Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS0.roa
File: AS0.roa (raw, json)
Hash identifier: wPNLsofTjgJOMPHky2epOr89gEjFsJbwy9xLaD+jOpY=
Subject key identifier: 02:42:88:0D:59:77:24:73:B2:33:66:0E:27:B5:16:CD:25:05:26:DD
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 48EF41F70C414152EF4FF267E273002BCB246371
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS0.roa
Signing time: Fri 12 Jun 2026 05:39:11 +0000
ROA not before: Fri 12 Jun 2026 05:34:11 +0000
ROA not after: Fri 11 Jun 2027 05:39:11 +0000
asID: 0
IP address blocks: 152.89.251.0/24 maxlen: 24
193.142.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 17:54:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:ef:41:f7:0c:41:41:52:ef:4f:f2:67:e2:73:00:2b:cb:24:63:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jun 12 05:34:11 2026 GMT
Not After : Jun 11 05:39:11 2027 GMT
Subject: CN=0242880D59772473B233660E27B516CD250526DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:69:ed:56:68:4e:d9:bf:14:1f:4f:ca:f0:09:
0d:da:ed:07:2d:9a:27:6e:a4:52:9c:65:57:d9:63:
3b:05:9b:cd:6d:7e:fb:ed:3c:2d:3a:e9:1c:b5:dc:
8b:c0:e4:1d:6e:aa:ae:a3:66:be:4f:de:99:e5:0a:
26:8f:ad:ab:83:0b:f1:b9:30:54:1b:70:b3:e0:f6:
93:3d:e9:a2:59:02:db:de:b4:47:f7:87:e4:f8:5a:
08:99:bc:05:84:5e:b0:9c:5b:33:27:58:2a:82:2e:
83:01:ac:f1:f2:91:f6:03:0f:6a:c0:59:1c:12:ce:
37:13:ea:0a:c9:3f:67:8d:e2:76:40:b3:c5:c8:3a:
8e:fc:d7:24:38:94:7e:28:01:0f:bf:b8:51:87:40:
a5:7f:27:3b:cf:84:3e:9a:33:8e:12:31:24:cd:9d:
fa:8b:1d:a3:42:37:df:4e:53:25:ea:47:79:9e:62:
72:55:cc:49:f9:87:38:2f:b3:ef:fd:6f:dc:04:fa:
e2:81:a6:80:6e:48:8b:98:36:09:d0:ab:6c:58:dc:
cf:75:ce:7b:f1:60:1b:9e:c4:6a:e2:0d:40:cd:46:
77:04:b9:df:15:5c:00:87:d3:31:9f:c6:d3:2b:3d:
7d:e5:08:26:fe:f3:6d:dd:0e:d8:22:f5:d7:e8:b9:
a9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:42:88:0D:59:77:24:73:B2:33:66:0E:27:B5:16:CD:25:05:26:DD
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS0.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.251.0/24
193.142.18.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:04:c3:c7:54:dd:c3:8c:a3:37:ef:67:8e:1e:db:78:82:99:
ef:98:19:c6:b2:d7:bb:bf:8b:83:d4:7f:f7:1c:ea:90:af:f7:
7d:ea:83:1e:47:98:fe:24:d8:b0:c4:42:de:a4:22:11:a0:45:
61:92:4d:15:84:13:01:9b:c4:ca:2f:bd:15:75:59:a9:72:4b:
58:b8:20:dc:2d:cc:55:cb:76:5b:12:50:0a:92:e9:e5:09:08:
36:4b:19:f2:a3:46:64:0d:90:99:d2:0e:13:75:c7:51:ee:7a:
70:8f:77:b3:ff:d6:e1:eb:51:88:70:ac:15:ba:38:07:a1:e0:
07:b3:64:34:81:36:07:7b:fe:e4:9c:88:42:a2:61:cd:65:b0:
f8:9c:35:39:85:03:ef:19:01:1b:ca:b1:eb:e8:bf:8b:b7:1b:
14:37:f8:c4:3a:ac:ee:bb:91:5b:0f:7d:db:b1:33:8e:35:cf:
b8:89:67:bb:dd:8e:0d:ad:a7:53:ed:18:04:39:f7:44:21:29:
c3:1e:95:cd:14:e2:97:81:5c:04:0c:24:8d:46:09:ad:f0:38:
c0:36:dc:b2:4e:19:a2:1e:3f:46:49:2e:f6:80:94:cd:eb:af:
0a:4c:69:1f:75:a5:00:71:5c:fe:a4:8c:7d:d1:d0:14:b3:a3:
f4:5f:67:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:16:51 2026 by rpki-client