Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3135302e3235312e3232382e302f32342d3234203d3e203235313938.roa
File: 3135302e3235312e3232382e302f32342d3234203d3e203235313938.roa (raw, json)
Hash identifier: +b660PHuKvK/bUq64fSboAZY38sg5iQeS5hsqJxqURw=
Subject key identifier: DA:16:34:3E:D1:76:EB:4A:2B:BA:74:E7:B6:F2:A6:06:78:D9:A0:69
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 25418454A9EF5FA8BD5D568CE586E962FCF7EBD4
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3135302e3235312e3232382e302f32342d3234203d3e203235313938.roa
Signing time: Thu 11 Jun 2026 17:19:51 +0000
ROA not before: Thu 11 Jun 2026 17:14:51 +0000
ROA not after: Thu 10 Jun 2027 17:19:51 +0000
asID: 25198
IP address blocks: 150.251.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 16:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:41:84:54:a9:ef:5f:a8:bd:5d:56:8c:e5:86:e9:62:fc:f7:eb:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: Jun 11 17:14:51 2026 GMT
Not After : Jun 10 17:19:51 2027 GMT
Subject: CN=DA16343ED176EB4A2BBA74E7B6F2A60678D9A069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:12:6b:dc:f8:d2:be:b2:42:4a:eb:f5:2b:bd:
f0:f0:19:7b:2f:88:f3:3c:c1:5d:9d:63:1b:b2:59:
62:1c:fd:a0:11:5c:b1:63:a4:76:2b:fa:17:09:b7:
60:c4:24:a7:37:02:0c:48:65:80:3b:3e:7c:2b:63:
b9:df:02:c0:cd:6f:fe:54:f8:64:5c:7b:de:47:b9:
96:f5:ae:b9:44:f5:72:59:41:79:df:0a:42:ac:e3:
26:d8:8b:3a:9f:84:61:c5:32:2d:89:e5:9c:06:80:
eb:fd:5e:5e:fa:95:2c:47:bc:f1:dd:ca:71:51:cb:
8b:8d:37:76:b1:81:9f:3f:b6:0a:08:bf:5b:8f:1d:
59:c4:4e:69:24:f5:9a:5b:55:a1:a3:d5:95:7c:af:
aa:ba:a6:cd:7b:5f:95:be:e6:22:1c:88:e7:e7:a5:
37:d7:be:ae:7b:44:ea:86:67:41:a9:51:e5:0b:c2:
35:bc:b8:07:67:4d:24:c2:50:85:d2:98:f0:57:fc:
7e:de:7b:04:a7:a9:71:cf:41:51:3f:01:51:d1:42:
52:77:72:6f:d5:11:eb:48:fe:1e:8a:27:bb:bf:c9:
9a:c2:15:27:81:dd:e0:57:ba:51:4f:e4:2a:c5:4e:
e1:b8:61:67:89:45:38:81:7d:0d:fb:4d:9e:fd:2a:
f1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:16:34:3E:D1:76:EB:4A:2B:BA:74:E7:B6:F2:A6:06:78:D9:A0:69
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3135302e3235312e3232382e302f32342d3234203d3e203235313938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.251.228.0/24
Signature Algorithm: sha256WithRSAEncryption
65:77:b5:a5:cf:07:24:8d:37:f9:e8:13:3e:87:88:d2:50:66:
73:c8:f9:54:7a:3d:80:47:e8:c9:61:ba:4c:83:12:e2:3a:29:
f7:c6:65:ca:af:80:b0:7e:56:92:88:0c:33:f2:93:67:c4:f2:
44:c6:7c:a3:fa:7e:17:e5:87:12:59:e9:9b:ae:96:e2:81:30:
65:c0:5b:71:e1:8a:54:74:0d:d8:fd:5d:f7:dc:0e:d9:17:c9:
98:3e:3b:e9:5e:ae:ac:d0:b1:3a:12:e6:6e:d7:cd:81:4f:98:
e6:0a:21:e1:ea:0c:7e:7c:8f:26:40:df:41:e2:2c:c0:16:44:
a3:30:ca:af:de:5f:ca:32:49:f7:82:e6:92:f2:30:a7:5f:49:
64:08:4a:32:10:92:2c:09:02:d7:43:17:27:de:70:bc:e4:c2:
a5:33:01:0c:01:d1:7a:0e:9f:61:d0:28:e8:0d:51:d8:0d:32:
7b:5c:53:93:9a:a8:e8:7c:d8:78:32:eb:c2:e0:4e:b9:5b:81:
37:8d:11:2c:87:e4:10:c6:e6:09:93:06:ff:0e:95:80:ad:b1:
2a:74:02:cb:e4:c0:3d:84:96:d2:8e:ff:ca:68:80:eb:3e:3b:
98:5b:72:44:b2:99:d5:c7:95:58:ed:fa:5e:7c:70:2d:21:0e:
c4:bc:82:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:02:38 2026 by rpki-client