Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e3135302e3133382e302f32342d3234203d3e20323135313532.roa
File: 3138352e3135302e3133382e302f32342d3234203d3e20323135313532.roa (raw, json)
Hash identifier: YlxEoGFjXXBO7RiWdutsD4firI1753oTxh/IkFHZenM=
Subject key identifier: A2:C3:8C:5D:E7:B8:A2:3D:E3:E5:AC:51:1A:59:CC:47:81:6C:3B:70
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 72F54FA24FD330A03E4256FF65140C23E5EB7332
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e3135302e3133382e302f32342d3234203d3e20323135313532.roa
Signing time: Tue 09 Jun 2026 10:59:41 +0000
ROA not before: Tue 09 Jun 2026 10:54:41 +0000
ROA not after: Tue 08 Jun 2027 10:59:41 +0000
asID: 215152
IP address blocks: 185.150.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 04:23:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:f5:4f:a2:4f:d3:30:a0:3e:42:56:ff:65:14:0c:23:e5:eb:73:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Jun 9 10:54:41 2026 GMT
Not After : Jun 8 10:59:41 2027 GMT
Subject: CN=A2C38C5DE7B8A23DE3E5AC511A59CC47816C3B70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e0:3d:4d:44:8f:94:46:df:64:cb:d2:19:38:
aa:63:cf:a0:13:1f:a3:75:6a:a6:d6:57:13:60:61:
74:d8:d9:88:2a:8f:85:08:67:e6:18:d4:b8:de:a7:
1f:93:cb:ee:69:ef:e7:bb:33:85:25:e1:7f:c2:4b:
cb:e0:2c:1b:57:d5:fd:41:ba:f8:55:77:3e:e6:97:
bc:07:5a:c5:fa:f4:2b:cf:e7:a2:39:d5:1b:50:81:
d3:bc:ef:70:ba:3c:87:d1:d5:98:d8:da:49:13:09:
d9:62:25:54:67:97:91:9b:db:a4:50:2d:d4:4f:f9:
c2:2d:7f:79:1b:4d:0f:fa:a1:b6:19:05:c8:51:56:
e5:78:ad:4a:7d:0a:61:25:3b:1b:a1:25:5c:86:6a:
96:df:c2:1a:bb:2c:4b:eb:a1:41:95:44:ff:f3:b9:
bd:a3:ae:02:0d:46:e4:cf:3f:9e:04:9e:d7:22:5a:
55:7f:f8:6b:82:5a:fa:3e:a1:37:17:08:24:92:78:
e2:db:c2:9b:6f:24:73:96:07:09:51:c5:21:29:61:
23:b7:75:cf:32:cd:fe:63:7c:41:aa:4a:d5:68:c9:
a2:fa:d1:98:17:2c:9c:4e:2b:bc:7e:bc:b1:f3:e0:
97:f8:f2:82:bf:43:65:3d:99:95:3b:2f:83:79:22:
95:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C3:8C:5D:E7:B8:A2:3D:E3:E5:AC:51:1A:59:CC:47:81:6C:3B:70
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e3135302e3133382e302f32342d3234203d3e20323135313532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.138.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:50:16:89:3b:ca:c2:1f:94:e2:13:2b:41:66:80:90:ef:5c:
2a:86:a5:13:e2:47:c0:b1:f0:6e:3f:3e:5e:d2:e7:7c:cc:dd:
6b:5a:3c:dd:9c:6b:9a:fa:8c:26:e9:58:fd:3b:7e:c6:45:78:
cc:28:8b:5f:97:40:a0:e6:15:7d:26:65:35:e5:a3:2f:7a:23:
ec:c4:d8:be:9b:7b:41:f0:a8:d7:11:ef:15:6e:6c:fb:fc:90:
e0:c3:99:e2:79:b8:74:9e:92:ef:83:a8:58:87:a6:c3:2e:24:
82:9e:cf:c2:a4:b6:8f:7c:25:e7:99:52:93:1f:f5:6e:bb:7a:
58:c2:4f:1d:fc:4a:45:18:e8:10:7b:b0:cc:84:2b:76:bc:59:
7e:2e:30:2b:7c:4d:a0:32:70:ae:fc:5a:56:32:49:d3:af:22:
d3:b1:a1:bc:b6:fe:3e:ee:24:69:f0:c9:29:90:38:6a:10:d2:
06:23:ac:bb:0f:55:08:f9:f6:75:a8:6b:03:78:c9:ce:f4:5c:
46:43:34:ca:4f:d9:36:fb:e5:22:c6:1d:a6:24:6f:27:61:16:
c8:2e:cc:3e:7d:36:57:0f:91:d7:11:c9:db:79:09:8c:a8:fb:
b2:c8:fe:1d:e8:c8:10:8e:9d:19:ec:4c:c9:d7:94:f9:46:73:
f6:03:ed:ae
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUcvVPok/TMKA+Qlb/ZRQMI+XrczIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0
MGI1ZjNlMzAeFw0yNjA2MDkxMDU0NDFaFw0yNzA2MDgxMDU5NDFaMDMxMTAvBgNV
BAMTKEEyQzM4QzVERTdCOEEyM0RFM0U1QUM1MTFBNTlDQzQ3ODE2QzNCNzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf4D1NRI+URt9ky9IZOKpjz6AT
H6N1aqbWVxNgYXTY2Ygqj4UIZ+YY1Ljepx+Ty+5p7+e7M4Ul4X/CS8vgLBtX1f1B
uvhVdz7ml7wHWsX69CvP56I51RtQgdO873C6PIfR1ZjY2kkTCdliJVRnl5Gb26RQ
LdRP+cItf3kbTQ/6obYZBchRVuV4rUp9CmElOxuhJVyGapbfwhq7LEvroUGVRP/z
ub2jrgINRuTPP54EntciWlV/+GuCWvo+oTcXCCSSeOLbwptvJHOWBwlRxSEpYSO3
dc8yzf5jfEGqStVoyaL60ZgXLJxOK7x+vLHz4Jf48oK/Q2U9mZU7L4N5IpXZAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUosOMXee4oj3j5axRGlnMR4FsO3AwHwYDVR0j
BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx
ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD
MTgtTS5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt
MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzEzODM1MmUzMTM1MzAyZTMx
MzMzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzNTMxMzUzMi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEALmWijANBgkqhkiG9w0BAQsFAAOCAQEAalAWiTvKwh+U4hMrQWaAkO9cKoal
E+JHwLHwbj8+XtLnfMzda1o83ZxrmvqMJulY/Tt+xkV4zCiLX5dAoOYVfSZlNeWj
L3oj7MTYvpt7QfCo1xHvFW5s+/yQ4MOZ4nm4dJ6S74OoWIemwy4kgp7PwqS2j3wl
55lSkx/1brt6WMJPHfxKRRjoEHuwzIQrdrxZfi4wK3xNoDJwrvxaVjJJ068i07Gh
vLb+Pu4kafDJKZA4ahDSBiOsuw9VCPn2dahrA3jJzvRcRkM0yk/ZNvvlIsYdpiRv
J2EWyC7MPn02Vw+R1xHJ23kJjKj7ssj+HejIEI6dGexMydeU+UZz9gPtrg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:07:05 2026 by rpki-client