Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3232392e3230332e302f32342d3234203d3e20323034333939.roa
File: 3138352e3232392e3230332e302f32342d3234203d3e20323034333939.roa (raw, json)
Hash identifier: Gs5ABbPfJ5toptQiquFm8oqwgutT9zFFUytweKBCefo=
Subject key identifier: 3A:EE:91:7E:7C:8D:62:C8:AD:5F:47:C1:25:8E:A1:70:91:64:59:03
Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Certificate serial: 4A45D26BF4F9D4F03278CA0C339E85A568283737
Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3232392e3230332e302f32342d3234203d3e20323034333939.roa
Signing time: Sun 27 Sep 2026 13:49:35 +0000
ROA not before: Sun 27 Sep 2026 13:44:35 +0000
ROA not after: Sun 26 Sep 2027 13:49:35 +0000
asID: 204399
IP address blocks: 185.229.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft
rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 10:12:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:45:d2:6b:f4:f9:d4:f0:32:78:ca:0c:33:9e:85:a5:68:28:37:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Validity
Not Before: Sep 27 13:44:35 2026 GMT
Not After : Sep 26 13:49:35 2027 GMT
Subject: CN=3AEE917E7C8D62C8AD5F47C1258EA17091645903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7b:98:9e:5e:32:a0:ac:a7:d7:cf:c1:b4:46:
9d:96:10:14:45:f3:f9:46:ac:d9:79:08:95:e9:50:
30:a2:89:4f:d1:b4:06:65:a4:a4:d4:a2:b8:37:46:
62:9a:80:26:fc:f8:67:f0:0e:4b:0b:9f:f3:51:8b:
83:b6:c9:ff:b4:86:a2:3d:64:34:57:a8:2a:0a:b6:
3e:d8:04:fe:82:95:36:16:46:4e:b2:8f:18:e8:20:
c5:d7:ff:77:f3:f7:cd:a1:e6:0a:b2:8a:b0:dc:95:
92:0a:03:40:0a:c8:62:e0:94:9e:84:f5:69:94:d1:
25:87:04:df:a8:68:96:bf:26:0c:b9:b4:23:eb:1b:
4d:12:6d:6a:eb:58:9d:f8:a4:7c:a7:5b:db:b2:ed:
75:89:90:98:08:50:27:c4:ee:54:e4:f6:3b:e3:85:
ce:bd:44:7c:65:10:3b:89:62:fd:e9:52:3a:b2:45:
2a:be:fd:1f:28:96:b3:48:25:11:e9:cb:b6:77:f1:
87:68:8b:92:a0:dc:0a:df:7e:95:0b:c5:32:a9:28:
46:1d:f5:05:7f:f3:e2:e5:21:94:af:f7:e4:51:f5:
ab:21:4b:68:ef:08:d4:47:47:9a:36:3f:1f:cd:5e:
8d:48:c5:af:ac:12:c1:c2:4c:8c:ce:28:70:33:0b:
5b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:EE:91:7E:7C:8D:62:C8:AD:5F:47:C1:25:8E:A1:70:91:64:59:03
X509v3 Authority Key Identifier:
keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3232392e3230332e302f32342d3234203d3e20323034333939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.203.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:c4:27:50:7e:e9:34:0c:68:b3:ad:72:2a:e7:61:96:9c:c8:
4e:0e:55:d5:29:7d:4d:63:98:1f:82:fd:c2:d7:e3:db:cb:b2:
15:45:10:d0:5b:27:f3:5f:23:5c:89:1a:92:3f:f3:6a:33:68:
6f:c6:e9:4f:80:27:1e:06:a8:c9:99:45:a4:96:cc:36:4f:b8:
f7:e2:58:12:7e:ef:15:15:e0:b6:39:d9:9f:d5:f4:f9:85:ad:
a6:97:78:f7:e5:b3:62:31:82:06:5c:88:0a:39:8a:42:5c:0c:
ed:67:c2:a2:b8:8c:45:0d:61:15:b2:be:ee:b7:74:04:8d:dc:
8f:87:e6:ff:c9:fc:8a:bb:01:c9:b2:42:5f:8e:6b:9a:0f:4f:
ca:b5:a3:a1:b9:34:df:6c:3e:81:77:10:7c:96:ab:c6:28:1b:
75:12:92:f8:b9:81:c1:5c:9c:d1:ef:a4:9b:60:00:e6:ff:11:
34:a2:c4:b2:33:85:bc:5b:03:c0:66:3d:92:4c:c9:56:df:ec:
71:b8:fa:78:b6:d9:df:73:1f:db:52:38:03:b8:71:40:c0:7e:
e5:c1:31:c7:ce:ee:90:ff:4a:e5:b0:6f:6c:21:35:e4:0b:b6:
9a:fa:51:88:52:b9:77:99:91:ab:f9:49:b9:f9:ce:85:b0:cb:
bf:c0:2f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 18:11:36 2026 by rpki-client