Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3137362e3135382e302f32342d3234203d3e20323136323533.roa
File: 3138352e3137362e3135382e302f32342d3234203d3e20323136323533.roa (raw, json)
Hash identifier: PIohvWWA8TlWrqiaw9GYxDx3faLmgCg/EMxsDn7iCEA=
Subject key identifier: B9:43:C3:18:7D:EE:17:46:BC:83:AA:6B:20:B3:6E:E0:C9:64:AA:C5
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 760D6E61E0A3182D3EE11BFB405172658E1E5B4D
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3137362e3135382e302f32342d3234203d3e20323136323533.roa
Signing time: Wed 08 Apr 2026 12:49:38 +0000
ROA not before: Wed 08 Apr 2026 12:44:38 +0000
ROA not after: Wed 07 Apr 2027 12:49:38 +0000
asID: 216253
IP address blocks: 185.176.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:0d:6e:61:e0:a3:18:2d:3e:e1:1b:fb:40:51:72:65:8e:1e:5b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Apr 8 12:44:38 2026 GMT
Not After : Apr 7 12:49:38 2027 GMT
Subject: CN=B943C3187DEE1746BC83AA6B20B36EE0C964AAC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:bc:0b:0e:ec:6b:73:74:bd:26:97:f0:c8:15:
74:9b:ce:9a:84:d1:f5:70:12:59:a3:a0:d5:3c:bd:
6b:c2:d8:d5:e9:92:07:d2:3b:bc:f4:b6:35:16:b5:
1b:66:1f:85:97:6d:ba:78:d5:20:a4:2f:0c:1d:1d:
a9:38:c3:9a:7b:b1:93:fe:87:78:07:1e:e7:87:6f:
d7:11:da:e9:c2:c6:fc:8a:11:a7:b1:93:a6:24:11:
fe:8b:1e:c0:6b:56:f0:9b:6b:bc:b0:e1:87:d6:80:
63:a9:63:59:b4:04:b8:72:08:85:ad:3f:9c:5f:4f:
45:2e:16:51:2d:8f:88:2e:be:3e:4f:16:e7:67:9d:
ca:10:a0:ca:ca:85:f6:45:09:3d:85:8d:9d:87:3e:
71:f4:c4:1b:9b:25:ea:ff:8a:c8:4f:e2:b0:8e:e7:
57:0e:4e:13:70:e2:16:18:23:9d:c0:53:2a:26:ff:
84:55:3a:26:a8:5b:06:45:df:fc:b0:ee:46:4d:f1:
49:f5:43:6b:e8:13:09:93:c7:94:dd:2f:b8:8a:a4:
db:f6:35:cc:3c:61:73:6f:4b:f8:fe:3d:87:77:2c:
64:57:79:77:12:30:61:06:8f:2f:65:b3:2e:17:98:
c0:d0:94:1b:db:0a:e1:b9:f6:0f:59:e5:b4:06:ce:
86:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:43:C3:18:7D:EE:17:46:BC:83:AA:6B:20:B3:6E:E0:C9:64:AA:C5
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3137362e3135382e302f32342d3234203d3e20323136323533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.176.158.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:72:7b:6a:cd:e8:a6:8d:85:71:cb:78:f5:85:af:c7:47:4d:
3e:5d:8f:7b:c4:37:e1:9e:22:6d:29:35:37:6b:be:42:60:72:
09:f7:a5:df:c9:ce:a2:2f:4a:4f:c2:5d:c5:db:e7:68:09:dd:
a4:0f:91:d8:21:88:5d:75:58:ca:f8:23:a3:98:6e:49:02:f5:
70:40:4d:7e:53:22:3a:8c:68:20:37:b6:a3:1a:13:25:2a:14:
4b:2d:6b:53:3d:bd:ac:7f:72:0b:c6:e5:5e:b5:0e:33:52:12:
bd:ce:f8:7c:db:c6:3f:89:16:02:46:e7:19:e3:fd:25:75:28:
70:88:0d:e7:5b:f4:1e:07:aa:2e:0d:83:34:a8:2c:0b:77:7e:
46:43:a9:e5:5d:da:8b:42:43:a0:fe:1e:3e:18:b0:c5:b4:b5:
63:74:e1:20:61:c6:85:78:b5:dd:e0:24:de:ee:71:b6:74:84:
ec:99:e0:05:93:d7:d5:a8:32:a9:fb:d1:10:2a:94:68:57:9b:
c7:49:0b:ee:98:5c:cd:94:bb:f0:8d:c3:b1:78:88:70:7f:8b:
03:d5:4f:0f:7f:8e:d5:d2:3c:b3:d2:c2:74:bf:13:29:a7:0d:
10:65:c7:53:c8:b7:a2:4d:6b:a2:ea:80:d3:a3:e1:33:34:72:
64:c2:c4:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:11:06 2026 by rpki-client