Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/38332e3135302e3231392e302f32342d3234203d3e203533333430.roa
File: 38332e3135302e3231392e302f32342d3234203d3e203533333430.roa (raw, json)
Hash identifier: mkJ6G+IVVHlbEAXqRiFXH6jzvWblCjBQL4FHHoPunYA=
Subject key identifier: D9:48:B3:79:0E:B6:B5:19:EC:55:93:E3:DE:63:CD:80:42:A1:73:6F
Certificate issuer: /CN=5e5179bb1757068d7028510feeb1177aa7cc8818
Certificate serial: 24B639F65FD1DD9F0469387A7816BD1DFD79C4CA
Authority key identifier: 5E:51:79:BB:17:57:06:8D:70:28:51:0F:EE:B1:17:7A:A7:CC:88:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/38332e3135302e3231392e302f32342d3234203d3e203533333430.roa
Signing time: Thu 10 Sep 2026 18:49:34 +0000
ROA not before: Thu 10 Sep 2026 18:44:34 +0000
ROA not after: Thu 09 Sep 2027 18:49:34 +0000
asID: 53340
IP address blocks: 83.150.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.crl
rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.mft
rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:b6:39:f6:5f:d1:dd:9f:04:69:38:7a:78:16:bd:1d:fd:79:c4:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e5179bb1757068d7028510feeb1177aa7cc8818
Validity
Not Before: Sep 10 18:44:34 2026 GMT
Not After : Sep 9 18:49:34 2027 GMT
Subject: CN=D948B3790EB6B519EC5593E3DE63CD8042A1736F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f1:7b:eb:73:f2:ce:6c:3c:9a:bf:cb:14:59:
7e:51:c7:c3:b5:01:d0:e8:d0:5d:2d:06:28:9f:3a:
5a:56:c5:1c:07:38:08:f7:71:35:d9:d0:89:35:9d:
64:f8:b6:4c:fc:d5:06:96:1f:35:a6:84:36:5a:48:
09:38:ca:05:e7:cd:7d:10:d9:8f:10:9d:e5:0c:50:
5f:25:75:20:e1:6e:3f:cc:6a:6a:12:53:03:17:17:
a3:52:0c:44:1c:f5:8c:80:fc:23:4d:47:bf:98:05:
b3:e2:7a:82:56:9b:33:29:da:39:57:aa:83:62:f0:
1c:7d:c7:2e:ef:ee:7a:29:fe:c8:a2:75:5c:d4:71:
b3:69:b4:1f:78:8f:4d:37:d7:1f:be:3e:d4:2b:b9:
71:6f:75:80:36:5d:31:21:de:ad:ba:f4:9c:e5:ae:
ef:52:82:18:53:01:ce:c2:89:64:f9:3a:fa:3a:b3:
ca:5a:3b:c6:8e:6f:65:ea:f0:7a:26:ef:f8:06:ba:
01:73:92:a2:67:22:bd:9d:a9:e6:0a:89:4f:d0:55:
c0:7b:77:c7:24:94:62:04:62:fb:f0:61:2e:bb:44:
91:93:3a:58:ec:32:aa:17:1a:b4:14:53:1c:18:78:
51:35:0c:4d:8c:89:a5:5d:3b:db:72:ac:4e:99:1e:
76:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:48:B3:79:0E:B6:B5:19:EC:55:93:E3:DE:63:CD:80:42:A1:73:6F
X509v3 Authority Key Identifier:
keyid:5E:51:79:BB:17:57:06:8D:70:28:51:0F:EE:B1:17:7A:A7:CC:88:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/38332e3135302e3231392e302f32342d3234203d3e203533333430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.150.219.0/24
Signature Algorithm: sha256WithRSAEncryption
92:2e:91:78:af:e3:2f:b2:ea:7a:a2:e8:f3:0d:7f:11:95:4f:
1c:a8:10:57:67:49:a5:ef:be:6d:86:68:7e:9c:bd:8e:6d:f1:
28:f1:b9:f5:86:3c:28:7a:e5:76:6a:92:c7:9a:b3:01:b1:ca:
b5:90:6a:79:7a:20:7f:75:c5:19:45:79:45:3b:03:15:ca:c2:
07:4b:62:68:2b:c5:3e:6d:e9:fd:3d:70:d6:79:ae:7e:f8:0a:
70:bd:d4:f2:e1:7f:a4:b9:4e:db:52:45:8b:ea:68:69:2e:15:
58:96:28:c9:a9:55:e5:86:28:cc:5e:ac:00:13:3f:93:c5:7d:
27:5f:cd:af:b2:dc:e7:0e:4e:de:f5:87:b7:92:ca:b7:4a:46:
68:6f:c9:a3:46:85:8d:46:50:3e:98:9a:73:78:85:78:ce:95:
c2:49:e9:36:eb:86:3c:2c:37:2e:f0:95:81:46:05:29:74:92:
a3:eb:12:bd:92:02:54:68:fb:61:04:31:8b:2d:36:dc:2e:f1:
9f:b4:47:0c:0a:95:84:fe:75:16:2a:d0:50:8a:68:e2:a2:b0:
94:0c:eb:24:ef:e9:19:0a:9b:a3:68:13:4a:38:dd:66:61:11:
3b:34:84:da:8e:71:4b:57:6e:96:ff:6d:7a:97:9c:e5:35:72:
66:f6:8b:1a
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUJLY59l/R3Z8EaTh6eBa9Hf15xMowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWU1MTc5YmIxNzU3MDY4ZDcwMjg1MTBmZWViMTE3N2Fh
N2NjODgxODAeFw0yNjA5MTAxODQ0MzRaFw0yNzA5MDkxODQ5MzRaMDMxMTAvBgNV
BAMTKEQ5NDhCMzc5MEVCNkI1MTlFQzU1OTNFM0RFNjNDRDgwNDJBMTczNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV8Xvrc/LObDyav8sUWX5Rx8O1
AdDo0F0tBiifOlpWxRwHOAj3cTXZ0Ik1nWT4tkz81QaWHzWmhDZaSAk4ygXnzX0Q
2Y8QneUMUF8ldSDhbj/MamoSUwMXF6NSDEQc9YyA/CNNR7+YBbPieoJWmzMp2jlX
qoNi8Bx9xy7v7nop/siidVzUcbNptB94j0031x++PtQruXFvdYA2XTEh3q269Jzl
ru9SghhTAc7CiWT5Ovo6s8paO8aOb2Xq8Hom7/gGugFzkqJnIr2dqeYKiU/QVcB7
d8cklGIEYvvwYS67RJGTOljsMqoXGrQUUxwYeFE1DE2MiaVdO9tyrE6ZHnazAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQU2UizeQ62tRnsVZPj3mPNgEKhc28wHwYDVR0j
BBgwFoAUXlF5uxdXBo1wKFEP7rEXeqfMiBgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODNlNDc1N2YtZDM3Zi00ZmQ2LWE2OWItZDc0YmRkNmI4
N2RjLzAvNUU1MTc5QkIxNzU3MDY4RDcwMjg1MTBGRUVCMTE3N0FBN0NDODgxOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hsRjV1eGRYQm8xd0tGRVA3ckVYZXFm
TWlCZy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODNlNDc1N2Yt
ZDM3Zi00ZmQ2LWE2OWItZDc0YmRkNmI4N2RjLzAvMzgzMzJlMzEzNTMwMmUzMjMx
MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMzMzMzNDMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
U5bbMA0GCSqGSIb3DQEBCwUAA4IBAQCSLpF4r+Mvsup6oujzDX8RlU8cqBBXZ0ml
775thmh+nL2ObfEo8bn1hjwoeuV2apLHmrMBscq1kGp5eiB/dcUZRXlFOwMVysIH
S2JoK8U+ben9PXDWea5++ApwvdTy4X+kuU7bUkWL6mhpLhVYlijJqVXlhijMXqwA
Ez+TxX0nX82vstznDk7e9Ye3ksq3SkZob8mjRoWNRlA+mJpzeIV4zpXCSek264Y8
LDcu8JWBRgUpdJKj6xK9kgJUaPthBDGLLTbcLvGftEcMCpWE/nUWKtBQimjiorCU
DOsk7+kZCpujaBNKON1mYRE7NITajnFLV26W/216l5zlNXJm9osa
-----END CERTIFICATE-----
Generated at Sun Sep 20 09:25:28 2026 by rpki-client