Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3135302e3235312e3232342e302f32342d3234203d3e2039333034.roa
File: 3135302e3235312e3232342e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier: BzTkrv0CEdwvD2amKDiqUDeOvl89WiEx4gDSFunGD3Q=
Subject key identifier: 23:EF:BF:29:0E:F6:2D:2E:13:83:AF:97:AA:FF:7C:6A:25:B0:74:12
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 7C2F9AE83916B12A39B1F9A13E641DE08EB294ED
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3135302e3235312e3232342e302f32342d3234203d3e2039333034.roa
Signing time: Wed 15 Apr 2026 14:44:36 +0000
ROA not before: Wed 15 Apr 2026 14:39:36 +0000
ROA not after: Wed 14 Apr 2027 14:44:36 +0000
asID: 9304
IP address blocks: 150.251.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:2f:9a:e8:39:16:b1:2a:39:b1:f9:a1:3e:64:1d:e0:8e:b2:94:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: Apr 15 14:39:36 2026 GMT
Not After : Apr 14 14:44:36 2027 GMT
Subject: CN=23EFBF290EF62D2E1383AF97AAFF7C6A25B07412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:94:19:15:eb:3f:50:6b:89:6f:68:7e:33:e2:
17:08:fc:b1:77:c9:27:42:1c:e8:e8:5b:4e:2c:be:
21:b5:9f:71:31:04:e9:20:fd:61:43:2f:e3:82:ce:
76:71:8b:8d:fc:55:63:8a:47:8b:11:32:a5:83:f3:
ad:03:c1:47:b3:a6:d2:71:df:7f:9c:4e:b2:03:3b:
41:28:4f:95:ea:51:bf:4e:4d:63:d2:54:8f:63:9b:
05:00:58:70:5f:b4:f4:ad:22:ff:7e:1b:c1:64:2b:
f1:28:0d:a2:f0:8d:7f:e2:9c:a4:50:57:aa:c1:64:
7f:2b:d6:68:f2:3f:e9:3e:f5:2a:2f:4e:99:91:27:
95:20:22:74:de:e4:11:08:fa:cf:e1:49:6f:0a:95:
a6:af:54:4a:85:ec:05:c6:ae:7d:60:dd:64:23:8e:
15:5e:6b:7e:98:ee:a1:22:d2:1c:91:56:39:f8:ff:
64:65:dd:08:e2:13:7b:80:93:bb:79:e1:18:12:07:
83:a4:83:61:9a:93:9b:01:48:cf:7c:42:48:15:7b:
70:a1:35:c7:14:e2:e3:42:45:0f:0c:2f:ab:7f:98:
de:d8:22:59:2a:83:25:a7:3d:eb:a8:72:fb:ad:13:
05:8a:b5:fd:ad:61:d6:b4:a8:11:df:58:ac:b5:9e:
ae:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:EF:BF:29:0E:F6:2D:2E:13:83:AF:97:AA:FF:7C:6A:25:B0:74:12
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3135302e3235312e3232342e302f32342d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.251.224.0/24
Signature Algorithm: sha256WithRSAEncryption
68:3c:ab:c5:ac:12:24:32:e3:e6:da:c6:d2:d2:05:0b:62:b2:
35:8b:e6:0d:23:59:dd:9d:76:ed:f3:74:4d:0f:5b:e2:ae:3a:
8a:e2:93:ce:ec:bf:21:d9:e6:c0:c2:b9:93:58:03:cf:75:83:
72:ec:16:c3:1a:34:7a:3a:ca:43:f8:67:99:d4:43:9d:7d:b1:
4e:71:be:f6:49:82:12:cd:b5:22:6f:35:d2:a0:d1:ba:9b:e8:
4b:da:3c:04:89:32:7e:47:aa:35:a6:e0:ea:fa:22:86:59:a0:
b2:60:58:3a:f7:d7:eb:cd:bd:6c:3c:8c:ed:43:8c:6b:89:9a:
bb:0d:83:f2:7b:bd:a3:a9:b8:dd:b0:77:de:85:47:47:6b:d8:
eb:d3:1a:bf:9f:af:58:ad:7e:fd:12:87:14:b7:cc:99:b6:ad:
4b:b3:fb:2e:2a:64:18:b7:d1:56:8b:62:11:39:5c:45:7f:23:
36:37:ff:1d:5a:06:4c:46:24:0e:1c:de:b5:02:6d:47:8d:72:
e5:9b:e3:91:2d:4c:ad:b0:5e:50:3f:07:3c:5c:16:84:dc:dc:
aa:eb:de:af:8b:e0:bd:b8:c7:a5:ae:0e:7e:4c:cd:59:bf:9d:
b5:b1:93:46:7c:1e:5f:3e:fc:ba:03:42:81:0f:de:0c:ff:62:
2b:01:91:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:33:05 2026 by rpki-client