Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/3138352e3131362e38382e302f32332d3233203d3e2039343537.roa
File: 3138352e3131362e38382e302f32332d3233203d3e2039343537.roa (raw, json)
Hash identifier: UwcgnpgH5lCZpsSwlAFwu+mTf1/sL+0UfqvfLDv+iW4=
Subject key identifier: F7:6C:E1:DB:07:CC:15:64:75:E3:6F:D8:F0:CB:EA:0D:E4:F3:E7:77
Certificate issuer: /CN=d455dec4f1ebc2a64f5ccc2ee9292731eb82113d
Certificate serial: 73BC62A2E7393F8A663220717A368FAEBA7B4091
Authority key identifier: D4:55:DE:C4:F1:EB:C2:A6:4F:5C:CC:2E:E9:29:27:31:EB:82:11:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/3138352e3131362e38382e302f32332d3233203d3e2039343537.roa
Signing time: Fri 17 Apr 2026 11:29:01 +0000
ROA not before: Fri 17 Apr 2026 11:24:01 +0000
ROA not after: Fri 16 Apr 2027 11:29:01 +0000
asID: 9457
IP address blocks: 185.116.88.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft
rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 11:29:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:bc:62:a2:e7:39:3f:8a:66:32:20:71:7a:36:8f:ae:ba:7b:40:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d455dec4f1ebc2a64f5ccc2ee9292731eb82113d
Validity
Not Before: Apr 17 11:24:01 2026 GMT
Not After : Apr 16 11:29:01 2027 GMT
Subject: CN=F76CE1DB07CC156475E36FD8F0CBEA0DE4F3E777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a4:16:bf:7d:24:1e:6a:01:8a:29:cd:18:43:
a6:cf:19:81:3e:f6:4a:66:50:53:86:74:02:0d:b0:
72:30:f1:eb:55:4f:37:53:aa:1c:2b:7f:62:93:00:
c9:c2:45:c2:11:37:00:33:4b:65:52:9e:41:c7:cf:
52:a3:2b:bc:7d:ab:d6:e1:1b:e6:d1:aa:32:a3:32:
87:7b:69:3b:51:78:c2:8a:92:d0:bf:6d:1c:37:21:
51:33:9f:3f:09:f0:cb:5f:40:50:5b:fe:55:00:49:
81:8c:cf:69:9f:fa:02:54:61:48:07:c8:6b:ee:59:
4f:c9:f8:e4:89:f0:44:86:00:6e:eb:a8:39:5a:74:
d1:e2:7e:36:70:43:6a:5d:bb:e6:b0:65:e8:d8:db:
8d:d7:9b:4d:db:b2:71:a8:aa:e9:85:ed:9d:c9:df:
8a:3e:53:05:00:15:78:33:59:32:bb:d5:f5:8f:a8:
3e:49:be:58:9c:70:5e:6d:5f:4d:43:0f:45:2d:6a:
00:a7:d7:df:eb:2d:35:a6:98:91:18:c9:8c:95:d6:
49:6e:2b:7b:32:33:fa:90:86:12:57:9c:64:0e:ab:
99:60:52:4e:40:11:e4:1e:22:e6:59:7f:07:da:fe:
b3:1f:1b:86:e2:1b:2c:59:d2:da:8b:d7:1e:0e:73:
b6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:6C:E1:DB:07:CC:15:64:75:E3:6F:D8:F0:CB:EA:0D:E4:F3:E7:77
X509v3 Authority Key Identifier:
keyid:D4:55:DE:C4:F1:EB:C2:A6:4F:5C:CC:2E:E9:29:27:31:EB:82:11:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/3138352e3131362e38382e302f32332d3233203d3e2039343537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.116.88.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:0d:29:64:10:62:e0:2c:6b:4f:60:0d:bf:9a:51:7e:0c:6e:
7d:9b:76:1a:01:5c:bf:51:39:9e:93:9b:e3:79:9e:d1:42:dd:
ab:3e:6e:4f:42:d7:4e:5d:51:bc:c7:cc:bb:fe:70:3f:93:45:
db:d2:dc:94:d2:6c:90:14:07:3a:fb:2b:c7:44:92:6c:51:2a:
7e:5c:2d:c1:39:5c:fb:f4:ae:7e:74:8e:7f:36:0e:00:30:2a:
32:8a:fa:54:2b:b9:ef:70:ee:63:87:d1:a5:bc:b9:6f:b4:ef:
29:d2:60:5f:b0:c6:63:51:8f:d9:90:cb:4a:be:5d:e0:2c:81:
89:4e:90:86:a1:91:68:12:59:19:99:01:19:86:88:8a:9d:f8:
56:7c:f9:0b:18:8a:60:ee:3a:cd:a8:2c:f5:e1:7a:f1:16:0e:
0f:3d:1c:97:77:4e:3d:36:a6:49:42:43:0b:80:61:9d:3a:56:
00:15:77:3c:f9:42:58:1a:5d:eb:52:1f:73:44:91:ef:d1:85:
56:ad:ce:89:69:e7:aa:48:83:61:6c:ef:ca:b5:15:e4:18:57:
8c:23:7a:a2:f6:cc:e1:e1:3e:ac:e7:98:f3:45:51:5a:9c:52:
b9:9e:72:d9:24:95:6c:11:a4:70:2f:dc:6a:82:0e:23:64:f3:
60:b1:2a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:48:13 2026 by rpki-client