Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3135322e38392e3132362e302f32342d3234203d3e203239383032.roa
File: 3135322e38392e3132362e302f32342d3234203d3e203239383032.roa (raw, json)
Hash identifier: B654BlfS4FqqqP/M6Zwsphal/P90Y9naFupTvdbaLj4=
Subject key identifier: 81:9C:01:72:44:30:FA:96:12:1D:50:6D:D1:96:BB:14:10:D6:82:0B
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 126C6647981654FCD4A1A5600BEF029651E79C86
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3135322e38392e3132362e302f32342d3234203d3e203239383032.roa
Signing time: Sun 20 Sep 2026 12:16:47 +0000
ROA not before: Sun 20 Sep 2026 12:11:47 +0000
ROA not after: Sun 19 Sep 2027 12:16:47 +0000
asID: 29802
IP address blocks: 152.89.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:6c:66:47:98:16:54:fc:d4:a1:a5:60:0b:ef:02:96:51:e7:9c:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Sep 20 12:11:47 2026 GMT
Not After : Sep 19 12:16:47 2027 GMT
Subject: CN=819C01724430FA96121D506DD196BB1410D6820B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:be:6f:2e:1a:0e:b8:36:7d:0d:d2:e7:78:03:
aa:d9:66:21:e8:9f:b4:dc:c4:c6:88:59:72:a2:87:
f7:86:21:eb:19:4d:e1:0f:40:74:6a:17:28:56:21:
bf:b0:da:b1:f5:57:87:5b:02:d5:8a:e5:63:a0:f7:
7f:72:af:1e:22:66:47:c6:64:fb:06:a6:66:36:d8:
2e:b1:50:53:47:99:7f:38:39:a4:31:16:57:13:1d:
66:9f:32:d3:3d:4b:5e:9a:00:0d:46:02:29:50:22:
4c:a2:e3:6a:b2:7f:93:13:a1:c3:47:b2:02:8f:22:
3d:05:e6:2e:52:8e:13:36:0c:a1:65:b1:2a:57:e3:
6a:96:16:48:39:0c:00:29:e6:ae:f9:1f:22:b1:f3:
b1:f5:ab:51:c1:e6:82:ed:cc:90:4f:ce:22:de:d2:
03:1e:b5:f3:ec:dc:09:67:47:86:f3:2c:9e:58:49:
e4:b5:87:cc:8d:6c:ec:65:6d:79:34:41:ec:5e:7f:
66:2f:50:bf:5d:c7:05:c9:e3:03:ca:b5:e2:31:fe:
6e:5f:67:e1:d0:e3:c4:c5:82:e3:d4:60:97:9c:dd:
3e:9f:13:04:85:5c:6c:55:1a:87:2d:75:0a:af:a5:
da:3e:de:4d:61:2f:c3:4b:13:d1:01:6d:6e:48:97:
42:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:9C:01:72:44:30:FA:96:12:1D:50:6D:D1:96:BB:14:10:D6:82:0B
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3135322e38392e3132362e302f32342d3234203d3e203239383032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.126.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:e1:37:79:7f:8f:d7:d3:a4:77:2f:b0:17:bd:74:f1:1d:81:
0f:90:0b:67:d5:fa:07:64:f4:43:40:f8:5d:46:38:ea:43:f4:
2a:ef:cd:72:e7:63:ba:54:00:e1:6b:e9:14:60:78:39:fb:a6:
83:26:70:ef:af:b7:aa:20:0c:3d:5c:a7:b4:47:ad:31:c6:6d:
3e:6c:ff:a8:bd:8a:90:a0:2f:94:e1:77:85:35:f2:0b:fd:34:
1d:31:e3:28:fb:97:85:2b:b7:f7:37:7e:c7:75:83:5c:e6:54:
2f:40:3f:40:dd:81:8a:45:e3:91:c4:a7:33:2f:0d:a2:a1:8c:
58:45:f0:12:e6:83:0e:1a:70:2b:3a:e5:00:11:2a:8b:45:4e:
3b:f7:de:71:1a:fd:16:76:d6:30:79:4b:0a:f4:26:00:7c:ae:
ef:ba:f9:22:a1:cc:74:3f:c8:bb:77:b3:f6:02:75:22:65:c7:
4b:31:f9:78:b9:e0:ff:02:77:f1:53:b2:d5:06:22:5a:8e:a2:
cd:78:f8:2e:bc:49:77:4d:47:d8:04:90:47:b8:a7:3c:3c:f9:
93:c8:84:56:97:3c:07:50:cc:45:59:37:da:af:a6:71:f1:47:
6a:31:1b:25:d5:ba:5d:59:84:e1:d0:59:80:2c:e5:a6:33:b5:
3e:73:9b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:31:21 2026 by rpki-client