Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3135302e3235312e3232382e302f32342d3234203d3e203330303432.roa
File: 3135302e3235312e3232382e302f32342d3234203d3e203330303432.roa (raw, json)
Hash identifier: llla79t+tJoCOt8Sg4s+ZcmRbj2jVkrKvL0pc2FkrR0=
Subject key identifier: 06:72:B4:E4:AC:54:44:59:9C:24:6B:83:6E:40:88:39:9D:70:95:9E
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 3CCBE842B1B160833E280851C7B9EFE29D0463B4
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3135302e3235312e3232382e302f32342d3234203d3e203330303432.roa
Signing time: Mon 28 Sep 2026 19:35:56 +0000
ROA not before: Mon 28 Sep 2026 19:30:56 +0000
ROA not after: Mon 27 Sep 2027 19:35:56 +0000
asID: 30042
IP address blocks: 150.251.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 08:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:cb:e8:42:b1:b1:60:83:3e:28:08:51:c7:b9:ef:e2:9d:04:63:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: Sep 28 19:30:56 2026 GMT
Not After : Sep 27 19:35:56 2027 GMT
Subject: CN=0672B4E4AC5444599C246B836E4088399D70959E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c7:cf:8c:c9:d4:e7:0d:e2:1d:92:25:e1:01:
ef:99:8e:b7:60:d9:e6:5f:a8:e1:4a:44:d7:05:a5:
a1:47:a4:75:9e:5e:11:18:0f:ce:ea:9f:70:19:c5:
23:53:bc:98:03:fe:12:90:f7:3b:67:f7:c1:3a:2e:
0b:04:9d:c1:46:2e:a6:46:31:39:d1:5e:66:f3:1a:
cb:22:99:2f:38:14:b4:ab:d1:62:1a:f2:88:2c:dd:
86:e6:c7:89:06:65:47:3e:8e:d9:3d:a7:2e:43:4f:
10:6c:1b:8d:26:c0:26:35:73:0c:5c:de:d3:7d:fc:
a5:c1:ef:c6:55:6a:2f:3a:ef:c1:1c:b7:72:ba:00:
7a:cd:73:e7:69:f7:ed:2a:d9:21:11:49:46:c5:7a:
06:ca:f5:88:5c:3d:28:47:5d:a3:c5:30:69:50:9d:
72:76:8b:0a:bf:ec:b8:20:72:8f:b0:4e:e8:a0:64:
95:67:8a:e4:79:ac:44:3e:8d:66:1c:69:a3:00:a0:
d1:f4:f9:ab:e7:77:74:67:64:c8:f9:6a:c0:d5:b0:
d0:da:27:27:19:8b:f6:f2:dd:1c:7a:f8:77:03:22:
52:d3:0e:f4:f4:0f:d5:c5:e3:f0:d3:37:b4:d2:5b:
55:f6:9c:57:d0:b8:1d:f2:3e:7e:6a:8f:40:93:b3:
ba:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:72:B4:E4:AC:54:44:59:9C:24:6B:83:6E:40:88:39:9D:70:95:9E
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3135302e3235312e3232382e302f32342d3234203d3e203330303432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.251.228.0/24
Signature Algorithm: sha256WithRSAEncryption
25:93:38:57:1b:0b:87:31:85:1e:55:8b:fd:1f:4f:50:d7:4d:
0f:8f:0f:59:3d:ad:79:dd:7a:48:7f:bc:7c:4a:21:68:1b:7f:
f1:9f:f3:34:21:4a:25:ad:77:8e:0b:dc:84:cc:e7:2a:36:0c:
ce:49:f5:27:6f:77:1c:4a:dd:2d:81:13:ad:3c:d0:b6:6c:2a:
c4:b3:52:b0:a7:a6:91:ef:02:91:fe:db:e2:ef:b0:34:fe:ac:
9e:8b:ea:a3:9a:b4:40:a0:ea:d3:dd:36:18:d4:c0:ae:43:c6:
98:de:cb:61:43:54:b8:d9:c1:5e:bd:44:8b:ff:5b:cd:b9:8e:
fd:2d:90:18:f5:ba:d7:ca:e0:65:c1:2b:ff:36:f4:66:48:38:
af:f7:35:26:91:e7:b7:3c:8f:19:8b:e7:ac:61:3b:e6:3f:17:
63:40:d8:a3:be:17:99:b6:11:7f:09:0a:84:99:46:e1:e7:64:
f5:d8:11:4b:4f:a4:28:e3:4a:26:fc:60:62:cf:a6:b7:26:aa:
5c:ce:0b:aa:b2:7b:9f:a2:41:37:b1:22:11:e3:75:85:f5:1e:
b1:f4:ec:e4:df:c0:59:f6:45:22:2c:9f:8d:42:a1:31:b7:a9:
8b:c3:15:64:8f:51:cc:51:7a:f8:e5:38:4d:f0:cc:56:05:88:
a0:a9:27:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:20:36 2026 by rpki-client