Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3135302e3235312e3232362e302f32342d3234203d3e20383334.roa
File: 3135302e3235312e3232362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: pvWqzKHhgjqqCU72dAoCFrVOVdnoeAIW8oBs2BK3dhU=
Subject key identifier: 85:1D:F6:54:49:C5:26:7A:61:8C:B6:7C:FD:7E:1E:C0:07:CC:E3:79
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 744283AF7360E5439C700122FC11F16ECE825AB9
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3135302e3235312e3232362e302f32342d3234203d3e20383334.roa
Signing time: Fri 24 Jul 2026 06:06:47 +0000
ROA not before: Fri 24 Jul 2026 06:01:47 +0000
ROA not after: Fri 23 Jul 2027 06:06:47 +0000
asID: 834
IP address blocks: 150.251.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:42:83:af:73:60:e5:43:9c:70:01:22:fc:11:f1:6e:ce:82:5a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: Jul 24 06:01:47 2026 GMT
Not After : Jul 23 06:06:47 2027 GMT
Subject: CN=851DF65449C5267A618CB67CFD7E1EC007CCE379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:4b:53:c4:3a:8b:f6:68:7a:cd:f5:36:49:ee:
08:fe:95:dd:20:4f:4d:62:75:c1:73:2f:cd:e6:e2:
51:75:5e:7e:d7:e2:f3:55:6f:2b:db:6d:ce:e8:2c:
7a:e7:06:eb:2a:26:44:95:85:43:e3:46:9f:29:44:
0a:10:23:b3:87:b4:bc:8a:f0:49:08:74:48:15:ed:
46:0d:59:3c:1c:22:91:8e:9b:77:20:aa:ba:26:c5:
fa:67:0f:b3:97:fd:f2:18:bd:7b:26:9f:d0:05:15:
e3:50:2c:59:22:9f:a8:15:9e:54:84:82:1d:ee:c1:
ad:88:89:f0:10:b7:ae:37:0e:a6:dd:c0:66:2b:2c:
85:a8:6e:bf:51:28:f5:f5:4a:f9:78:b6:fd:6f:1e:
ca:c6:1e:11:29:0d:21:8c:df:19:69:9e:1f:f3:bd:
03:52:7c:94:af:ec:e8:56:26:67:2f:6c:53:47:ed:
3e:dd:2b:17:74:99:26:e6:4f:8d:f7:32:46:8f:04:
3c:30:94:69:83:68:13:66:e2:ea:d9:65:a8:83:81:
5f:ab:4a:42:36:8f:f7:fd:1f:88:ce:96:7e:79:c2:
18:3e:07:77:ce:fd:cc:3c:fa:44:b6:2f:e4:e5:43:
fc:8d:b8:24:ce:a2:94:a7:3d:b6:2d:b1:d8:f9:28:
1e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:1D:F6:54:49:C5:26:7A:61:8C:B6:7C:FD:7E:1E:C0:07:CC:E3:79
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3135302e3235312e3232362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.251.226.0/24
Signature Algorithm: sha256WithRSAEncryption
67:36:d4:a6:ea:1b:43:6f:d5:e0:84:70:00:d4:a9:27:9f:25:
a0:f3:f7:d5:93:de:80:1c:b1:e1:0b:11:c1:e3:62:a2:97:84:
b7:23:4e:f5:f0:6b:33:42:74:c7:b1:63:17:de:ea:21:7d:94:
58:59:a1:d8:68:10:f5:fb:92:60:3a:ac:e4:fb:ac:55:e4:63:
ca:c3:02:e1:c7:bd:15:1c:13:f7:2b:f0:67:0f:b7:fb:0b:5e:
21:f5:64:ec:69:a6:07:51:65:c3:f7:71:e1:80:69:28:a9:bf:
29:d2:4d:08:bb:bd:67:5a:3b:3c:11:c7:79:0e:28:ec:8c:34:
1c:f4:77:b7:b7:d4:6b:89:46:78:09:10:3c:a2:7c:13:e5:88:
40:96:7c:6b:4d:84:ed:c8:6e:02:ec:ac:19:02:76:33:4e:97:
02:68:e1:46:71:0a:b6:b2:7d:47:ad:ee:59:ee:6d:38:81:10:
61:59:2c:c1:6d:27:1e:3f:f0:f3:88:dd:b8:5f:24:58:57:3b:
09:7c:c9:e6:2c:81:c5:f6:81:f4:5e:7c:36:60:5f:ee:b7:81:
05:2c:f3:65:97:fe:a0:ea:a1:bc:e5:10:89:77:cf:26:bb:a1:
97:69:e4:29:59:bf:5e:1b:cf:ef:c1:05:96:9e:7c:5b:9b:60:
08:f8:19:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:04:11 2026 by rpki-client