Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3232302e32302e302f32342d3234203d3e203133333335.roa
File: 3138352e3232302e32302e302f32342d3234203d3e203133333335.roa (raw, json)
Hash identifier: vL7ry1eHNEEUNOHfr73OmazJWzPVQgE58wGBIv9QLn0=
Subject key identifier: B2:2D:CD:D8:4E:12:C5:53:44:F1:D5:2D:56:12:6A:6B:CA:83:18:E2
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 5C6A4289211068993DDC1AFA245B2440F9091B62
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3232302e32302e302f32342d3234203d3e203133333335.roa
Signing time: Wed 09 Sep 2026 19:36:05 +0000
ROA not before: Wed 09 Sep 2026 19:31:05 +0000
ROA not after: Wed 08 Sep 2027 19:36:05 +0000
asID: 13335
IP address blocks: 185.220.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:6a:42:89:21:10:68:99:3d:dc:1a:fa:24:5b:24:40:f9:09:1b:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Sep 9 19:31:05 2026 GMT
Not After : Sep 8 19:36:05 2027 GMT
Subject: CN=B22DCDD84E12C55344F1D52D56126A6BCA8318E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5f:03:85:12:ac:ba:da:83:ba:77:f6:d0:0c:
55:20:9f:4e:71:44:b5:ee:31:3c:57:d1:e8:5d:e1:
03:cc:4e:bd:80:8a:dd:39:20:70:c8:96:d9:f7:12:
8d:08:75:d3:a8:6e:7f:f3:17:f2:d9:6c:09:26:26:
31:d8:0c:b8:95:49:d6:e1:39:33:5d:22:fa:63:4f:
cf:1a:2f:20:1a:8b:24:94:b8:a6:ee:31:28:7d:5b:
4b:7a:d4:7e:4f:45:e3:15:ce:8b:ce:1f:b3:4a:27:
e4:a9:4e:5c:d0:43:1c:bf:50:b2:b7:3a:82:2d:99:
b6:0f:b5:61:93:35:0b:1d:c8:ef:1d:b8:03:35:12:
4e:cf:a4:77:90:b1:8b:66:0c:61:d9:5a:0e:0d:1d:
53:46:76:62:e4:df:02:cd:4b:dc:92:0d:48:0c:16:
c0:4d:83:42:2d:d4:8a:87:60:68:a9:0a:f0:6d:91:
61:5f:65:87:cf:e4:9a:62:53:fc:96:48:23:5a:ab:
d9:b2:e4:cb:3f:9e:aa:19:a7:bd:67:00:36:39:11:
fd:c3:19:d9:a6:dd:1a:2c:9a:32:56:c1:e6:3f:c2:
42:3b:6d:be:94:58:b3:e8:b8:74:02:06:c9:7e:d2:
d3:52:f7:2b:07:88:b6:89:34:4d:35:80:49:ec:c6:
c1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:2D:CD:D8:4E:12:C5:53:44:F1:D5:2D:56:12:6A:6B:CA:83:18:E2
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3232302e32302e302f32342d3234203d3e203133333335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.20.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:6b:54:d2:2b:7c:1f:53:fd:2e:0e:d3:8a:4f:d9:b5:b9:5e:
95:90:0c:bd:99:a1:47:7c:be:2f:6f:82:8b:05:6f:6c:94:94:
98:a5:a1:17:64:f5:72:25:fd:46:0f:82:d0:96:79:20:a7:9d:
5a:21:b0:2d:5e:13:2b:d6:51:b5:91:f6:2f:7b:97:69:b7:02:
f1:2c:90:72:6d:a6:f4:5d:01:17:a5:17:0b:0a:89:58:0e:05:
67:aa:3f:9b:b2:c1:54:8c:22:da:3a:37:94:1d:70:a7:6a:71:
05:d9:1e:c9:4a:d9:d7:4e:61:d5:23:31:a3:2c:c9:16:69:a5:
78:ab:be:1f:d8:97:67:2e:fa:70:b0:e6:ce:7a:89:14:c2:2f:
32:84:57:d6:01:44:6e:fb:fd:78:ad:15:ac:60:3a:11:9c:87:
2e:ee:8a:8e:a0:30:cc:20:f6:bc:cc:a4:b4:7e:6c:6f:e9:3b:
2a:39:50:5f:c9:7a:a6:77:f6:c3:3e:74:00:93:06:cc:90:6f:
bb:6f:f7:08:fa:22:dd:f7:4d:30:22:1f:f6:8c:fc:f7:d8:bc:
15:c5:ef:28:e7:49:69:ef:64:92:41:3c:22:9e:c0:e7:7a:8b:
9c:a2:f8:93:10:91:a2:80:95:dc:84:31:ed:73:e1:d4:93:7c:
95:9f:1f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:52:52 2026 by rpki-client