Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3135322e38392e3132342e302f32342d3234203d3e20313734.roa
File: 3135322e38392e3132342e302f32342d3234203d3e20313734.roa (raw, json)
Hash identifier: iTPVLkJ6BpeiWskuCdzm7vDvmOtB84THFCqOzxOjxI4=
Subject key identifier: DA:48:26:BD:E5:EE:AA:9A:3B:DC:10:1B:18:49:B5:42:C9:75:A0:CB
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 1B6E7A3782903A7B52BB1C83006DC729723C5C35
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3135322e38392e3132342e302f32342d3234203d3e20313734.roa
Signing time: Fri 25 Sep 2026 09:29:24 +0000
ROA not before: Fri 25 Sep 2026 09:24:24 +0000
ROA not after: Fri 24 Sep 2027 09:29:24 +0000
asID: 174
IP address blocks: 152.89.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:6e:7a:37:82:90:3a:7b:52:bb:1c:83:00:6d:c7:29:72:3c:5c:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Sep 25 09:24:24 2026 GMT
Not After : Sep 24 09:29:24 2027 GMT
Subject: CN=DA4826BDE5EEAA9A3BDC101B1849B542C975A0CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b8:33:83:fb:2a:e6:32:2a:a1:84:3e:67:73:
fb:cc:c6:73:08:06:d8:59:52:29:79:92:ba:2f:a7:
61:93:9b:02:56:88:3e:97:17:47:55:61:9a:b2:f7:
8d:ef:9d:69:86:e0:14:59:a3:93:47:9d:be:d7:89:
89:e2:cd:f8:e8:75:fa:e3:03:6c:eb:6c:75:c6:80:
8b:95:17:c9:5c:24:8c:17:eb:a4:2b:aa:7a:d8:98:
dd:93:12:ae:65:b4:4a:3a:cb:93:e7:37:73:1a:42:
96:0e:8b:ba:6a:e5:b8:a8:fc:dd:16:de:c3:de:d3:
ec:67:97:28:69:2f:a9:fe:eb:3f:7d:2c:66:55:d0:
c8:53:f8:94:fb:cc:6f:f9:e6:ed:8e:a7:9c:12:6e:
6c:5d:52:67:6f:57:27:05:6f:ae:fa:b9:2e:d2:e2:
c8:68:d1:44:ef:3f:b0:f4:83:48:cc:2a:7b:81:19:
5a:04:28:69:d9:6d:0d:36:f9:0f:53:5a:7b:ab:62:
2f:34:40:b9:35:67:d2:81:35:b2:8b:68:99:63:c7:
fa:bd:a1:9a:05:0d:93:89:a7:65:b2:b7:3a:4a:c2:
51:85:7e:88:43:e9:7d:7c:a5:6c:3c:9f:dc:bb:20:
32:40:db:cd:ed:37:f6:39:d1:2f:25:f1:ee:7f:b7:
62:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:48:26:BD:E5:EE:AA:9A:3B:DC:10:1B:18:49:B5:42:C9:75:A0:CB
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3135322e38392e3132342e302f32342d3234203d3e20313734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.124.0/24
Signature Algorithm: sha256WithRSAEncryption
79:f4:16:a7:f7:dc:62:eb:00:2b:75:4e:72:23:56:8e:e7:e2:
4b:83:8f:37:88:40:b4:72:fc:59:a7:cd:cd:c2:6f:32:c2:61:
16:d0:d1:33:ef:5f:0c:4e:6b:cc:0f:bb:e3:34:d0:40:0c:f9:
dd:fc:c4:64:b4:8a:58:37:ec:43:48:90:4f:3e:1a:c1:57:9f:
06:c4:10:ee:f5:fe:a0:b8:10:e5:c1:11:ae:79:f0:0c:33:9a:
b8:ac:d7:3e:71:c6:37:40:fc:c7:d4:66:ba:fc:12:d4:c8:7a:
8c:5f:64:c8:e6:6d:78:6c:1b:02:84:66:56:ae:0d:ad:8d:08:
72:05:bc:c0:80:f2:7f:29:58:52:eb:6c:2b:f0:e5:f1:26:9f:
28:b5:90:6f:8b:c6:e3:8a:6b:62:6e:a1:79:f9:90:94:65:88:
36:cd:6f:46:6f:d1:e8:39:e0:41:8d:a0:9d:79:83:1f:84:4a:
ad:ba:30:0f:2f:4e:0e:cc:42:50:56:d1:86:11:90:30:3c:6f:
88:85:f1:73:19:fa:8e:2e:20:c0:01:01:bd:cb:70:d6:f3:91:
81:a8:8f:44:d4:89:25:2f:cf:f9:5a:ad:21:3b:75:23:c0:93:
7e:7e:35:38:d4:e3:da:0b:c9:4f:4c:e7:dd:a1:cd:af:af:7d:
25:fb:36:89
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUG256N4KQOntSuxyDAG3HKXI8XDUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj
MjMxM2EzYTAeFw0yNjA5MjUwOTI0MjRaFw0yNzA5MjQwOTI5MjRaMDMxMTAvBgNV
BAMTKERBNDgyNkJERTVFRUFBOUEzQkRDMTAxQjE4NDlCNTQyQzk3NUEwQ0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/uDOD+yrmMiqhhD5nc/vMxnMI
BthZUil5krovp2GTmwJWiD6XF0dVYZqy943vnWmG4BRZo5NHnb7XiYnizfjodfrj
A2zrbHXGgIuVF8lcJIwX66QrqnrYmN2TEq5ltEo6y5PnN3MaQpYOi7pq5bio/N0W
3sPe0+xnlyhpL6n+6z99LGZV0MhT+JT7zG/55u2Op5wSbmxdUmdvVycFb676uS7S
4sho0UTvP7D0g0jMKnuBGVoEKGnZbQ02+Q9TWnurYi80QLk1Z9KBNbKLaJljx/q9
oZoFDZOJp2WytzpKwlGFfohD6X18pWw8n9y7IDJA283tN/Y50S8l8e5/t2KHAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQU2kgmveXuqpo73BAbGEm1Qsl1oMswHwYDVR0j
BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J
eE9qby5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzEzNTMyMmUzODM5MmUzMTMy
MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM3MzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACYWXww
DQYJKoZIhvcNAQELBQADggEBAHn0Fqf33GLrACt1TnIjVo7n4kuDjzeIQLRy/Fmn
zc3CbzLCYRbQ0TPvXwxOa8wPu+M00EAM+d38xGS0ilg37ENIkE8+GsFXnwbEEO71
/qC4EOXBEa558Awzmris1z5xxjdA/MfUZrr8EtTIeoxfZMjmbXhsGwKEZlauDa2N
CHIFvMCA8n8pWFLrbCvw5fEmnyi1kG+LxuOKa2JuoXn5kJRliDbNb0Zv0eg54EGN
oJ15gx+ESq26MA8vTg7MQlBW0YYRkDA8b4iF8XMZ+o4uIMABAb3LcNbzkYGoj0TU
iSUvz/larSE7dSPAk35+NTjU49oLyU9M592hza+vfSX7Nok=
-----END CERTIFICATE-----
Generated at Sun Nov 15 21:14:31 2026 by rpki-client