Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3139382e32352e302f32342d3234203d3e203133333335.roa
File: 3138352e3139382e32352e302f32342d3234203d3e203133333335.roa (raw, json)
Hash identifier: zSAMDTAs/32h6x6NIACvS3t2b83eEMoGIq3KvCsK1TQ=
Subject key identifier: 95:AA:C7:48:19:85:44:8B:1D:C2:A5:37:34:FE:FF:40:07:90:B0:32
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 2844B4F6F989163D3894E3B39B22201EFE29EC8E
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3139382e32352e302f32342d3234203d3e203133333335.roa
Signing time: Wed 09 Sep 2026 19:36:11 +0000
ROA not before: Wed 09 Sep 2026 19:31:11 +0000
ROA not after: Wed 08 Sep 2027 19:36:11 +0000
asID: 13335
IP address blocks: 185.198.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:44:b4:f6:f9:89:16:3d:38:94:e3:b3:9b:22:20:1e:fe:29:ec:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Sep 9 19:31:11 2026 GMT
Not After : Sep 8 19:36:11 2027 GMT
Subject: CN=95AAC7481985448B1DC2A53734FEFF400790B032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:03:27:33:14:73:e7:2c:66:df:80:1c:c5:37:
22:dc:d9:49:73:54:85:86:ed:ec:74:9f:ef:95:1b:
d1:c6:38:75:c4:ee:ea:57:95:4c:8a:8a:27:75:e2:
5d:29:09:d5:b6:1d:42:33:fc:aa:5f:5e:d9:5b:0c:
93:f2:56:37:fb:36:86:f1:a9:a6:5a:8e:dc:9a:9d:
cf:72:95:75:b9:1b:20:e8:52:ec:fd:d5:24:55:63:
54:8f:98:18:5b:77:29:33:84:a2:e1:fa:f1:84:c4:
1e:72:95:ab:64:dc:c5:74:ef:55:c5:f3:69:22:7a:
65:5a:d2:7a:61:53:8c:21:fe:a0:6e:94:0c:47:d0:
00:f7:2a:4f:f2:58:32:13:1f:4b:f7:b5:13:a0:79:
90:4c:e1:d2:9d:1a:ca:6b:f9:51:1d:8b:fb:c3:fc:
08:a6:04:0a:39:a3:8b:ca:37:38:20:89:15:59:bb:
bb:65:dd:02:c0:0a:f1:d6:94:fd:a8:f3:8d:b3:2a:
6a:ed:c4:8a:ed:9d:0d:3d:71:4a:23:62:cb:a8:2d:
af:ba:d1:31:2c:52:fe:e2:82:3d:18:29:6e:bf:8b:
85:30:76:c1:9d:e7:82:76:aa:02:cb:0d:5b:bd:7b:
8f:06:1f:ed:1a:d4:e3:b3:e6:9a:d5:8d:0c:8e:ce:
32:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:AA:C7:48:19:85:44:8B:1D:C2:A5:37:34:FE:FF:40:07:90:B0:32
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3139382e32352e302f32342d3234203d3e203133333335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.198.25.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:ea:82:eb:e4:86:09:0d:d7:c5:a6:5a:70:2f:51:01:38:6c:
d0:05:8a:9c:7d:25:f1:eb:40:88:cd:3a:f9:cc:5f:3e:37:2f:
8a:02:23:ba:45:00:15:41:15:c7:ed:45:99:b8:2c:bd:d4:05:
5d:82:d7:58:d8:26:24:f8:74:74:4b:75:e2:07:06:ba:d3:7b:
64:5d:0e:73:93:1a:18:17:d2:01:e8:80:84:07:16:21:74:cc:
ee:87:3b:3a:b5:72:7f:01:df:31:39:2c:7b:cc:fd:5a:9d:ad:
5f:e3:46:9b:65:e5:cb:ba:e1:d7:11:9f:22:38:a0:d7:60:db:
f1:21:e1:ff:34:09:89:8e:9f:b8:e6:1b:f5:d8:00:fd:37:20:
f8:d9:76:6a:c4:85:bf:cf:f1:75:62:3c:92:90:88:ee:8b:5e:
a8:9b:ab:ac:cd:74:97:1a:12:c9:50:66:3d:2d:9c:6b:70:aa:
16:64:bc:87:45:30:6d:41:5b:4d:9e:51:97:4f:59:75:02:5f:
0c:80:53:20:89:e3:b5:3e:99:41:6a:0f:97:a3:37:1a:ef:aa:
ff:ef:b0:9d:b7:71:fc:36:26:1f:2e:f3:70:72:b3:d2:f9:c6:
05:44:5c:fc:5e:84:d9:c3:07:39:18:3a:0e:95:4c:1d:d7:a9:
43:fb:cb:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:29:43 2026 by rpki-client