Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e3135302e3133392e302f32342d3234203d3e20383334.roa
File: 3138352e3135302e3133392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: +Css0zU6lyYlCJIluW8iaGvwW+7PVyBP+rBq/8QEBlE=
Subject key identifier: 34:01:F8:26:BB:D8:0A:99:C8:05:D2:2B:F6:31:12:00:BC:F6:E8:F4
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 572018D03574C9E33FDDA5A36B0EED8FEC6C2566
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e3135302e3133392e302f32342d3234203d3e20383334.roa
Signing time: Tue 09 Jun 2026 11:00:33 +0000
ROA not before: Tue 09 Jun 2026 10:55:33 +0000
ROA not after: Tue 08 Jun 2027 11:00:33 +0000
asID: 834
IP address blocks: 185.150.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:20:18:d0:35:74:c9:e3:3f:dd:a5:a3:6b:0e:ed:8f:ec:6c:25:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Jun 9 10:55:33 2026 GMT
Not After : Jun 8 11:00:33 2027 GMT
Subject: CN=3401F826BBD80A99C805D22BF6311200BCF6E8F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e9:8f:fb:f8:20:31:c7:08:1a:37:5d:ea:8a:
8a:24:39:67:c1:1a:99:a7:7a:b0:04:8f:1c:b7:f6:
3a:d9:3c:43:fa:68:50:c1:cb:59:0e:c1:a1:65:b7:
6d:b6:cd:b6:fe:09:a4:18:14:d2:f7:96:2f:1a:bb:
c6:e1:dd:a3:85:07:a1:b8:e6:29:78:5e:1b:9b:d0:
60:71:d6:ac:13:16:49:56:63:6a:14:12:73:1d:b1:
b0:b5:3d:c2:46:a8:c4:8d:59:d0:a0:9b:a7:c2:a2:
d6:b8:eb:46:c1:e3:5b:f4:66:18:bd:b7:90:11:fa:
75:93:11:f7:ae:57:7c:43:d7:49:01:45:6b:70:89:
d2:77:bd:75:3e:a2:d0:96:28:f1:4b:71:79:a6:4a:
fb:39:38:70:f8:d3:cf:a8:81:6e:79:61:36:33:80:
69:b2:ee:f5:a3:dc:65:ed:8f:9c:97:d7:34:7a:83:
64:8c:57:0d:e7:1a:e6:54:19:e5:b3:07:3c:4b:ba:
46:25:75:eb:d9:ae:33:f7:f1:f6:a3:33:8c:a1:f2:
16:58:32:96:27:f2:9a:1f:1b:fd:9e:21:f8:a3:a9:
1d:ae:ed:39:ad:3c:8c:6f:e9:5f:ee:8a:0c:96:8a:
32:c3:98:c5:a6:8f:de:4b:f1:bf:22:e7:f5:6b:4e:
29:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:01:F8:26:BB:D8:0A:99:C8:05:D2:2B:F6:31:12:00:BC:F6:E8:F4
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e3135302e3133392e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.139.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:0f:da:05:22:ae:1c:53:b9:e0:64:d1:bc:7b:19:6c:4e:de:
50:19:1d:bd:e7:07:ba:ab:40:4c:51:2a:42:0e:6d:dc:c8:ae:
a5:21:5e:e8:cb:a2:99:10:e0:87:d8:2b:a4:1e:b7:43:99:7f:
8f:5d:3a:02:e0:54:b9:00:d2:d0:96:cf:fd:3b:f5:ea:e6:50:
e3:b9:5b:11:e1:ae:2d:84:12:a0:63:c8:7c:01:0d:d7:df:94:
64:5d:3c:d9:ef:77:f1:f8:64:84:c8:48:69:b2:3d:1c:ec:3d:
a9:ba:22:56:0a:73:19:91:73:85:2f:58:6e:3e:6d:d2:7d:03:
09:89:16:d4:c7:91:5e:b9:86:c5:83:19:e2:f3:be:c7:d0:99:
9b:cc:25:75:32:b5:e6:0f:6f:07:60:29:af:9a:a9:60:17:e0:
0b:99:e6:2b:35:38:4d:61:ad:f9:f2:b3:8d:9e:3a:2b:5d:37:
35:74:d5:9c:5f:a7:f6:68:a3:59:c2:b9:2a:b2:4d:4b:5f:70:
8f:e5:9f:c1:f8:32:45:76:1a:74:bb:f8:5e:19:40:6e:d9:7d:
ed:10:11:f1:5e:77:cf:32:c9:33:49:7e:fb:88:72:72:e1:0d:
5a:37:e4:5d:59:f4:71:b6:1d:08:48:ac:f8:2e:eb:d4:ff:7b:
ab:b8:6c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:25:20 2026 by rpki-client