Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3135302e3235312e3232352e302f32342d3234203d3e20323132323338.roa
File: 3135302e3235312e3232352e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: 5++guIPzefH5qk3d1r10m+wo361JOjbMdqdsBD/FSXg=
Subject key identifier: 27:1B:23:09:8F:F9:D1:BA:52:2D:F0:32:D8:46:57:D9:76:04:B4:0D
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 325397937B3F744ED50A9235D6A6C24F03FBDD13
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3135302e3235312e3232352e302f32342d3234203d3e20323132323338.roa
Signing time: Mon 30 Mar 2026 10:24:38 +0000
ROA not before: Mon 30 Mar 2026 10:19:38 +0000
ROA not after: Mon 29 Mar 2027 10:24:38 +0000
asID: 212238
IP address blocks: 150.251.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:53:97:93:7b:3f:74:4e:d5:0a:92:35:d6:a6:c2:4f:03:fb:dd:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: Mar 30 10:19:38 2026 GMT
Not After : Mar 29 10:24:38 2027 GMT
Subject: CN=271B23098FF9D1BA522DF032D84657D97604B40D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c9:7b:be:30:5d:c8:eb:11:84:f0:05:7a:f0:
8a:91:cc:c5:60:7e:78:f2:59:78:76:6d:58:c3:c0:
c3:a9:9c:39:5c:cc:42:27:45:0c:3a:05:60:ba:7e:
69:38:b5:06:1f:05:4c:ae:4b:0c:52:0a:da:be:f7:
36:e0:46:12:9a:79:4d:a2:a8:ef:8d:86:7e:cb:af:
9f:79:c9:b4:db:fd:91:16:6f:dd:6d:08:77:5a:6e:
af:08:fc:1c:1d:36:f0:41:bf:f9:58:af:51:84:51:
80:f1:ea:06:11:2d:ce:e2:ac:0b:58:10:c9:d9:dd:
96:f1:c0:79:be:63:5d:93:13:eb:a2:30:ac:d1:c6:
56:f3:b6:c6:37:00:80:5a:e0:e7:ef:1d:ff:6c:ca:
96:7a:7b:6b:f8:e6:82:d9:ad:aa:44:b9:ed:44:9b:
9d:8c:f6:a1:49:bc:72:66:51:43:21:7a:64:bb:5e:
47:56:b8:1f:91:68:2a:62:fc:e2:68:58:df:0a:0f:
3e:a9:d6:73:61:66:e2:7b:30:00:c4:1d:c5:b5:b4:
96:c9:69:49:28:84:93:0a:12:8c:a6:7a:67:45:bb:
75:5b:1f:b6:1b:6d:8c:d7:f6:0c:a8:e5:9c:c6:3a:
fc:c0:7c:91:5c:fe:75:ca:7a:04:e5:86:2a:5d:d3:
65:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:1B:23:09:8F:F9:D1:BA:52:2D:F0:32:D8:46:57:D9:76:04:B4:0D
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3135302e3235312e3232352e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.251.225.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:f3:26:b2:64:27:76:4c:a3:ad:7c:f3:c2:dc:c5:23:26:b4:
72:62:de:52:b9:01:d7:c8:40:de:fa:53:6c:ae:6b:71:11:7f:
08:14:65:65:ff:03:f9:f9:3e:c0:f2:31:09:2d:09:e6:0e:73:
ca:87:94:c5:20:e7:03:1a:8e:b7:06:82:0c:be:4d:c0:6c:4e:
ed:85:1b:10:79:bb:31:49:64:10:55:1d:6d:83:5c:f6:dc:7b:
3c:f2:10:62:7b:77:c8:97:2a:26:f7:f5:cc:29:fc:98:92:de:
9f:94:15:97:f2:3c:8c:f0:b5:e9:d5:83:a3:dd:07:a4:40:bf:
64:99:42:bc:4f:0b:53:93:b1:fc:87:a4:53:b8:bf:b4:ee:92:
f8:c3:f4:9a:d8:c5:82:7e:82:9f:38:2b:8c:eb:9e:5f:61:34:
e4:b5:0b:2b:aa:94:58:19:df:be:33:fd:cc:96:1f:ba:45:02:
a0:4a:f8:77:fd:69:b0:87:1e:c3:44:bd:9b:b3:01:bc:7b:8f:
54:ed:6d:b9:f0:08:f5:0c:97:b8:e2:da:8a:d4:1e:07:2f:80:
29:da:27:88:31:67:74:71:47:34:82:eb:bf:62:c4:31:44:42:
d2:ea:d1:2b:90:71:0e:2a:e0:51:3c:a4:89:ff:df:6b:f2:4c:
77:48:8d:82
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUMlOXk3s/dE7VCpI11qbCTwP73RMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGQ3ZmZhZTMwMGRlZjA4NzZiZjg0ODkwZmI2ZWExN2Jl
ODQxYTRkMzAeFw0yNjAzMzAxMDE5MzhaFw0yNzAzMjkxMDI0MzhaMDMxMTAvBgNV
BAMTKDI3MUIyMzA5OEZGOUQxQkE1MjJERjAzMkQ4NDY1N0Q5NzYwNEI0MEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjyXu+MF3I6xGE8AV68IqRzMVg
fnjyWXh2bVjDwMOpnDlczEInRQw6BWC6fmk4tQYfBUyuSwxSCtq+9zbgRhKaeU2i
qO+Nhn7Lr595ybTb/ZEWb91tCHdabq8I/BwdNvBBv/lYr1GEUYDx6gYRLc7irAtY
EMnZ3ZbxwHm+Y12TE+uiMKzRxlbztsY3AIBa4OfvHf9sypZ6e2v45oLZrapEue1E
m52M9qFJvHJmUUMhemS7XkdWuB+RaCpi/OJoWN8KDz6p1nNhZuJ7MADEHcW1tJbJ
aUkohJMKEoymemdFu3VbH7YbbYzX9gyo5ZzGOvzAfJFc/nXKegTlhipd02WNAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUJxsjCY/50bpSLfAy2EZX2XYEtA0wHwYDVR0j
BBgwFoAUDX/64wDe8Idr+EiQ+26he+hBpNMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODExM2RkYTYtN2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4
Y2ExLzEvMEQ3RkZBRTMwMERFRjA4NzZCRjg0ODkwRkI2RUExN0JFODQxQTREMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RYXzY0d0RlOElkci1FaVEtMjZoZS1o
QnBOTS5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODExM2RkYTYt
N2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4Y2ExLzEvMzEzNTMwMmUzMjM1MzEyZTMy
MzIzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzMjMyMzMzOC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAJb74TANBgkqhkiG9w0BAQsFAAOCAQEAC/MmsmQndkyjrXzzwtzFIya0cmLe
UrkB18hA3vpTbK5rcRF/CBRlZf8D+fk+wPIxCS0J5g5zyoeUxSDnAxqOtwaCDL5N
wGxO7YUbEHm7MUlkEFUdbYNc9tx7PPIQYnt3yJcqJvf1zCn8mJLen5QVl/I8jPC1
6dWDo90HpEC/ZJlCvE8LU5Ox/IekU7i/tO6S+MP0mtjFgn6CnzgrjOueX2E05LUL
K6qUWBnfvjP9zJYfukUCoEr4d/1psIcew0S9m7MBvHuPVO1tufAI9QyXuOLaitQe
By+AKdoniDFndHFHNILrv2LEMURC0urRK5BxDirgUTykif/fa/JMd0iNgg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:20:30 2026 by rpki-client