Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3135302e3235312e3232342e302f32342d3234203d3e2032393134.roa
File: 3135302e3235312e3232342e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: 8h7BiQfzgNpE25h/of4TTuYFelKAwrKy2p7mueJsU0E=
Subject key identifier: C0:96:A7:BA:79:8C:8F:A6:82:72:7B:11:6F:64:47:83:06:CE:67:F6
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 2BD461936F972D26EFB2D465B7027DD40FF02740
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3135302e3235312e3232342e302f32342d3234203d3e2032393134.roa
Signing time: Wed 14 Oct 2026 15:23:28 +0000
ROA not before: Wed 14 Oct 2026 15:18:28 +0000
ROA not after: Wed 13 Oct 2027 15:23:28 +0000
asID: 2914
IP address blocks: 150.251.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 20:20:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:d4:61:93:6f:97:2d:26:ef:b2:d4:65:b7:02:7d:d4:0f:f0:27:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: Oct 14 15:18:28 2026 GMT
Not After : Oct 13 15:23:28 2027 GMT
Subject: CN=C096A7BA798C8FA682727B116F64478306CE67F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e4:20:a1:1e:f0:fd:73:04:02:42:08:cd:de:
87:25:f6:8e:fc:fa:4d:62:28:2a:3d:f9:f3:ae:b2:
17:0e:40:9c:76:23:21:90:9c:aa:c6:73:c4:29:08:
a7:be:41:3e:33:00:7f:13:78:fc:80:6b:4c:9e:2f:
54:4f:a8:45:27:32:98:3d:ae:48:c7:ad:75:5d:23:
98:e3:17:fd:83:49:a7:52:6b:c2:da:10:3c:f7:5a:
c0:34:21:19:12:9e:fe:55:ee:5f:f3:8d:6a:65:22:
b6:02:b3:e7:60:bd:08:f4:52:f8:3b:d4:9d:94:00:
34:b4:f8:45:9d:e4:5b:1e:ff:67:b7:0b:60:5a:b6:
5b:e5:2c:af:fa:d1:67:09:81:0b:f9:10:5e:57:a2:
a3:7d:f1:c8:89:26:56:c6:1b:75:61:0d:d7:74:c7:
2c:67:63:41:b4:93:79:39:9e:fd:db:3a:a5:a9:63:
7e:aa:0e:46:28:bc:d3:fd:75:b9:fd:c4:81:49:f5:
a0:af:83:d6:46:41:3c:71:4c:b5:85:f9:0e:df:a8:
0d:16:6b:cd:c0:7a:96:f3:a8:89:6d:bf:b1:8d:15:
89:44:59:46:45:c4:47:21:0c:20:20:c5:f7:f9:c6:
1a:30:b2:53:85:c4:4e:74:4c:85:3f:6e:91:54:63:
9c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:96:A7:BA:79:8C:8F:A6:82:72:7B:11:6F:64:47:83:06:CE:67:F6
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3135302e3235312e3232342e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.251.224.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:28:46:07:52:64:d5:f6:8c:3d:ec:be:eb:93:4b:88:1c:8b:
03:55:dd:f5:32:4d:d1:3e:8d:d1:71:cb:8e:c2:e6:0e:fb:a4:
a2:9c:b3:b8:d9:4e:ae:93:e0:da:3d:a0:c7:c3:39:d0:c8:e6:
4a:a6:78:44:aa:13:4c:c8:97:99:dd:69:12:72:a6:e8:2c:41:
8e:ba:56:99:5e:25:93:b9:5e:5b:c7:c1:49:51:e3:4f:bc:49:
bb:c4:7f:8b:95:ce:17:1d:49:52:ea:15:05:bf:38:e7:18:58:
a2:6d:00:c5:e4:58:02:27:bd:6b:d3:2b:cc:f8:71:94:c5:4d:
29:b3:f7:f5:da:c9:51:a7:03:c4:4b:01:c9:64:cf:da:db:20:
81:d1:46:1b:da:89:2b:25:89:c7:c3:30:72:76:82:2c:c6:6c:
bf:5e:1d:2c:4a:ee:0e:58:4a:bc:85:76:d0:78:96:a5:83:4e:
44:7a:2f:6f:21:9c:7a:23:9d:d5:bf:62:bd:36:8d:6c:32:94:
14:e7:9f:b1:16:18:83:3c:0e:ec:6b:d7:8f:e7:f0:97:27:25:
d6:22:9b:4b:5b:0a:9f:ad:e4:e2:c4:e3:68:ab:3b:a6:45:1c:
93:29:50:78:58:92:f8:9b:73:ee:dd:b4:c2:2b:a6:87:b1:a2:
fe:90:f8:d3
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUK9Rhk2+XLSbvstRltwJ91A/wJ0AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGQ3ZmZhZTMwMGRlZjA4NzZiZjg0ODkwZmI2ZWExN2Jl
ODQxYTRkMzAeFw0yNjEwMTQxNTE4MjhaFw0yNzEwMTMxNTIzMjhaMDMxMTAvBgNV
BAMTKEMwOTZBN0JBNzk4QzhGQTY4MjcyN0IxMTZGNjQ0NzgzMDZDRTY3RjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU5CChHvD9cwQCQgjN3ocl9o78
+k1iKCo9+fOushcOQJx2IyGQnKrGc8QpCKe+QT4zAH8TePyAa0yeL1RPqEUnMpg9
rkjHrXVdI5jjF/2DSadSa8LaEDz3WsA0IRkSnv5V7l/zjWplIrYCs+dgvQj0Uvg7
1J2UADS0+EWd5Fse/2e3C2BatlvlLK/60WcJgQv5EF5XoqN98ciJJlbGG3VhDdd0
xyxnY0G0k3k5nv3bOqWpY36qDkYovNP9dbn9xIFJ9aCvg9ZGQTxxTLWF+Q7fqA0W
a83AepbzqIltv7GNFYlEWUZFxEchDCAgxff5xhowslOFxE50TIU/bpFUY5xbAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUwJanunmMj6aCcnsRb2RHgwbOZ/YwHwYDVR0j
BBgwFoAUDX/64wDe8Idr+EiQ+26he+hBpNMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODExM2RkYTYtN2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4
Y2ExLzEvMEQ3RkZBRTMwMERFRjA4NzZCRjg0ODkwRkI2RUExN0JFODQxQTREMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RYXzY0d0RlOElkci1FaVEtMjZoZS1o
QnBOTS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODExM2RkYTYt
N2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4Y2ExLzEvMzEzNTMwMmUzMjM1MzEyZTMy
MzIzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzkzMTM0LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
lvvgMA0GCSqGSIb3DQEBCwUAA4IBAQAbKEYHUmTV9ow97L7rk0uIHIsDVd31Mk3R
Po3RccuOwuYO+6SinLO42U6uk+DaPaDHwznQyOZKpnhEqhNMyJeZ3WkScqboLEGO
ulaZXiWTuV5bx8FJUeNPvEm7xH+Llc4XHUlS6hUFvzjnGFiibQDF5FgCJ71r0yvM
+HGUxU0ps/f12slRpwPESwHJZM/a2yCB0UYb2okrJYnHwzBydoIsxmy/Xh0sSu4O
WEq8hXbQeJalg05Eei9vIZx6I53Vv2K9No1sMpQU55+xFhiDPA7sa9eP5/CXJyXW
IptLWwqfreTixONoqzumRRyTKVB4WJL4m3Pu3bTCK6aHsaL+kPjT
-----END CERTIFICATE-----
Generated at Wed Nov 4 11:12:33 2026 by rpki-client