Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3139382e32342e302f32342d3234203d3e203133333335.roa
File: 3138352e3139382e32342e302f32342d3234203d3e203133333335.roa (raw, json)
Hash identifier: g5vNQgVc760s/Z1JC4GYB6opkozUQGzJmsoOP23cRWo=
Subject key identifier: C6:D0:F5:E9:80:24:41:0A:F5:15:87:8D:C5:45:AA:2E:8A:A5:CE:06
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 36BBEAB543D67F6929C7D62B6A1E9500FB0E1AA2
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3139382e32342e302f32342d3234203d3e203133333335.roa
Signing time: Wed 09 Sep 2026 19:36:09 +0000
ROA not before: Wed 09 Sep 2026 19:31:09 +0000
ROA not after: Wed 08 Sep 2027 19:36:09 +0000
asID: 13335
IP address blocks: 185.198.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:bb:ea:b5:43:d6:7f:69:29:c7:d6:2b:6a:1e:95:00:fb:0e:1a:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Sep 9 19:31:09 2026 GMT
Not After : Sep 8 19:36:09 2027 GMT
Subject: CN=C6D0F5E98024410AF515878DC545AA2E8AA5CE06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e4:f3:22:13:6c:47:b6:57:84:0a:c4:6b:ce:
07:32:67:82:df:47:4e:1d:db:b3:45:98:f1:fe:2e:
5f:ba:ff:89:8b:62:78:ac:18:4f:4b:c0:bf:6f:19:
9f:4e:ea:e0:64:83:6c:71:c0:6d:26:06:8b:62:39:
24:23:c8:48:0d:c0:97:b4:b9:89:5e:95:b6:8c:be:
45:02:98:25:f3:f7:a6:70:cf:21:f6:df:e5:a6:4d:
b0:ae:c1:74:83:2a:ea:de:86:da:8a:9b:1a:df:3d:
d3:63:b2:20:75:c0:f4:2a:fb:e2:22:2d:b4:72:5d:
01:66:24:cd:e6:1b:49:63:dd:47:9b:a5:78:4e:a0:
e2:39:e8:4d:20:e6:91:62:8b:56:2b:4d:9f:c5:ed:
dd:59:a3:e4:74:98:76:41:cd:ac:d1:3d:66:d8:43:
1a:d5:7c:9e:79:4b:6d:cf:43:28:de:31:12:08:eb:
5b:b7:33:c5:1c:83:ae:af:63:06:62:b3:61:16:72:
6a:ee:61:2a:31:9e:72:9b:8c:4e:8b:c4:bf:2e:20:
8f:88:30:8b:97:e8:bc:d2:fe:ae:1c:fd:f9:a9:8f:
11:b5:4d:63:ac:1d:81:6f:52:4e:b4:2c:f2:f2:0c:
bf:a9:47:ce:bb:60:01:df:5e:f0:27:eb:cb:7a:e2:
1a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D0:F5:E9:80:24:41:0A:F5:15:87:8D:C5:45:AA:2E:8A:A5:CE:06
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3139382e32342e302f32342d3234203d3e203133333335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.198.24.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:38:3f:78:e8:d4:59:ab:a4:df:1c:78:4b:fd:2f:06:7f:62:
a2:11:3f:03:ff:5a:e0:17:69:47:c9:d5:b3:f9:84:b5:af:73:
39:2b:09:19:b8:11:08:8c:90:33:fd:d0:1f:4c:46:13:f6:fb:
fa:0b:5d:16:e9:32:cd:4c:6c:22:42:a7:5a:e6:3f:d7:5c:9a:
56:68:1e:2b:1e:e3:24:13:be:91:9f:94:93:34:f1:1d:6c:82:
1f:79:a6:2f:d6:0a:f4:c9:27:24:d9:ec:db:6e:f0:33:d9:bc:
29:24:77:af:2b:37:e1:4c:00:20:87:24:1f:09:80:13:f1:f4:
7a:56:62:20:35:ee:d1:7b:f0:b5:a7:84:ef:ae:63:3e:87:51:
c9:bb:1b:e1:fb:71:3b:ad:06:25:90:ae:46:ad:1f:fc:e8:0a:
e0:cc:47:9d:85:eb:41:32:78:15:5c:6d:28:77:fa:8f:66:82:
5a:44:98:38:8b:60:ac:11:e2:fd:ea:86:e1:ef:f9:9f:84:a4:
1b:3d:ef:4a:46:d4:5c:e1:98:89:20:35:3d:52:aa:3b:07:40:
f0:36:24:94:59:e8:79:a9:6b:5b:42:17:e8:e1:70:7b:af:7b:
b8:f6:fd:74:0f:50:b2:a9:62:4b:9a:6a:7a:73:02:a8:cf:4f:
02:9e:4c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:27:04 2026 by rpki-client