Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/3138352e38332e3230322e302f32342d3234203d3e20383334.roa
File: 3138352e38332e3230322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: /e85Wzuf/v6kBevhDUz2ON1EtCFjjl8YS1qyPil1OJ4=
Subject key identifier: 9C:2A:91:D1:7E:CD:B3:B7:E2:AA:2A:A6:47:86:80:95:42:2C:D8:93
Certificate issuer: /CN=7374bc6d025135bed9539779a03fdd64abeba11f
Certificate serial: 351C77245EA79F3A2F5822F2A6612F8501253E38
Authority key identifier: 73:74:BC:6D:02:51:35:BE:D9:53:97:79:A0:3F:DD:64:AB:EB:A1:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/3138352e38332e3230322e302f32342d3234203d3e20383334.roa
Signing time: Sat 12 Sep 2026 00:03:42 +0000
ROA not before: Fri 11 Sep 2026 23:58:42 +0000
ROA not after: Sat 11 Sep 2027 00:03:42 +0000
asID: 834
IP address blocks: 185.83.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.crl
rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.mft
rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 16:23:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:1c:77:24:5e:a7:9f:3a:2f:58:22:f2:a6:61:2f:85:01:25:3e:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7374bc6d025135bed9539779a03fdd64abeba11f
Validity
Not Before: Sep 11 23:58:42 2026 GMT
Not After : Sep 11 00:03:42 2027 GMT
Subject: CN=9C2A91D17ECDB3B7E2AA2AA647868095422CD893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:02:00:f2:ed:e6:c7:21:c2:9d:f3:1a:e9:c5:
20:f7:0d:22:45:aa:7d:80:c2:70:82:44:da:6d:c0:
b6:9d:33:5e:64:b7:ba:d4:98:e1:e9:75:0f:ad:c4:
81:ec:41:34:a8:a4:00:3e:f8:40:e7:8b:45:50:15:
0c:d1:0b:29:23:17:38:ae:c3:48:4c:fb:89:50:21:
38:4a:3f:86:02:fa:ff:9d:5e:02:07:7e:06:2c:f6:
94:5f:da:83:15:43:af:86:a1:9b:64:2d:45:65:fb:
35:b4:62:86:ec:53:27:ac:2d:bc:f6:c1:c5:2d:e9:
b0:1f:46:ef:fb:4d:e3:4c:71:a6:b3:49:5f:e7:de:
fb:2f:bc:dd:1b:36:83:03:f8:c6:23:bd:f6:3a:77:
10:fc:dc:80:00:e7:86:74:00:63:31:16:bd:b4:cf:
31:a1:21:21:96:96:24:b2:5f:b3:34:d2:07:d0:73:
f5:58:b5:9d:d1:b9:ed:75:b2:d5:ec:87:ce:28:0e:
be:c9:12:c6:a2:8a:4c:25:01:f3:e2:10:f7:7d:44:
b1:07:40:b2:1d:27:57:e0:4b:e1:78:09:d3:99:75:
fa:b9:10:0d:ba:1d:0a:bd:dc:47:5b:c7:d4:9d:91:
ff:be:4a:5e:f7:0d:0a:83:b8:e6:dc:cf:17:9c:46:
f3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:2A:91:D1:7E:CD:B3:B7:E2:AA:2A:A6:47:86:80:95:42:2C:D8:93
X509v3 Authority Key Identifier:
keyid:73:74:BC:6D:02:51:35:BE:D9:53:97:79:A0:3F:DD:64:AB:EB:A1:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/3138352e38332e3230322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.202.0/24
Signature Algorithm: sha256WithRSAEncryption
05:0a:1c:0a:be:a9:bc:2d:f1:43:e1:99:88:18:07:22:79:df:
0f:34:96:f6:da:f5:c0:d8:9a:70:a7:46:9b:cf:e8:ff:3a:84:
c9:5e:f4:1d:50:ec:65:71:17:22:0b:eb:4c:66:1e:58:6c:d5:
83:f9:43:9d:34:d2:52:84:37:3d:c1:03:e7:16:6b:5b:89:37:
c0:0f:c4:3a:99:21:a2:65:47:85:ee:be:11:c6:33:4a:01:75:
e0:93:d3:11:85:ce:92:34:60:3c:d2:4d:ae:4e:e6:a3:c3:20:
cf:5a:fb:4e:e5:f3:8f:62:0e:25:da:25:fe:85:4b:5f:06:cb:
cd:a3:1a:63:a2:97:0f:31:45:11:a6:42:0c:d0:10:e3:f3:20:
b2:2b:59:62:3c:a2:2f:a2:57:de:9a:cc:7b:2f:60:f8:17:ff:
47:b9:05:c8:ae:35:6a:2f:81:fd:f2:a5:28:b6:b5:77:e4:b8:
09:41:fc:e3:07:39:13:79:e7:98:07:ad:d4:f2:3d:95:d9:07:
10:b5:87:a5:91:c5:92:4b:06:1c:e7:a5:a4:f3:0b:41:c7:d8:
fd:b2:84:a8:e7:fe:e9:f7:6b:c3:94:0a:4d:d7:b6:74:bf:0a:
58:a6:9f:e6:ca:cf:f3:c8:be:e9:ff:7b:5d:08:54:1f:8e:39:
7c:2a:f1:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 06:08:33 2026 by rpki-client