Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3138392e32362e302f32342d3234203d3e203133333335.roa
File: 3138352e3138392e32362e302f32342d3234203d3e203133333335.roa (raw, json)
Hash identifier: QFY4XbFqZT6aeD30CygzII9I1PSYfFafUrTKRxaWftw=
Subject key identifier: BA:6D:A6:C5:B5:9E:91:3C:8C:91:C4:F7:7A:93:F4:0E:5B:AC:47:DE
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 3C7C33C685BAE6B2691CD903D09E15012A447213
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3138392e32362e302f32342d3234203d3e203133333335.roa
Signing time: Wed 09 Sep 2026 19:36:06 +0000
ROA not before: Wed 09 Sep 2026 19:31:06 +0000
ROA not after: Wed 08 Sep 2027 19:36:06 +0000
asID: 13335
IP address blocks: 185.189.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:7c:33:c6:85:ba:e6:b2:69:1c:d9:03:d0:9e:15:01:2a:44:72:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Sep 9 19:31:06 2026 GMT
Not After : Sep 8 19:36:06 2027 GMT
Subject: CN=BA6DA6C5B59E913C8C91C4F77A93F40E5BAC47DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:df:ea:fc:e3:ba:8e:a7:0b:b5:80:c2:e6:ed:
b1:21:d3:84:6f:6f:a7:11:cb:c2:83:10:e6:f7:fa:
15:e1:0a:10:65:7b:94:c4:56:57:7e:79:c7:e4:8a:
a5:8a:6b:30:52:98:db:ee:83:c6:10:ba:59:16:19:
a5:42:c3:11:49:38:20:cf:5e:b9:19:fe:9e:f9:38:
cd:97:a1:89:18:76:ba:c1:7f:ef:b0:ea:68:86:0e:
0d:82:cb:77:fe:6c:94:61:0d:73:f7:1b:cb:7b:ae:
51:b4:a4:8e:68:f5:21:8b:8a:0f:da:83:e8:30:a7:
46:1d:d5:5c:e3:c4:7b:a7:7d:d9:1c:71:eb:83:c0:
6d:d5:5f:4e:e7:82:1c:f4:7f:ae:cf:70:ea:ec:23:
6e:3e:32:4f:35:9b:e5:71:48:df:7a:af:57:c4:ec:
3f:e8:6b:bd:03:ef:8b:70:64:8f:97:78:ba:1f:70:
da:05:6b:03:66:c7:03:8a:57:b2:6c:1b:0b:90:96:
8b:69:44:f4:fe:36:65:1a:5b:04:90:d1:c8:62:84:
aa:9a:97:41:cb:66:5f:ee:8e:ca:f4:d7:cb:ec:ce:
3f:71:c5:5a:92:b0:9b:4d:85:7e:76:12:7a:b1:d8:
71:5e:ab:27:87:13:7d:4c:c5:99:81:36:5d:2f:33:
8a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:6D:A6:C5:B5:9E:91:3C:8C:91:C4:F7:7A:93:F4:0E:5B:AC:47:DE
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3138392e32362e302f32342d3234203d3e203133333335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.189.26.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:88:eb:99:ee:7f:55:16:a4:81:b4:14:4b:0e:0b:0e:b8:1a:
8f:21:29:e4:38:21:e2:73:6f:13:23:0f:0e:5b:a9:cf:5e:a4:
44:15:7f:ff:00:54:0e:62:0a:c5:19:e1:35:ae:ad:14:89:82:
e9:da:07:71:ea:61:b0:99:bb:8f:09:4d:64:25:21:bf:a9:74:
0b:43:23:92:f3:74:4b:df:33:8a:ae:10:e7:43:7e:06:c8:ec:
3d:6f:7f:eb:40:49:81:dc:63:1c:84:77:5b:3e:96:97:94:6d:
96:ff:8a:c8:f7:9b:89:58:3e:1f:4a:1a:53:d5:c0:3c:5b:48:
ca:9b:a3:05:4a:ed:a2:ae:22:17:a9:d9:c7:a3:7f:ed:3c:c2:
f8:e2:03:55:0b:75:32:14:d5:27:03:e5:fe:02:a2:a3:49:a0:
3f:3f:83:82:ee:d8:f1:f1:b2:95:08:4e:a6:10:e7:69:a5:5d:
0e:8c:f7:fd:f7:1f:33:5d:0e:cc:af:45:75:74:f3:1c:1a:fd:
eb:24:a0:e2:bc:f9:b2:5e:80:56:81:01:bc:54:e8:92:7c:a0:
a1:16:74:cb:2c:06:94:14:26:67:89:25:21:f3:30:36:26:72:
8a:64:e3:95:73:eb:2f:6c:ff:d6:60:21:13:51:fc:7a:56:e9:
a6:30:e8:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 22:22:07 2026 by rpki-client