Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3135302e3235312e3232342e302f32342d3234203d3e20323134303235.roa
File: 3135302e3235312e3232342e302f32342d3234203d3e20323134303235.roa (raw, json)
Hash identifier: XyD5J0WH/sjYz14lGhzyoY5+Ij2l+T4JX6OVkLo4EQo=
Subject key identifier: E3:91:40:E0:BF:31:17:A3:96:38:7F:66:10:9A:53:7D:CC:29:28:73
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 11649670A8561E9638E101A8A57AD30516F63739
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3135302e3235312e3232342e302f32342d3234203d3e20323134303235.roa
Signing time: Fri 13 Mar 2026 13:25:49 +0000
ROA not before: Fri 13 Mar 2026 13:20:49 +0000
ROA not after: Fri 12 Mar 2027 13:25:49 +0000
asID: 214025
IP address blocks: 150.251.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 07:19:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:64:96:70:a8:56:1e:96:38:e1:01:a8:a5:7a:d3:05:16:f6:37:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: Mar 13 13:20:49 2026 GMT
Not After : Mar 12 13:25:49 2027 GMT
Subject: CN=E39140E0BF3117A396387F66109A537DCC292873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:94:00:61:10:fc:4f:df:bb:ea:b1:83:a7:01:
4b:d1:17:1a:9d:0f:fb:da:cc:2e:9d:a4:ba:4e:dc:
3f:87:bb:fc:d9:b5:17:d0:f6:19:b0:50:d3:db:40:
18:05:7d:71:85:bb:f0:67:39:ec:55:0c:36:c9:bc:
08:96:fd:ea:73:89:48:0d:3d:19:52:a1:47:8b:e1:
0f:3a:df:57:50:d7:8c:96:6a:e6:13:0b:0c:99:a4:
42:2f:01:a7:74:06:28:81:2a:86:92:1b:95:fa:5d:
89:77:5e:c5:71:24:ff:c1:23:7c:1e:61:74:0d:3d:
4a:be:c6:58:5b:7f:48:7a:57:65:56:3f:85:6a:b4:
b9:6b:f6:24:9c:db:d9:ee:ff:d5:de:9e:e6:82:e4:
3b:1c:14:e0:e1:40:7a:a4:62:47:b6:bb:0a:92:4c:
9a:7a:d2:00:79:ed:a6:82:3a:50:85:38:93:5f:c2:
a9:22:5f:ff:59:5b:02:34:78:16:9c:34:9d:88:11:
f0:3a:07:96:f2:75:b4:b7:4d:eb:60:73:59:94:6f:
c7:7b:80:c1:25:9e:4e:b9:04:66:ab:b5:08:d4:bd:
99:15:c4:b8:c0:01:57:c4:81:44:d7:c3:58:2e:9a:
8a:64:f6:fd:88:9a:93:7d:01:3d:0a:b3:14:10:de:
1b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:91:40:E0:BF:31:17:A3:96:38:7F:66:10:9A:53:7D:CC:29:28:73
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3135302e3235312e3232342e302f32342d3234203d3e20323134303235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.251.224.0/24
Signature Algorithm: sha256WithRSAEncryption
56:40:bb:e4:ca:21:53:dc:d0:a4:7c:11:04:2b:30:2a:57:cf:
eb:e9:8c:e5:6a:2c:2e:cb:56:ca:1d:41:1e:8f:cf:0c:a3:a3:
41:17:f3:01:32:d4:f3:a4:a8:06:16:49:32:14:4b:63:7d:9f:
27:99:bd:80:cc:b0:df:84:52:ec:f0:aa:0e:20:3e:31:d7:89:
e6:fc:dc:4e:6c:2a:fd:6c:6f:a1:3b:e4:29:e1:4a:a7:eb:fd:
b6:80:1c:b7:26:6b:08:11:a8:57:28:e1:ef:ab:ce:e3:6c:cd:
1e:97:a4:23:91:cc:1f:57:5d:ce:74:4e:3f:ca:dd:29:00:11:
92:75:89:2f:51:69:75:a9:a4:23:2a:96:76:16:ab:82:48:f3:
d2:99:2a:00:bf:8b:14:90:f8:b3:1b:34:82:bd:bc:5c:d2:1d:
5c:f7:6d:56:cc:89:35:9a:be:4c:e0:d1:d7:7f:b1:b7:3e:62:
f6:26:49:1a:5a:48:fa:1e:4b:91:ff:bc:b2:2c:7d:a3:98:60:
aa:f9:cd:76:db:b7:b6:67:8b:b7:7d:02:87:c6:87:71:16:cc:
82:27:61:5e:6c:d9:80:b7:2f:60:1e:31:b1:4c:7c:df:a5:ba:
39:d9:0e:16:c5:43:ee:f4:c7:c9:40:77:c4:a9:80:ea:f4:fd:
82:53:a1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 20:31:52 2026 by rpki-client