Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3230362e3136302e302f32332d3234203d3e203437353833.roa
File: 3138352e3230362e3136302e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: qiBdTbNsK1RRqyxSR2VjASlmZwMNBw5rIX8GvcpOTvg=
Subject key identifier: 4C:26:DB:F3:7E:90:15:76:2A:4B:6F:98:67:D1:96:7D:0F:A5:47:76
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 1E1E549CF2CF87942F37D9815D6CA4211B79088F
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3230362e3136302e302f32332d3234203d3e203437353833.roa
Signing time: Mon 02 Nov 2026 16:32:50 +0000
ROA not before: Mon 02 Nov 2026 16:27:50 +0000
ROA not after: Mon 01 Nov 2027 16:32:50 +0000
asID: 47583
IP address blocks: 185.206.160.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:1e:54:9c:f2:cf:87:94:2f:37:d9:81:5d:6c:a4:21:1b:79:08:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Nov 2 16:27:50 2026 GMT
Not After : Nov 1 16:32:50 2027 GMT
Subject: CN=4C26DBF37E9015762A4B6F9867D1967D0FA54776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:23:a4:5d:41:af:56:cf:9b:d7:68:9a:d3:04:
ba:07:b6:73:58:0e:c3:40:e1:3c:4c:bc:ae:31:2a:
7f:54:3c:ce:6a:de:fc:fa:7e:fe:2b:d2:d6:61:41:
1d:3a:bd:d1:4a:1b:7c:9a:9d:13:e5:86:2f:d6:cb:
aa:84:fb:8d:c4:df:c1:f7:50:a1:b2:0d:ba:26:2f:
f7:1d:bc:1d:bd:02:1f:fe:d3:d7:81:6e:da:d7:9c:
7a:25:7c:c7:a2:31:c3:dd:e7:f6:30:2f:31:ce:f0:
06:31:18:a5:f5:d5:a1:7b:49:cb:f1:91:ba:a6:ad:
46:14:3e:d3:85:38:90:f9:f0:b7:ec:13:c7:47:27:
c4:73:c6:b0:e5:aa:0d:d3:d5:f7:3f:a6:b0:db:1f:
03:ec:41:2d:76:87:55:a1:f0:01:01:6f:e1:86:dc:
0e:5b:52:22:38:24:7f:c8:5d:3a:74:c3:63:eb:e1:
2a:cc:09:25:07:e3:ee:b8:ec:fd:13:63:5f:da:23:
a0:be:77:f4:0d:f3:1e:39:e0:a8:a6:a7:63:51:a5:
a1:fe:5d:db:2c:d2:91:52:5c:1f:86:d1:d8:21:0c:
2a:6c:67:5d:a3:e0:71:a7:c2:c9:59:b1:b0:ae:42:
73:3d:f2:28:ec:88:a0:24:18:19:f8:66:ec:bc:46:
be:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:26:DB:F3:7E:90:15:76:2A:4B:6F:98:67:D1:96:7D:0F:A5:47:76
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3230362e3136302e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.160.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:12:d3:e7:d8:f3:01:8d:0d:68:b1:68:49:f6:01:30:05:49:
48:fd:9b:8b:98:d6:c9:8c:b6:2e:e9:05:29:6b:47:4e:b7:28:
07:62:da:73:29:93:b2:2a:1b:b1:eb:da:a9:af:c8:f3:4c:0f:
9d:f7:29:c1:e1:55:85:9f:55:d7:eb:fe:43:b8:4b:6e:ec:53:
79:0a:0b:34:5a:1c:5a:72:37:22:c2:6a:1b:a5:4f:5d:45:f1:
71:b4:7f:73:54:75:1a:4c:ef:54:d4:5c:37:75:f2:c3:6e:79:
34:c0:98:0f:3e:58:7d:46:d4:3b:ad:0a:77:9f:18:0b:57:c0:
e0:3c:d0:ce:e4:22:37:ec:2a:b5:1f:ba:34:19:5d:36:c5:03:
ff:fa:c2:79:fd:08:01:38:50:d7:07:73:e9:ba:1a:91:0a:eb:
e6:86:03:4e:ac:ef:79:2a:e8:92:24:ea:fc:44:d9:77:0f:d0:
b7:24:2e:60:64:21:59:86:25:ff:64:45:4c:14:6a:6e:1e:76:
ac:8d:58:ce:e6:85:e1:ce:16:d5:8a:8e:e2:f8:6d:29:2b:d6:
35:e0:6b:98:9c:88:b0:02:d7:0b:98:52:c1:26:ef:4e:34:3e:
16:bd:84:91:38:5f:fd:72:b5:27:4d:88:ca:68:21:3a:9f:70:
44:90:04:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:54:46 2026 by rpki-client