Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139352e35382e3135302e302f32342d3234203d3e20383334.roa
File: 3139352e35382e3135302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: HvtrRMdRbVHh4n3fj+g4JznyZ/riE7MRvDXspN8jLHs=
Subject key identifier: D7:0C:5B:6D:F9:74:7F:D1:B3:7B:CF:D7:DD:EF:D2:B6:F8:AE:C5:6D
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 5EF286062319988274EE9A7DF861446AAADDBBB8
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139352e35382e3135302e302f32342d3234203d3e20383334.roa
Signing time: Wed 08 Apr 2026 12:08:36 +0000
ROA not before: Wed 08 Apr 2026 12:03:36 +0000
ROA not after: Wed 07 Apr 2027 12:08:36 +0000
asID: 834
IP address blocks: 195.58.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 11:53:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:f2:86:06:23:19:98:82:74:ee:9a:7d:f8:61:44:6a:aa:dd:bb:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: Apr 8 12:03:36 2026 GMT
Not After : Apr 7 12:08:36 2027 GMT
Subject: CN=D70C5B6DF9747FD1B37BCFD7DDEFD2B6F8AEC56D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d3:9f:74:e5:39:2a:6c:3b:10:91:87:2b:37:
b1:f3:c1:ac:7c:ef:b9:d9:c0:b1:73:ba:b2:65:59:
83:8d:6b:be:b4:3a:5e:c7:a3:9c:79:3b:b7:4d:83:
61:1a:a8:f3:68:ee:c8:85:ae:4c:17:04:85:a4:bf:
9a:f0:eb:e5:88:ec:9a:57:b2:ca:24:0d:2f:58:74:
b4:46:58:81:ac:43:b9:96:e2:74:87:0d:4e:b3:68:
01:8a:ac:e2:8b:1d:66:c7:42:45:32:cf:8c:cf:cd:
43:e4:1a:1d:1d:1b:32:b9:85:44:86:2d:4d:c3:c9:
ce:b5:aa:41:58:25:8d:a1:96:75:a7:61:f3:46:c1:
44:7b:81:a3:eb:54:e4:03:ea:69:8c:df:69:4f:9b:
17:d8:d4:0b:1f:9f:ac:8e:97:fe:d1:c3:dd:8d:b8:
bb:5e:69:9f:7e:11:09:80:61:01:d2:df:44:f5:7b:
e3:ec:66:3b:cb:b1:9a:bd:7f:67:a9:67:ed:20:86:
0b:f1:4b:2e:cf:d7:26:86:da:39:7a:5d:c5:13:2f:
1d:69:42:67:41:8c:88:1f:21:f0:0e:d6:69:2b:9c:
96:6b:b2:98:8d:7b:42:4f:69:82:21:d3:61:38:43:
ae:06:df:df:14:21:12:6e:8b:6b:f6:8e:ba:01:e9:
96:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:0C:5B:6D:F9:74:7F:D1:B3:7B:CF:D7:DD:EF:D2:B6:F8:AE:C5:6D
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139352e35382e3135302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.58.150.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:92:2c:ba:68:a6:67:6a:00:a2:3d:a3:3b:f6:24:77:37:4e:
45:f9:ac:b8:2b:e0:7b:f1:d3:14:6a:4f:21:2a:d1:df:4a:23:
19:02:5c:d7:de:2d:e6:e3:f1:3f:76:85:80:5c:88:c2:ca:5e:
1b:9f:f3:93:3a:fb:f5:42:62:02:4c:8d:f9:fb:8c:8e:4c:47:
e1:33:ee:e6:ea:c4:b7:35:ae:74:86:8c:38:95:85:ff:ec:30:
37:c3:5c:f2:65:6e:4e:85:7e:01:eb:5a:88:57:48:52:62:68:
a3:25:87:b2:3a:f3:25:c1:0f:af:c2:6e:a1:4c:9d:3a:f9:ce:
35:c8:15:e6:1e:15:c7:d0:af:e1:85:4f:f0:67:f2:c7:20:7d:
00:3a:fc:49:4d:00:f8:29:e5:2b:07:3e:59:50:1b:fe:5c:27:
f5:1b:71:2c:27:96:ea:41:ac:d1:3a:18:10:c3:64:95:f1:62:
95:1b:40:7d:07:dd:d4:92:1d:74:27:58:76:27:a2:ab:e2:8e:
c4:24:18:1e:92:5b:f8:6b:d1:e3:29:d6:44:61:c9:d8:d5:70:
2e:19:d2:2c:f3:98:86:fd:60:e8:cb:1d:9d:61:0d:3e:78:90:
c7:ad:74:64:8a:dc:95:e1:ef:21:38:66:00:82:d5:fb:dd:22:
aa:75:fa:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:38:02 2026 by rpki-client