Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3135302e3235312e3232382e302f32342d3234203d3e20383334.roa
File: 3135302e3235312e3232382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 4RKz8UVxB5IB5pcMHciktelZev77uvuZarDXkE7bHzc=
Subject key identifier: 76:C7:1A:A4:4A:98:03:D3:5A:AA:09:B6:9D:FF:B4:E4:51:5D:9C:F8
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 4ABFC8D50F8F137ED714D94FE1904E31E7B1048D
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3135302e3235312e3232382e302f32342d3234203d3e20383334.roa
Signing time: Wed 23 Sep 2026 08:29:05 +0000
ROA not before: Wed 23 Sep 2026 08:24:05 +0000
ROA not after: Wed 22 Sep 2027 08:29:05 +0000
asID: 834
IP address blocks: 150.251.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:bf:c8:d5:0f:8f:13:7e:d7:14:d9:4f:e1:90:4e:31:e7:b1:04:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: Sep 23 08:24:05 2026 GMT
Not After : Sep 22 08:29:05 2027 GMT
Subject: CN=76C71AA44A9803D35AAA09B69DFFB4E4515D9CF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:45:37:dc:f4:68:ac:0c:74:ed:21:e2:da:c6:
a5:31:23:89:a9:ef:a9:84:b8:0b:df:46:f8:f9:07:
ee:ab:75:7d:a7:2a:cf:23:77:99:9c:dd:63:2c:d7:
92:a5:92:11:18:94:98:3f:04:e5:97:b4:cb:03:48:
95:c0:d2:8b:bd:8d:d5:50:14:69:e3:7d:52:c8:73:
0e:14:6e:da:12:3f:9f:77:4e:2c:aa:ca:f0:ff:bf:
15:c0:ba:92:5d:67:3f:e5:b0:d2:f6:22:7e:3e:4c:
54:64:15:5a:d6:0a:32:a3:9c:b6:ca:6f:e8:71:7c:
f3:3a:32:7a:b6:a9:13:d9:d5:9a:62:1a:09:49:37:
a7:38:c6:87:1e:dd:58:33:86:87:cd:5c:a2:38:ea:
f0:61:78:89:7d:d5:8e:a2:30:a4:e6:d8:1f:9b:8f:
5d:1a:67:e6:e8:9d:0a:7a:64:9f:36:b5:f4:23:0e:
a8:fc:3f:08:7e:f8:51:37:0d:f0:79:1c:fc:fe:3d:
e6:42:65:e8:c1:e1:cd:18:e5:4f:89:6d:b5:6a:83:
9c:1b:df:f0:f3:61:ab:0b:0a:65:47:0e:bb:3d:83:
9d:27:24:b2:ab:ce:79:14:ba:60:6f:dd:f7:ee:38:
62:7e:9c:93:6e:e1:c4:06:fe:25:25:cd:d8:3e:a1:
f8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:C7:1A:A4:4A:98:03:D3:5A:AA:09:B6:9D:FF:B4:E4:51:5D:9C:F8
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3135302e3235312e3232382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.251.228.0/24
Signature Algorithm: sha256WithRSAEncryption
23:c5:e1:ad:9a:94:46:51:26:6d:d1:60:83:55:e5:01:30:59:
9c:2a:2b:3c:d7:a9:17:4b:58:37:e2:3c:72:02:e7:ab:03:03:
66:62:6f:e5:85:7a:d8:58:5a:9e:6a:03:b5:08:d8:2c:0a:30:
0e:26:87:d2:fc:3e:9f:fc:b3:aa:1b:c8:56:1f:b3:61:c5:8a:
4c:d0:65:a5:97:22:2c:30:6b:6f:e3:1b:66:11:c2:bd:0d:16:
6b:d5:67:ad:17:81:27:0f:1b:3e:31:f9:7a:26:83:5d:22:7a:
98:c2:4e:bb:27:6f:4a:20:b2:7d:3e:49:25:b3:ee:5e:40:dc:
67:3b:e4:aa:b7:67:3f:cb:8f:bd:bf:3c:65:9d:66:7d:bb:24:
f9:32:00:6b:2a:f4:3f:f2:31:e8:08:1d:0f:ee:46:55:f0:07:
6a:9a:5e:c6:f5:ef:b0:8c:7c:8c:88:e7:49:56:12:a1:19:6f:
c3:38:29:62:78:a2:bd:28:29:0a:a3:dd:4f:0d:6f:34:3d:78:
ba:dd:01:5b:ff:34:fd:a7:eb:3d:55:e8:28:8f:ac:41:09:19:
5c:f4:48:bd:7a:b9:89:cb:1b:80:25:51:b0:5a:dd:2b:aa:50:
1c:16:c9:3a:fe:dd:a9:0b:b5:19:94:d7:37:f0:cc:75:3c:89:
08:bb:58:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:18:32 2026 by rpki-client