Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS0.roa
File: AS0.roa (raw, json)
Hash identifier: 8yRtOX66jzoW8/GDWFzWgDbIlBxncDH1ngU8G9HUNjU=
Subject key identifier: 7B:57:A5:E7:65:62:54:11:D8:A2:8A:DA:76:ED:BD:79:DA:83:C0:95
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 246BBA538A0AAB3F5D4769F1CC0503D333AD0480
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS0.roa
Signing time: Tue 15 Sep 2026 12:02:53 +0000
ROA not before: Tue 15 Sep 2026 11:57:53 +0000
ROA not after: Tue 14 Sep 2027 12:02:53 +0000
asID: 0
IP address blocks: 193.150.40.0/24 maxlen: 24
2a14:7580:50::/44 maxlen: 44
2a14:7580:100::/40 maxlen: 48
2a14:7580:3000::/36 maxlen: 48
2a14:7580:4000::/36 maxlen: 48
2a14:7580:5000::/36 maxlen: 48
2a14:7580:9000::/36 maxlen: 48
2a14:7580:ff80::/44 maxlen: 48
2a14:7580:ffef::/48 maxlen: 48
2a14:7580:fff3::/48 maxlen: 48
2a14:7580:fff4::/48 maxlen: 48
2a14:7580:fff5::/48 maxlen: 48
2a14:7580:fff8::/48 maxlen: 48
2a14:7580:fff9::/48 maxlen: 48
2a14:7580:fffa::/48 maxlen: 48
2a14:7581:f10::/44 maxlen: 48
2a14:7581:fe0::/48 maxlen: 48
2a14:7581:fe1::/48 maxlen: 48
2a14:7581:fe6::/48 maxlen: 48
2a14:7581:fe8::/48 maxlen: 48
2a14:7581:fea::/48 maxlen: 48
2a14:7581:fec::/48 maxlen: 48
2a14:7581:fed::/48 maxlen: 48
2a14:7581:fef::/48 maxlen: 48
2a14:7581:ff2::/48 maxlen: 48
2a14:7581:ff5::/48 maxlen: 48
2a14:7581:ff6::/48 maxlen: 48
2a14:7581:ff7::/48 maxlen: 48
2a14:7581:ffa::/48 maxlen: 48
2a14:7581:ffc::/48 maxlen: 48
2a14:7581:ffe::/48 maxlen: 48
2a14:7581:3e00::/40 maxlen: 48
2a14:7581:3f00::/40 maxlen: 48
2a14:7581:9000::/40 maxlen: 48
2a14:7581:9100::/40 maxlen: 48
2a14:7581:9200::/40 maxlen: 48
2a14:7581:9300::/40 maxlen: 48
2a14:7581:9700::/40 maxlen: 48
2a14:7581:9f00::/44 maxlen: 48
2a14:7581:9ff0::/44 maxlen: 48
2a14:7581:a000::/36 maxlen: 48
2a14:7581:e000::/36 maxlen: 48
2a14:7583:2000::/36 maxlen: 48
2a14:7583:8000::/36 maxlen: 48
2a14:7583:e300::/40 maxlen: 48
2a14:7583:f600::/40 maxlen: 48
2a14:7584:3000::/36 maxlen: 48
2a14:7584:a000::/36 maxlen: 48
2a14:7584:b000::/36 maxlen: 48
2a14:7586:a000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 11:30:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:6b:ba:53:8a:0a:ab:3f:5d:47:69:f1:cc:05:03:d3:33:ad:04:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Sep 15 11:57:53 2026 GMT
Not After : Sep 14 12:02:53 2027 GMT
Subject: CN=7B57A5E765625411D8A28ADA76EDBD79DA83C095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4d:41:47:1f:b1:4a:b3:ea:8c:75:e4:6c:e3:
4d:d0:33:f6:0a:88:20:92:fa:51:16:8e:45:1a:52:
63:03:69:61:3e:96:dc:12:a0:88:26:c1:9f:98:7e:
b2:84:83:5e:33:ff:19:d2:87:6d:a5:21:1b:f4:74:
23:9a:1f:04:72:15:08:a1:d4:45:ec:b7:3c:5a:e4:
33:22:7c:d2:93:32:53:d4:6a:8b:1a:1f:aa:50:41:
34:0b:6c:46:c6:61:97:1f:16:36:61:8f:9c:58:a9:
e1:14:7a:c8:48:bb:e9:ac:e5:fd:0c:3f:a1:f2:cf:
a6:a6:ab:8d:57:52:5b:e3:cf:82:bb:1e:7f:52:a6:
9d:b3:76:a1:b9:b2:c5:a5:9a:88:c6:89:af:56:08:
03:86:53:4d:1a:2a:38:af:72:44:50:87:f2:16:32:
d3:54:e7:03:22:e7:2d:3a:9e:ce:77:b2:7e:26:31:
60:96:2a:96:3a:74:f5:68:86:e5:75:9c:75:da:f1:
db:f1:a3:af:a9:06:08:7f:bd:5b:34:df:bd:e4:7e:
b0:cf:f2:1e:02:8b:12:28:9e:f6:aa:a9:79:c8:90:
08:da:9a:63:e4:18:6e:0b:47:b5:e4:74:cf:6e:54:
e0:9f:23:6d:13:74:6e:b8:b3:56:1d:55:76:fa:4b:
a1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:57:A5:E7:65:62:54:11:D8:A2:8A:DA:76:ED:BD:79:DA:83:C0:95
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS0.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.150.40.0/24
IPv6:
2a14:7580:50::/44
2a14:7580:100::/40
2a14:7580:3000::-2a14:7580:5fff:ffff:ffff:ffff:ffff:ffff
2a14:7580:9000::/36
2a14:7580:ff80::/44
2a14:7580:ffef::/48
2a14:7580:fff3::-2a14:7580:fff5:ffff:ffff:ffff:ffff:ffff
2a14:7580:fff8::-2a14:7580:fffa:ffff:ffff:ffff:ffff:ffff
2a14:7581:f10::/44
2a14:7581:fe0::/47
2a14:7581:fe6::/48
2a14:7581:fe8::/48
2a14:7581:fea::/48
2a14:7581:fec::/47
2a14:7581:fef::/48
2a14:7581:ff2::/48
2a14:7581:ff5::-2a14:7581:ff7:ffff:ffff:ffff:ffff:ffff
2a14:7581:ffa::/48
2a14:7581:ffc::/48
2a14:7581:ffe::/48
2a14:7581:3e00::/39
2a14:7581:9000::/38
2a14:7581:9700::/40
2a14:7581:9f00::/44
2a14:7581:9ff0::-2a14:7581:afff:ffff:ffff:ffff:ffff:ffff
2a14:7581:e000::/36
2a14:7583:2000::/36
2a14:7583:8000::/36
2a14:7583:e300::/40
2a14:7583:f600::/40
2a14:7584:3000::/36
2a14:7584:a000::/35
2a14:7586:a000::/36
Signature Algorithm: sha256WithRSAEncryption
75:08:9f:25:51:e3:20:9f:39:78:e0:e0:a2:72:4d:8e:60:a2:
d7:2d:d3:91:24:cd:4e:f5:92:d8:1c:e6:6b:02:93:fd:3d:37:
b2:64:8e:15:03:d1:00:b1:77:6f:28:34:70:57:8b:73:cf:6f:
1e:da:2c:eb:c4:00:8b:d3:ed:55:cb:f2:83:54:a5:20:11:1f:
fa:36:e4:98:cd:1d:b7:f5:d6:ba:d8:2d:82:6f:40:02:34:72:
d5:6f:36:23:c9:24:80:71:0b:a3:e0:16:e6:9a:5a:5b:b6:ad:
34:67:5c:11:d3:19:17:51:80:79:e7:7e:c6:e5:a5:2b:b0:2c:
bd:90:00:db:d4:44:f6:b8:9b:09:01:5d:45:c3:c4:cd:b3:6f:
5a:dc:6b:59:32:17:83:67:a8:68:b1:a5:fc:ba:58:5a:7a:40:
2f:da:44:42:28:aa:24:76:11:1c:9a:ad:ca:40:3a:04:fa:15:
71:1a:1c:15:cd:27:e1:4e:e4:60:79:fe:c6:46:22:33:60:60:
14:12:dd:a8:d0:b5:3d:32:6d:a5:19:b9:f6:bd:e0:d7:fc:8f:
af:91:91:4f:e9:3e:89:b8:bc:51:74:97:78:02:c6:e7:d0:58:
fd:1a:4a:33:7d:a8:1e:f4:31:90:54:b2:0b:9f:92:c5:63:6c:
f2:d1:c6:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:03:11 2026 by rpki-client