Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3230362e3136322e302f32332d3234203d3e203437353833.roa
File: 3138352e3230362e3136322e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: 7NGG0MLy9ABTzc3zxOPq8G10AYVJe5giOHPjWs5F8Kw=
Subject key identifier: 6E:8C:63:12:E7:E7:3A:F3:AF:00:BB:CC:34:A5:10:7B:2E:26:5B:ED
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 47FE0F3D7EAD9A42E02E3555FEAC744FEC36EC80
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3230362e3136322e302f32332d3234203d3e203437353833.roa
Signing time: Mon 02 Nov 2026 16:32:55 +0000
ROA not before: Mon 02 Nov 2026 16:27:55 +0000
ROA not after: Mon 01 Nov 2027 16:32:55 +0000
asID: 47583
IP address blocks: 185.206.162.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:fe:0f:3d:7e:ad:9a:42:e0:2e:35:55:fe:ac:74:4f:ec:36:ec:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Nov 2 16:27:55 2026 GMT
Not After : Nov 1 16:32:55 2027 GMT
Subject: CN=6E8C6312E7E73AF3AF00BBCC34A5107B2E265BED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:2d:f2:9e:4f:7d:19:16:f7:f5:f6:b5:4b:e1:
32:2f:e0:1d:12:15:49:9b:7b:7e:7c:e1:98:e1:3b:
f2:f6:08:68:ca:89:50:67:87:61:55:94:59:dc:71:
af:69:97:27:32:0a:87:91:ca:cd:f7:a3:92:34:b2:
66:4e:af:10:04:63:7d:b6:e0:15:db:48:2d:ed:8c:
92:de:0e:a7:0e:c2:e5:16:cf:8b:61:a5:f3:bb:ac:
fa:8b:b2:b7:16:34:b1:e4:b2:72:6d:99:1e:a2:de:
29:96:93:86:d3:95:f1:f1:86:25:aa:bc:d4:9d:d6:
2d:2e:0e:e5:98:80:b2:b2:29:de:45:3a:f3:ac:c4:
2e:ca:13:80:cc:0d:a7:63:37:a4:44:c5:dd:fa:d1:
aa:7d:34:0c:ea:96:d2:d0:3a:6e:54:c0:5b:8f:63:
42:16:20:3d:9c:72:83:23:2c:c7:08:47:e3:00:6f:
d6:fc:c4:40:93:6f:a8:ae:00:06:c5:c0:17:69:be:
50:33:ff:11:5c:e6:7d:b8:d5:78:49:e7:39:67:df:
dd:19:d3:80:da:a1:73:2d:9e:0a:22:9a:47:a2:ba:
f8:bb:a9:42:b5:47:22:3b:ef:ff:0d:9e:97:6a:29:
b8:26:84:51:87:cd:50:40:13:37:11:f4:96:29:fb:
cf:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:8C:63:12:E7:E7:3A:F3:AF:00:BB:CC:34:A5:10:7B:2E:26:5B:ED
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3230362e3136322e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.162.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:9b:fa:12:a0:e1:92:09:3f:b8:57:26:8a:49:92:ed:ea:7e:
be:a6:2b:f6:aa:b4:3e:5d:a4:a9:b5:2b:81:17:60:4d:84:be:
42:14:3c:80:c0:0a:b5:21:0a:97:e2:0c:1e:1b:1a:b3:e1:8e:
53:67:25:9e:c1:48:41:65:3c:27:4d:5e:8c:14:3e:05:95:9a:
28:86:5c:3c:2b:bd:20:ca:28:0a:ba:81:4d:1f:6d:7d:83:65:
3e:07:76:e7:22:be:11:94:13:24:c4:e9:14:9c:1d:58:fb:87:
4f:ca:8d:97:d5:e8:96:6a:8b:c3:a7:37:ed:bf:a9:0a:9a:83:
65:93:4b:73:0c:70:cc:66:5d:b1:9d:4f:7c:fb:d7:81:8c:7c:
bc:0f:e0:6d:9c:46:5b:5f:a5:cc:bb:96:96:46:c9:4e:54:99:
98:9c:4e:1d:64:f2:e7:e8:7f:a3:4d:ee:3e:32:f3:d1:e7:5d:
09:15:07:98:6f:1e:1a:4e:89:51:ca:88:8d:f5:18:40:cf:5f:
7c:50:93:4c:4f:29:c7:15:79:32:e4:1e:97:f3:7e:c4:0a:11:
ce:fc:0f:5e:6b:92:3a:90:86:6a:ac:b6:37:4d:4a:34:cd:f2:
e4:65:7e:83:f5:05:39:f3:28:26:88:e6:5c:9c:b7:16:c6:de:
76:61:4d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 06:38:42 2026 by rpki-client