Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e3135302e3133392e302f32342d3234203d3e20343031383631.roa
File: 3138352e3135302e3133392e302f32342d3234203d3e20343031383631.roa (raw, json)
Hash identifier: 8ZI282AJq5/Vv8dHlgm8v2wR0al75uTyA4MHLH4GJTY=
Subject key identifier: 57:3B:55:B5:C8:8D:DA:07:CB:91:E7:AF:42:41:15:86:D2:B0:B6:5B
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 19B3E67E36BA36084E9B54CE37E93C4210D83063
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e3135302e3133392e302f32342d3234203d3e20343031383631.roa
Signing time: Tue 07 Apr 2026 08:45:47 +0000
ROA not before: Tue 07 Apr 2026 08:40:47 +0000
ROA not after: Tue 06 Apr 2027 08:45:47 +0000
asID: 401861
IP address blocks: 185.150.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:b3:e6:7e:36:ba:36:08:4e:9b:54:ce:37:e9:3c:42:10:d8:30:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Apr 7 08:40:47 2026 GMT
Not After : Apr 6 08:45:47 2027 GMT
Subject: CN=573B55B5C88DDA07CB91E7AF42411586D2B0B65B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4f:f3:57:8a:5f:5b:1f:60:0a:bc:39:c4:73:
b6:67:60:9e:df:16:3c:74:06:b4:9f:7e:66:c2:a4:
4c:9b:24:52:c0:71:fa:bb:6f:81:6d:07:74:c9:93:
a8:4b:6d:74:af:a7:3c:1d:02:04:75:98:c5:d6:f0:
5c:e2:e2:3e:25:07:b4:c4:84:1e:fb:5e:67:52:be:
f4:f6:89:6d:90:42:aa:31:1f:27:27:e5:f6:65:6b:
5f:9e:17:b7:c8:b5:90:90:8f:5e:ff:a1:c8:75:95:
5b:0a:5f:bb:f5:34:34:6c:77:01:07:6c:9e:1e:c0:
66:16:9d:f5:41:5e:97:f9:ef:b2:17:d4:f8:9a:18:
1d:29:21:eb:93:4d:dd:ea:b8:13:f3:05:bc:db:5c:
4d:ba:ea:aa:ba:6f:63:a5:e1:c2:5a:bb:61:67:8f:
81:da:1e:7e:04:fa:01:27:5f:fa:8f:f5:2d:7f:44:
24:1b:60:1a:3f:c3:c6:45:57:1b:9c:6e:30:77:bb:
e8:02:42:33:23:21:4f:81:34:ba:6b:90:de:9a:8e:
5b:73:78:79:d7:23:79:25:b2:51:c4:9a:80:b5:a7:
e3:5a:72:7f:fd:3a:42:0b:ef:c4:b9:1d:a9:dc:15:
c4:4e:e9:84:31:f6:bf:92:27:63:70:a9:59:44:05:
68:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:3B:55:B5:C8:8D:DA:07:CB:91:E7:AF:42:41:15:86:D2:B0:B6:5B
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e3135302e3133392e302f32342d3234203d3e20343031383631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.139.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:cb:1f:05:a5:92:e4:97:43:e9:f7:5e:ef:12:d8:67:37:65:
ea:92:f0:df:1e:36:a6:05:bd:0d:32:4a:00:3c:43:4a:90:89:
47:27:f6:02:52:2b:64:7a:76:d5:e5:08:9a:f5:90:b7:6a:1c:
21:fb:6b:b5:1f:a6:8e:16:18:dc:98:e6:2c:53:3d:dd:6f:d7:
ab:36:b5:7a:ba:8b:ea:e3:33:5c:14:04:c1:5a:95:24:33:cd:
ba:e7:9a:7a:7f:f8:50:db:3b:93:30:14:dc:ec:09:e8:a7:72:
9a:ad:be:76:ab:34:d7:22:33:f5:de:58:eb:96:7b:3c:ca:46:
d5:62:e0:06:3b:0d:9a:7b:04:3a:4d:e7:ec:f9:7c:66:12:d9:
7c:cc:4c:21:09:c3:c3:f6:de:a6:cb:bb:e6:6d:d1:f0:3a:7f:
56:2e:e0:dc:ed:3f:6c:32:02:46:0b:c1:21:c1:fa:0f:c6:b1:
55:ae:50:87:f8:3e:a5:b2:bd:c0:ea:a2:81:ff:68:9b:99:5d:
0f:cb:0f:25:4b:0f:aa:68:62:09:2f:b3:9e:34:38:64:c9:72:
bc:30:54:57:c7:65:2a:62:60:64:7c:33:4e:b0:44:46:dd:3d:
cf:3f:9f:be:cf:a1:f8:bd:a7:50:c3:f2:ed:27:1a:6a:8b:2d:
ac:98:ca:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:50:23 2026 by rpki-client