Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3135302e3235312e3233302e302f32342d3234203d3e20313336373235.roa
File: 3135302e3235312e3233302e302f32342d3234203d3e20313336373235.roa (raw, json)
Hash identifier: mBk8NRHt8mVj8QfN/5y6jt6KAJjYfi68D0H75gjY2nI=
Subject key identifier: 09:42:89:57:73:F1:1B:4A:59:7B:D7:E3:40:E4:A5:4B:D2:14:42:B4
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 108C36F0C22C892DB57F603F88F7A694FC25089D
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3135302e3235312e3233302e302f32342d3234203d3e20313336373235.roa
Signing time: Sat 25 Jul 2026 13:54:20 +0000
ROA not before: Sat 25 Jul 2026 13:49:20 +0000
ROA not after: Sat 24 Jul 2027 13:54:20 +0000
asID: 136725
IP address blocks: 150.251.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:8c:36:f0:c2:2c:89:2d:b5:7f:60:3f:88:f7:a6:94:fc:25:08:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: Jul 25 13:49:20 2026 GMT
Not After : Jul 24 13:54:20 2027 GMT
Subject: CN=0942895773F11B4A597BD7E340E4A54BD21442B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:94:23:a7:55:c2:a6:28:fe:1e:07:02:53:3e:
e1:5d:22:1f:b8:2b:85:67:56:c6:9b:cf:97:a2:dc:
04:cd:86:4d:35:bc:c3:af:8c:cb:e9:42:25:a6:55:
c7:24:d2:43:00:3c:de:a2:94:7e:0c:03:40:ea:65:
d3:93:70:0c:d0:53:de:34:8e:42:74:83:ef:6a:74:
24:e8:25:70:75:1f:24:d6:af:11:0f:32:10:9a:59:
93:19:cf:73:39:37:bf:78:e5:a4:a0:d5:e8:85:b2:
e5:40:43:6d:b4:c2:af:2f:83:3d:09:b8:e6:aa:63:
86:b8:ca:05:55:6f:4a:b7:78:e7:4b:9b:71:72:c2:
34:22:38:a6:e2:67:b1:18:fa:84:9b:a6:16:5e:7b:
04:59:70:03:6c:4f:10:02:b0:1b:9b:bc:af:d6:25:
c5:21:cf:43:b2:a7:0c:f1:cb:19:a9:ac:c8:d9:46:
5c:13:c9:78:73:4f:da:f3:67:fe:7b:4d:16:ba:e5:
b7:46:fe:58:5e:d9:a7:8e:fa:0d:bb:14:a0:07:ba:
37:eb:b9:62:80:9c:6d:55:98:4f:b3:08:85:8a:80:
36:d5:98:a8:96:f6:06:33:8c:01:a8:01:d4:56:88:
bd:a3:3b:43:0a:3a:e8:cc:04:44:f0:40:e4:d3:c7:
c0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:42:89:57:73:F1:1B:4A:59:7B:D7:E3:40:E4:A5:4B:D2:14:42:B4
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3135302e3235312e3233302e302f32342d3234203d3e20313336373235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.251.230.0/24
Signature Algorithm: sha256WithRSAEncryption
02:ff:62:00:34:f5:00:99:57:6a:15:13:39:91:d1:b1:e7:de:
41:bd:0b:4f:51:c6:53:3b:76:9b:32:84:7b:18:9a:55:75:5b:
fa:b6:90:1e:d0:b2:1e:2c:8d:62:2d:5a:cf:27:96:a9:90:46:
57:f6:a9:ea:0c:ef:05:92:e8:79:06:57:84:c3:c5:57:26:8b:
95:08:a2:5a:78:69:5a:86:b4:b8:d3:fb:b6:29:f2:7e:37:e7:
3a:88:1a:e2:87:c5:ee:24:29:34:d2:d9:1c:94:55:d2:1b:ac:
fc:13:8e:35:43:7e:96:cf:02:f1:b3:ab:14:70:14:a1:c2:b0:
31:75:b4:be:74:46:2c:72:e3:f8:b7:9c:43:b6:f0:21:6d:7c:
62:57:e3:d5:c6:be:7c:53:68:61:4c:ab:ba:5a:b2:af:fa:74:
e4:a3:84:75:a9:c9:66:73:99:f3:a2:3b:d1:81:11:55:fc:ef:
42:be:0c:75:6a:74:fc:1a:30:bf:93:f2:c7:22:2f:73:f3:27:
e2:6d:09:16:2e:09:82:ea:d0:be:17:f5:86:3e:b0:98:10:fc:
82:4f:fa:4d:1f:58:0b:0e:c0:5d:23:4f:00:0c:51:07:86:c0:
c8:2c:5d:c4:41:cc:52:01:75:e8:40:eb:57:c7:7f:10:c6:a5:
39:69:66:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:29:02 2026 by rpki-client