Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3135302e3235312e3233302e302f32342d3234203d3e20343031353630.roa
File: 3135302e3235312e3233302e302f32342d3234203d3e20343031353630.roa (raw, json)
Hash identifier: vgOMULtwy2sSL0bFusZFv+6TOV6Hiad99WUcLDvm7w4=
Subject key identifier: CD:04:A9:9A:BA:C6:8D:1C:ED:64:18:D0:E3:13:DE:32:A0:A3:2A:7A
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 45BFCB2D8B46F0AB92F72E88F3F740CAE8B0383D
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3135302e3235312e3233302e302f32342d3234203d3e20343031353630.roa
Signing time: Tue 22 Sep 2026 05:11:21 +0000
ROA not before: Tue 22 Sep 2026 05:06:21 +0000
ROA not after: Tue 21 Sep 2027 05:11:21 +0000
asID: 401560
IP address blocks: 150.251.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:bf:cb:2d:8b:46:f0:ab:92:f7:2e:88:f3:f7:40:ca:e8:b0:38:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: Sep 22 05:06:21 2026 GMT
Not After : Sep 21 05:11:21 2027 GMT
Subject: CN=CD04A99ABAC68D1CED6418D0E313DE32A0A32A7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:75:a6:6e:7d:c8:f0:42:a1:7e:fe:df:49:54:
c9:27:ca:f1:48:8e:ee:4c:d9:45:85:96:56:c8:0d:
6f:94:79:ef:7d:1b:f6:89:7a:f8:af:d0:ff:e5:81:
11:c9:0b:40:e9:7b:c1:be:e3:94:d0:25:be:f9:bb:
28:f3:90:fd:54:4f:9b:43:64:a7:36:68:9e:0a:30:
f0:2f:00:18:06:43:9f:f7:9e:38:71:c7:97:93:d6:
5d:01:17:81:07:7a:1c:38:95:6d:ea:a0:88:a4:7b:
98:7c:24:70:91:9e:fc:f0:85:06:8d:55:18:c7:37:
a7:b3:a5:f2:2f:47:3e:38:1a:de:af:fd:4c:90:f3:
b8:39:c1:6a:d4:5d:67:ea:6f:72:b0:3b:57:0c:3b:
6f:7d:bc:01:1e:74:74:7c:b7:2b:c9:d6:f9:ed:30:
a4:aa:94:6f:53:4a:34:cf:34:86:62:ed:5e:75:2c:
bf:44:94:61:6d:50:e7:d4:5e:95:ba:6a:4c:cb:b5:
5e:eb:e3:75:a5:d0:5d:a8:4f:03:75:41:64:a8:da:
21:f2:18:7d:a9:cf:e5:13:a4:fc:cd:22:85:34:cd:
3e:3d:2e:6b:e6:22:03:41:fe:c3:b4:24:57:1d:4d:
60:8c:84:9c:37:da:9e:31:de:ca:08:0f:af:ba:16:
25:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:04:A9:9A:BA:C6:8D:1C:ED:64:18:D0:E3:13:DE:32:A0:A3:2A:7A
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3135302e3235312e3233302e302f32342d3234203d3e20343031353630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.251.230.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:6f:4b:16:7f:35:13:24:3e:04:0d:89:de:f8:81:4b:c6:57:
30:c1:7a:ac:99:dd:b4:99:26:25:a8:b3:0b:c5:7f:28:ba:49:
7f:66:75:b4:bd:89:8b:26:b0:a0:66:7f:7e:f6:59:07:e1:25:
37:40:b5:b2:b6:31:84:96:b2:67:a5:f3:bf:77:1b:5d:98:c0:
5d:97:28:70:42:56:d5:a6:1f:31:a4:c6:d5:aa:9a:bf:65:e8:
60:56:29:fd:5b:be:b1:bc:ab:fe:09:3d:9d:db:56:be:0a:9b:
c2:84:8b:03:3d:5f:ca:4b:55:29:ee:7d:c3:ef:ae:32:57:6d:
30:e1:9c:c5:25:ae:ca:3f:50:eb:39:14:11:06:ca:3b:f4:f6:
02:1a:e6:0e:93:f2:d0:0c:18:26:49:c8:82:51:70:61:e7:7a:
85:4e:14:2b:0b:ef:6b:7e:1f:a8:c9:01:86:eb:d4:eb:03:9f:
eb:ed:bb:f7:9e:a3:04:df:25:ff:f9:da:5d:98:0b:86:a4:62:
17:70:53:d2:8a:de:89:32:67:7c:fc:22:f4:1a:db:2c:9c:e9:
a5:5d:47:9c:6e:db:f1:41:c4:1f:5c:e9:51:d9:2c:16:a7:36:
d6:04:e3:9b:ae:2b:ec:7e:2b:41:06:b8:be:5f:20:ed:a8:7d:
54:7a:5a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:46:20 2026 by rpki-client