Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3135322e38392e3132352e302f32342d3234203d3e20383334.roa
File: 3135322e38392e3132352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: PfJSft484j+gmPql8jRrIhNTF+8fwx/QtgvB/n4iYiQ=
Subject key identifier: 36:DB:B0:6E:14:9E:8E:FB:2B:CB:EB:F6:8C:84:A1:C7:73:34:24:77
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 4948553AB2B2BEA0A640676F682824C2D5462649
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3135322e38392e3132352e302f32342d3234203d3e20383334.roa
Signing time: Sat 19 Sep 2026 06:29:05 +0000
ROA not before: Sat 19 Sep 2026 06:24:05 +0000
ROA not after: Sat 18 Sep 2027 06:29:05 +0000
asID: 834
IP address blocks: 152.89.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:48:55:3a:b2:b2:be:a0:a6:40:67:6f:68:28:24:c2:d5:46:26:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Sep 19 06:24:05 2026 GMT
Not After : Sep 18 06:29:05 2027 GMT
Subject: CN=36DBB06E149E8EFB2BCBEBF68C84A1C773342477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:75:70:78:17:48:06:b2:2c:4b:47:df:aa:24:
65:ef:ee:45:ef:70:34:32:a4:33:14:d7:f1:e6:23:
78:71:b8:be:b0:0a:fc:1e:a3:ad:00:8b:44:5a:30:
cd:2c:19:1b:ee:e3:79:ce:d3:3f:e6:80:98:91:6d:
1d:ee:8a:8e:ee:1c:5a:8e:de:72:71:47:f7:7f:7f:
6b:11:2b:b7:64:d5:13:cf:87:00:d1:d4:68:cf:32:
65:d8:0a:96:f4:0d:9a:d4:43:70:b2:02:c3:6d:2c:
1b:b8:5c:41:f7:63:11:2a:22:01:31:e5:93:f0:ba:
0d:1b:b4:0d:ba:e0:cd:1f:56:3c:5f:bd:e7:d6:a8:
62:90:05:60:bb:04:82:85:12:3d:3b:ae:21:a3:84:
dc:30:72:3f:98:da:e0:67:89:bb:85:07:90:d1:3a:
6a:62:0b:1d:ac:2d:43:89:c6:e8:c5:85:74:cf:9f:
d3:c2:46:24:fc:95:d2:99:c8:3e:41:bf:e3:c6:c3:
de:84:44:9b:1b:51:f8:41:4b:23:3d:23:74:48:44:
40:00:bd:b2:a6:fc:a7:d8:ca:b7:97:d4:cf:a8:74:
1d:7c:ff:d3:37:c6:98:52:ea:38:17:95:46:94:6f:
f0:d3:8d:c7:6d:c9:88:01:73:48:83:ac:de:59:39:
7a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:DB:B0:6E:14:9E:8E:FB:2B:CB:EB:F6:8C:84:A1:C7:73:34:24:77
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3135322e38392e3132352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.125.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:80:ab:11:e3:a4:45:f4:ec:83:b2:ab:86:c9:73:de:da:09:
bd:fe:56:d6:e7:d0:02:eb:36:b1:8d:09:4f:44:56:12:df:87:
a5:ae:0a:fc:c3:77:42:d4:80:fd:eb:69:c9:53:2f:ca:33:b3:
0b:77:7a:5d:4d:4b:ad:3a:4f:59:fa:1a:0b:ed:ee:94:4b:2f:
d4:8b:09:c2:c3:fe:2e:91:ab:21:98:e4:64:9a:68:0a:ef:c2:
ab:30:b0:24:68:69:45:64:c1:28:f0:f2:f8:33:aa:be:ec:67:
ca:6b:e9:7c:72:9c:d9:bc:a3:be:a7:b0:73:67:27:fc:aa:95:
f6:f2:1c:ac:60:1a:1c:07:a1:89:2f:33:f4:58:db:16:3e:8f:
f1:e0:d4:8b:ff:8e:ca:ab:c8:c7:51:c1:43:58:f0:57:c0:62:
7c:fb:8d:52:c7:a6:bb:81:fd:ad:be:c3:4b:0a:c3:cb:f1:d3:
fa:f7:2b:a6:0a:2c:24:60:01:a9:f7:f4:e7:72:d2:f9:7d:4b:
aa:ea:18:36:69:bb:89:f5:c3:d0:59:81:8e:fb:04:f3:76:d2:
fd:d7:11:3a:87:d5:62:bf:02:76:45:4c:66:20:2b:2c:39:01:
2e:e0:d4:dc:99:a6:0a:13:4c:00:25:95:c7:0b:14:2f:0e:bf:
39:d6:e2:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:35:26 2026 by rpki-client