Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e3135302e3133362e302f32342d3234203d3e20383334.roa
File: 3138352e3135302e3133362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 7yvqD2knS8ZO7oQ3DE8m7GrhfY1bl/+3xMXWhMPBtk4=
Subject key identifier: 67:BF:77:54:CC:3D:84:22:E9:AE:10:E1:26:94:45:70:40:82:9D:25
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 78DF815038D083CCDC048B3FCE3A99CE422ADC2E
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e3135302e3133362e302f32342d3234203d3e20383334.roa
Signing time: Thu 16 Apr 2026 09:41:56 +0000
ROA not before: Thu 16 Apr 2026 09:36:56 +0000
ROA not after: Thu 15 Apr 2027 09:41:56 +0000
asID: 834
IP address blocks: 185.150.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:df:81:50:38:d0:83:cc:dc:04:8b:3f:ce:3a:99:ce:42:2a:dc:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Apr 16 09:36:56 2026 GMT
Not After : Apr 15 09:41:56 2027 GMT
Subject: CN=67BF7754CC3D8422E9AE10E12694457040829D25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a4:31:b2:4e:4f:59:7d:7a:9e:42:77:d6:1f:
36:c9:ae:7c:e0:b6:27:26:9b:49:25:e6:f5:d6:ba:
cd:01:6d:84:ca:30:64:75:47:fe:95:4e:ba:ac:b0:
b9:45:48:e7:88:05:9a:95:e2:d3:2f:41:bb:9c:b0:
c9:d6:36:4b:d3:55:2e:e7:04:bd:d4:c4:ba:7f:9d:
59:dd:f7:9a:4e:8d:90:c1:a7:0d:13:e9:3c:2e:6b:
2b:4d:f7:f9:8e:d0:fe:2b:00:8c:c0:74:b5:82:4a:
cd:15:f0:24:96:89:32:61:5d:7c:ad:8e:45:a1:f4:
cd:6e:a1:36:77:72:cb:a3:40:4e:45:8c:1c:3c:1b:
df:b6:bd:d0:d9:9f:d0:a7:29:bf:0e:59:b4:62:36:
a7:aa:1d:73:f5:f5:71:69:49:bd:69:aa:0d:0e:ad:
a3:51:c9:a3:82:41:5f:08:eb:ba:86:26:0b:eb:09:
cc:da:4f:1b:85:69:27:be:fe:1b:0c:11:40:e7:a2:
08:d1:57:61:df:40:2d:a0:fa:5f:60:d5:fb:ee:28:
a4:68:32:7d:52:3f:31:34:32:b0:bd:65:8e:ba:f8:
63:c6:12:85:f4:da:3e:1e:fc:34:cb:52:26:e0:df:
cf:1a:0d:45:92:03:f1:ee:9a:c7:01:a4:62:6a:2b:
c3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:BF:77:54:CC:3D:84:22:E9:AE:10:E1:26:94:45:70:40:82:9D:25
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e3135302e3133362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.136.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:a3:58:a9:e8:21:d1:f4:24:5c:21:9f:3e:15:17:68:12:e1:
1e:97:45:3a:66:1e:0a:d7:6c:3a:0e:ac:af:cb:78:c8:35:a4:
08:ef:2c:f7:4f:56:13:1a:5d:2b:39:a8:8f:dd:7b:00:a1:b9:
0b:c9:68:30:47:c6:93:40:53:b8:8f:44:7a:2c:68:79:03:67:
17:61:69:00:5a:70:90:42:48:74:7c:0d:95:cf:70:36:32:bb:
cf:25:27:1e:7f:15:3b:36:65:6e:ca:e0:d3:54:f5:db:6f:74:
b8:51:06:a0:94:cf:28:4a:b3:1d:87:dd:2f:57:20:57:5f:30:
f5:25:6a:63:c4:fe:b9:b3:fc:02:f6:3c:34:3a:22:d6:f5:99:
46:4c:7f:94:a9:8c:70:b6:cd:98:01:64:af:d3:49:26:a4:9d:
53:29:72:c5:3f:66:19:4d:12:66:dd:da:5d:42:fb:0a:1e:ec:
52:13:5c:40:6f:a8:f1:a2:87:9d:22:d5:7d:54:ad:ad:6f:f5:
9d:08:3b:ce:aa:85:13:0e:c9:1c:84:f9:69:88:7b:4c:c2:8d:
cf:29:ec:74:b5:c4:03:bf:6d:f6:5c:36:1e:33:8d:9a:5f:9a:
24:32:ac:6a:bf:6a:0d:ef:6c:4e:21:e8:80:c9:39:e5:50:4e:
53:fc:90:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:40:23 2026 by rpki-client