A76AAAEE9E6EF6
Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3231332e3234312e302f32342d3234203d3e20383334.roa
Signing time: Fri 02 Oct 2026 07:22:07 +0000
ROA not before: Fri 02 Oct 2026 07:17:07 +0000
ROA not after: Fri 01 Oct 2027 07:22:07 +0000
asID: 834
IP address blocks: 185.213.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft
rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:10:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:7a:23:0d:70:10:c9:87:84:62:88:0a:a9:a7:6a:aa:ee:9e:6e:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Validity
Not Before: Oct 2 07:17:07 2026 GMT
Not After : Oct 1 07:22:07 2027 GMT
Subject: CN=7057B91E3294A7C0EEC6B419D4DF1A4910367E6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:5d:ab:56:2f:5e:d6:98:ea:04:c3:62:b2:05:
5a:b4:88:fe:28:77:da:f8:3b:b0:7e:c1:92:c4:2e:
aa:2e:d7:35:9f:2c:78:9c:db:6c:3b:96:a9:92:b7:
97:5d:90:5c:02:6e:ad:4e:e6:b7:21:8d:bc:3b:00:
5e:b3:3f:86:69:d4:21:68:94:83:ec:3b:74:fd:da:
4d:d3:b9:2e:85:31:41:90:e2:dc:0e:45:48:4a:c9:
d6:a1:d7:1f:9a:a1:2f:c1:c8:e0:f3:00:24:19:a8:
5a:cc:55:a6:0c:0b:8a:8c:59:36:2d:f4:89:79:f5:
9c:df:03:41:83:c7:9c:6e:4b:3b:ae:9c:88:c8:3d:
6e:60:1d:db:60:d8:f5:19:46:87:10:cc:58:18:5b:
f2:20:0a:b4:31:6c:8e:3c:7a:8b:af:4a:4f:29:e4:
0c:ec:74:ee:2f:b6:4d:52:fb:01:47:2f:62:44:0a:
f7:c0:d8:62:7c:55:9e:96:26:40:dc:b7:c2:01:d9:
7c:5f:d4:6d:53:9f:67:38:d8:9f:03:21:f7:cc:ba:
73:73:10:e1:9a:74:16:10:f1:86:02:1e:1a:14:90:
58:cc:ec:5b:39:5b:94:e4:e8:25:30:3c:6f:2c:e9:
4f:22:64:1b:56:ca:c9:c1:18:90:52:e8:75:1c:bc:
d6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:57:B9:1E:32:94:A7:C0:EE:C6:B4:19:D4:DF:1A:49:10:36:7E:6C
X509v3 Authority Key Identifier:
keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3231332e3234312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.241.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:08:55:76:1e:32:03:b5:ff:2a:09:66:36:7a:cf:77:a2:e7:
46:68:49:ef:b6:da:b1:09:78:b5:be:66:ec:1f:60:66:58:59:
c3:b6:a6:9c:38:8b:6a:43:4b:4b:cd:d6:df:77:68:44:a0:53:
ac:45:6c:8d:7a:eb:11:65:30:3a:5b:69:35:6c:f2:97:7d:08:
29:58:2e:5b:36:d4:4a:0b:69:c0:2b:75:f0:6d:23:30:dc:ac:
63:e8:d5:7b:8f:2f:ac:b8:82:96:60:33:c3:24:f9:da:06:ca:
64:1b:1c:ab:c6:42:fa:49:55:6d:de:d6:a8:34:ac:d3:58:ee:
68:d9:d8:7c:c0:6a:c2:a5:a7:6a:5e:8e:4d:3f:bb:a2:01:f9:
82:00:54:a6:f9:14:4d:78:31:d4:9b:43:db:52:d8:3b:35:fe:
aa:da:08:ad:e1:36:43:c9:5a:86:77:ef:f4:ac:c6:7e:4c:2a:
db:c0:ee:62:19:0f:09:1b:23:fb:3c:7c:3a:d9:9b:c4:28:12:
e9:6e:b5:8d:02:d4:57:c8:2e:71:db:d2:c1:f1:73:f2:d7:74:
9b:ec:16:58:3a:af:be:70:a3:8d:61:2d:98:01:0d:7a:84:e2:
1d:fb:b2:a7:b5:a7:5c:20:15:79:d7:b0:22:a4:2a:fb:2f:dd:
97:c8:ee:41
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUK3ojDXAQyYeEYogKqadqqu6ebvYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2U4NzBiOWE3MDAzYzRmZDljNTFiZDM1NGE5ZGVmYTNm
Yjc3YjRhOTAeFw0yNjEwMDIwNzE3MDdaFw0yNzEwMDEwNzIyMDdaMDMxMTAvBgNV
BAMTKDcwNTdCOTFFMzI5NEE3QzBFRUM2QjQxOUQ0REYxQTQ5MTAzNjdFNkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCEXatWL17WmOoEw2KyBVq0iP4o
d9r4O7B+wZLELqou1zWfLHic22w7lqmSt5ddkFwCbq1O5rchjbw7AF6zP4Zp1CFo
lIPsO3T92k3TuS6FMUGQ4twORUhKydah1x+aoS/ByODzACQZqFrMVaYMC4qMWTYt
9Il59ZzfA0GDx5xuSzuunIjIPW5gHdtg2PUZRocQzFgYW/IgCrQxbI48eouvSk8p
5AzsdO4vtk1S+wFHL2JECvfA2GJ8VZ6WJkDct8IB2Xxf1G1Tn2c42J8DIffMunNz
EOGadBYQ8YYCHhoUkFjM7Fs5W5Tk6CUwPG8s6U8iZBtWysnBGJBS6HUcvNbfAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUcFe5HjKUp8DuxrQZ1N8aSRA2fmwwHwYDVR0j
BBgwFoAUPocLmnADxP2cUb01Sp3vo/t3tKkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzVkMThlODItNGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQy
Mjc5LzAvM0U4NzBCOUE3MDAzQzRGRDlDNTFCRDM1NEE5REVGQTNGQjc3QjRBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1BvY0xtbkFEeFAyY1ViMDFTcDN2b190
M3RLay5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYzVkMThlODIt
NGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQyMjc5LzAvMzEzODM1MmUzMjMxMzMyZTMy
MzQzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALnV
8TANBgkqhkiG9w0BAQsFAAOCAQEAxQhVdh4yA7X/KglmNnrPd6LnRmhJ77basQl4
tb5m7B9gZlhZw7amnDiLakNLS83W33doRKBTrEVsjXrrEWUwOltpNWzyl30IKVgu
WzbUSgtpwCt18G0jMNysY+jVe48vrLiClmAzwyT52gbKZBscq8ZC+klVbd7WqDSs
01juaNnYfMBqwqWnal6OTT+7ogH5ggBUpvkUTXgx1JtD21LYOzX+qtoIreE2Q8la
hnfv9KzGfkwq28DuYhkPCRsj+zx8OtmbxCgS6W61jQLUV8gucdvSwfFz8td0m+wW
WDqvvnCjjWEtmAENeoTiHfuyp7WnXCAVedewIqQq+y/dl8juQQ==
-----END CERTIFICATE-----
Generated at Mon Oct 5 00:15:43 2026 by rpki-client