Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/38332e3135302e3231362e302f32322d3234203d3e203631333137.roa
File: 38332e3135302e3231362e302f32322d3234203d3e203631333137.roa (raw, json)
Hash identifier: YxNW6a8HxzkzN6CZtt7GTDZSAkmyN7bcTWAHWzYk9XA=
Subject key identifier: D3:68:6A:C3:32:CF:D3:4D:D8:DA:12:80:54:79:44:85:29:36:55:68
Certificate issuer: /CN=5e5179bb1757068d7028510feeb1177aa7cc8818
Certificate serial: 0A30321822694C345F2E949E80B135D6EB12F110
Authority key identifier: 5E:51:79:BB:17:57:06:8D:70:28:51:0F:EE:B1:17:7A:A7:CC:88:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/38332e3135302e3231362e302f32322d3234203d3e203631333137.roa
Signing time: Thu 10 Sep 2026 18:49:34 +0000
ROA not before: Thu 10 Sep 2026 18:44:34 +0000
ROA not after: Thu 09 Sep 2027 18:49:34 +0000
asID: 61317
IP address blocks: 83.150.216.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.crl
rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.mft
rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:30:32:18:22:69:4c:34:5f:2e:94:9e:80:b1:35:d6:eb:12:f1:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e5179bb1757068d7028510feeb1177aa7cc8818
Validity
Not Before: Sep 10 18:44:34 2026 GMT
Not After : Sep 9 18:49:34 2027 GMT
Subject: CN=D3686AC332CFD34DD8DA12805479448529365568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2f:e1:f2:38:05:84:d4:0e:7f:49:80:c3:50:
25:df:52:11:b9:eb:0a:36:80:15:5b:43:a8:62:ae:
39:a4:4d:98:e9:60:69:b4:f9:ee:b0:3e:5d:8f:af:
17:4a:1f:c4:7e:82:f0:45:92:ae:75:90:09:c8:68:
9d:9e:c3:1b:71:e4:12:7f:91:93:07:80:81:c8:33:
49:c0:d3:55:30:ec:0b:f2:61:26:4c:52:20:2a:1d:
f3:24:de:51:27:0a:77:5b:b5:3b:a2:f5:7f:d9:8c:
d8:9a:cf:c9:59:94:a5:18:39:e2:56:18:bf:13:02:
0c:50:e6:c7:0f:ba:31:b7:a5:eb:f4:d9:df:20:d1:
1a:43:65:08:b7:c0:e6:81:93:d8:64:68:53:6f:41:
af:87:ed:58:e1:ce:ba:32:67:85:9b:67:cc:a9:fb:
1e:12:84:60:9d:d8:2a:cf:62:22:74:df:62:e1:0e:
ee:50:1a:89:e8:05:84:7f:b6:5c:62:ad:53:5a:f8:
26:20:08:97:d8:54:90:e2:75:7a:29:9a:f1:8b:da:
37:6f:b1:fc:76:2c:f7:fd:94:95:1d:c3:06:73:ec:
a2:5a:5b:1f:8b:73:2d:47:d4:ee:51:30:77:f6:a8:
f7:71:f9:62:c5:d0:ad:5a:b9:47:3e:d2:72:0a:01:
af:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:68:6A:C3:32:CF:D3:4D:D8:DA:12:80:54:79:44:85:29:36:55:68
X509v3 Authority Key Identifier:
keyid:5E:51:79:BB:17:57:06:8D:70:28:51:0F:EE:B1:17:7A:A7:CC:88:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/38332e3135302e3231362e302f32322d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.150.216.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:9d:6b:90:20:5b:d2:25:b3:4d:54:f6:ef:03:ea:06:b5:a3:
21:64:c7:86:32:6b:a1:44:a7:d6:08:d7:e6:8f:92:9d:98:f0:
13:e0:b4:99:14:b7:8b:47:d7:7e:42:aa:ff:ed:08:f2:24:83:
62:f9:cd:db:a4:79:ce:a2:e8:8b:6a:6d:d5:ab:ad:35:ae:e1:
88:15:0a:f6:65:8d:b9:de:5f:62:e2:be:bd:62:e3:98:76:9c:
25:8e:39:9a:95:bb:29:6c:61:a9:ee:85:10:b3:fb:b4:c3:c8:
cb:fc:84:05:47:a9:2e:8c:cb:78:b8:97:e3:4f:11:39:ba:a6:
75:b0:7c:a8:12:81:83:c8:3b:5e:6c:a0:e0:ae:99:27:05:42:
6f:c6:48:69:60:60:d1:b1:ba:ea:ff:4d:72:55:59:2e:9e:5d:
f7:e8:fd:fc:09:f5:11:8b:07:11:63:cf:6d:b4:fc:d7:6e:fc:
a5:49:f9:23:f3:a1:b6:b8:5c:92:46:03:0d:2d:1a:93:d4:fc:
0d:6f:8a:1d:99:c2:5c:3f:e9:f3:04:07:13:74:9a:4a:9b:0b:
41:c3:8e:90:f0:55:bf:2c:28:b4:43:50:64:44:21:8b:2c:8f:
40:84:3f:86:92:c4:20:2a:a7:2f:0f:41:59:93:3e:a7:f6:03:
73:79:73:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:18:40 2026 by rpki-client