Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS0.roa
File: AS0.roa (raw, json)
Hash identifier: QiH+U6967QKStBiUJyN4ry11QeTTdYe21vM60HfIsHU=
Subject key identifier: EB:2A:B7:68:92:68:98:73:F0:12:AB:A1:6F:61:98:22:89:1A:49:D7
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 378A1E3650008CD19AE6C2B19C59D1B884228B1F
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS0.roa
Signing time: Thu 05 Nov 2026 08:00:17 +0000
ROA not before: Thu 05 Nov 2026 07:55:17 +0000
ROA not after: Thu 04 Nov 2027 08:00:17 +0000
asID: 0
IP address blocks: 193.150.40.0/24 maxlen: 24
2a14:7580:50::/44 maxlen: 44
2a14:7580:3000::/36 maxlen: 48
2a14:7580:4000::/36 maxlen: 48
2a14:7580:5000::/36 maxlen: 48
2a14:7580:8000::/36 maxlen: 48
2a14:7580:9000::/36 maxlen: 48
2a14:7580:e300::/40 maxlen: 48
2a14:7580:ffb0::/44 maxlen: 48
2a14:7580:ffef::/48 maxlen: 48
2a14:7580:fff3::/48 maxlen: 48
2a14:7580:fff4::/48 maxlen: 48
2a14:7580:fff5::/48 maxlen: 48
2a14:7580:fff8::/48 maxlen: 48
2a14:7580:fff9::/48 maxlen: 48
2a14:7580:fffa::/48 maxlen: 48
2a14:7581:10::/44 maxlen: 48
2a14:7581:20::/44 maxlen: 48
2a14:7581:30::/48 maxlen: 48
2a14:7581:fe0::/48 maxlen: 48
2a14:7581:fe1::/48 maxlen: 48
2a14:7581:fe5::/48 maxlen: 48
2a14:7581:fe6::/48 maxlen: 48
2a14:7581:fe8::/48 maxlen: 48
2a14:7581:fea::/48 maxlen: 48
2a14:7581:fec::/48 maxlen: 48
2a14:7581:fed::/48 maxlen: 48
2a14:7581:fef::/48 maxlen: 48
2a14:7581:ff2::/48 maxlen: 48
2a14:7581:ff5::/48 maxlen: 48
2a14:7581:ff6::/48 maxlen: 48
2a14:7581:ff7::/48 maxlen: 48
2a14:7581:ffa::/48 maxlen: 48
2a14:7581:ffc::/48 maxlen: 48
2a14:7581:ffe::/48 maxlen: 48
2a14:7581:3f00::/40 maxlen: 48
2a14:7581:9000::/40 maxlen: 48
2a14:7581:9100::/40 maxlen: 48
2a14:7581:9200::/40 maxlen: 48
2a14:7581:9300::/40 maxlen: 48
2a14:7581:9700::/40 maxlen: 48
2a14:7581:9ff0::/44 maxlen: 48
2a14:7581:a000::/36 maxlen: 48
2a14:7581:e000::/36 maxlen: 48
2a14:7582::/36 maxlen: 48
2a14:7582:1000::/36 maxlen: 48
2a14:7582:2000::/36 maxlen: 48
2a14:7582:3000::/36 maxlen: 48
2a14:7582:4000::/36 maxlen: 48
2a14:7582:5000::/36 maxlen: 48
2a14:7582:6000::/36 maxlen: 48
2a14:7582:7000::/36 maxlen: 48
2a14:7583:2000::/36 maxlen: 48
2a14:7583:4000::/36 maxlen: 48
2a14:7583:8000::/36 maxlen: 48
2a14:7583:b000::/36 maxlen: 48
2a14:7583:c000::/36 maxlen: 48
2a14:7583:f600::/40 maxlen: 48
2a14:7583:f800::/40 maxlen: 48
2a14:7583:fc00::/40 maxlen: 48
2a14:7584:1000::/36 maxlen: 48
2a14:7584:3000::/36 maxlen: 48
2a14:7584:a000::/36 maxlen: 48
2a14:7584:b000::/36 maxlen: 48
2a14:7586:a000::/36 maxlen: 48
2a14:7586:b000::/36 maxlen: 48
2a14:7586:c000::/36 maxlen: 48
2a14:7586:d000::/36 maxlen: 48
2a14:7587::/32 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 23:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:8a:1e:36:50:00:8c:d1:9a:e6:c2:b1:9c:59:d1:b8:84:22:8b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Nov 5 07:55:17 2026 GMT
Not After : Nov 4 08:00:17 2027 GMT
Subject: CN=EB2AB76892689873F012ABA16F619822891A49D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bd:1f:71:c7:5e:fd:c7:db:f6:95:57:5e:cd:
8b:30:e9:91:0d:84:86:d2:29:0a:c9:91:b5:86:a6:
e7:cc:f4:97:4c:33:54:ec:f0:38:27:c5:22:ae:f6:
39:3e:10:c5:a4:17:39:b4:fc:66:3c:4d:32:a4:7e:
ec:83:be:0c:8b:a1:82:1f:fc:95:fb:78:d9:f4:f9:
db:37:fd:9b:75:26:51:97:c3:9a:58:b8:a5:80:ab:
2e:5d:d7:d7:4a:e4:1e:80:50:19:1c:9c:1d:57:46:
df:9d:ac:3c:d0:7c:ff:7a:1c:d4:d3:00:4a:01:40:
30:8d:67:fe:df:aa:e6:42:fe:89:4a:6e:86:99:74:
c1:ad:8f:24:82:bc:71:ea:01:2a:f9:3c:fa:d0:0f:
8e:29:90:86:e9:23:8d:50:91:a6:de:b8:94:7a:f0:
a3:c6:75:a1:85:2d:e8:84:ea:76:ed:f5:1d:aa:a5:
fa:0f:91:ca:7b:d5:30:77:a2:1a:97:e4:c3:c4:ae:
02:7f:79:09:2d:30:6c:2e:79:17:af:37:77:87:96:
dc:af:99:5e:da:41:23:a9:c3:ca:e3:69:90:99:f9:
74:46:d4:8f:2a:d8:36:e1:b4:7e:67:a5:94:07:90:
cd:83:9f:76:0d:19:5c:b6:4d:6f:85:53:1c:e7:c7:
aa:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:2A:B7:68:92:68:98:73:F0:12:AB:A1:6F:61:98:22:89:1A:49:D7
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS0.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.150.40.0/24
IPv6:
2a14:7580:50::/44
2a14:7580:3000::-2a14:7580:5fff:ffff:ffff:ffff:ffff:ffff
2a14:7580:8000::/35
2a14:7580:e300::/40
2a14:7580:ffb0::/44
2a14:7580:ffef::/48
2a14:7580:fff3::-2a14:7580:fff5:ffff:ffff:ffff:ffff:ffff
2a14:7580:fff8::-2a14:7580:fffa:ffff:ffff:ffff:ffff:ffff
2a14:7581:10::-2a14:7581:30:ffff:ffff:ffff:ffff:ffff
2a14:7581:fe0::/47
2a14:7581:fe5::-2a14:7581:fe6:ffff:ffff:ffff:ffff:ffff
2a14:7581:fe8::/48
2a14:7581:fea::/48
2a14:7581:fec::/47
2a14:7581:fef::/48
2a14:7581:ff2::/48
2a14:7581:ff5::-2a14:7581:ff7:ffff:ffff:ffff:ffff:ffff
2a14:7581:ffa::/48
2a14:7581:ffc::/48
2a14:7581:ffe::/48
2a14:7581:3f00::/40
2a14:7581:9000::/38
2a14:7581:9700::/40
2a14:7581:9ff0::-2a14:7581:afff:ffff:ffff:ffff:ffff:ffff
2a14:7581:e000::/36
2a14:7582::/33
2a14:7583:2000::/36
2a14:7583:4000::/36
2a14:7583:8000::/36
2a14:7583:b000::-2a14:7583:cfff:ffff:ffff:ffff:ffff:ffff
2a14:7583:f600::/40
2a14:7583:f800::/40
2a14:7583:fc00::/40
2a14:7584:1000::/36
2a14:7584:3000::/36
2a14:7584:a000::/35
2a14:7586:a000::-2a14:7586:dfff:ffff:ffff:ffff:ffff:ffff
2a14:7587::/32
Signature Algorithm: sha256WithRSAEncryption
01:e9:b4:62:74:c5:32:a1:01:ab:27:54:9d:c4:99:b4:e7:21:
cb:4c:a3:65:2d:73:32:cf:29:d5:ce:c8:54:01:29:14:00:44:
fc:e6:04:a2:d2:50:fb:7a:08:e3:5f:23:67:6c:6f:cd:66:36:
3f:5a:55:8e:2f:29:43:21:cd:88:c9:61:59:70:e9:b0:c5:96:
73:08:85:fc:68:79:42:3e:db:21:b7:81:ad:4b:51:e0:ad:9e:
63:5a:b5:e5:ba:68:69:4e:9f:b1:42:e2:ab:31:2d:2d:55:ac:
33:d9:6b:e3:84:dd:30:6e:7f:88:00:a8:7d:28:22:a6:92:89:
b9:b6:99:3e:25:40:35:e7:9b:fb:6f:66:ae:6a:a4:d0:4c:41:
9d:b7:f0:fa:4a:25:d8:d2:43:99:42:da:8e:be:de:04:a7:53:
47:69:68:82:30:bd:56:69:d8:39:38:7a:2a:13:50:6c:f9:75:
37:8f:b3:3d:90:c1:93:15:2e:aa:c2:49:03:fc:d6:2c:b7:d7:
48:f0:3f:ac:98:79:2a:46:6b:b8:35:dd:6c:5e:b3:ed:20:e7:
16:f0:f1:a9:e9:75:50:f8:6b:4c:98:ab:33:22:0e:e9:2f:06:
22:6d:fa:58:a9:f2:96:5f:f7:74:bf:4c:cb:15:fb:49:b8:de:
4d:4e:fc:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 06:57:24 2026 by rpki-client