Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3135302e3235312e3232362e302f32342d3234203d3e20323134353738.roa
File: 3135302e3235312e3232362e302f32342d3234203d3e20323134353738.roa (raw, json)
Hash identifier: C1Xnl1s5qrsOjZZAOSJQtaQY1S3j/20f4ciZNXhnp3I=
Subject key identifier: 43:04:AD:AF:41:BB:ED:3E:30:37:CE:54:C8:96:C3:9A:D1:73:CC:AC
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 7451719AD92D882020093CAD4295D5F86D0B57
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3135302e3235312e3232362e302f32342d3234203d3e20323134353738.roa
Signing time: Fri 24 Apr 2026 04:18:55 +0000
ROA not before: Fri 24 Apr 2026 04:13:55 +0000
ROA not after: Fri 23 Apr 2027 04:18:55 +0000
asID: 214578
IP address blocks: 150.251.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 18:48:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:51:71:9a:d9:2d:88:20:20:09:3c:ad:42:95:d5:f8:6d:0b:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: Apr 24 04:13:55 2026 GMT
Not After : Apr 23 04:18:55 2027 GMT
Subject: CN=4304ADAF41BBED3E3037CE54C896C39AD173CCAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9c:0b:88:7b:5a:a1:6d:8e:e7:fb:b0:68:30:
3a:b7:30:1a:30:22:c3:0f:33:2e:bb:0a:4a:8e:2b:
e5:cd:38:75:da:ff:a4:4f:aa:05:89:2a:42:fb:87:
6c:64:86:3a:a7:5c:19:99:f5:0f:8b:9a:45:8d:a5:
b6:c1:b1:2a:e0:38:aa:aa:98:b1:c6:92:02:7b:5f:
1d:33:86:f0:09:16:59:9f:52:14:6b:15:92:c7:c6:
72:1e:d4:cd:8a:38:ee:ef:da:e5:d8:43:b3:cb:b7:
86:05:b3:43:e9:05:ac:cb:cc:01:30:ee:b1:2c:83:
2d:f3:98:92:07:0b:5e:b6:27:02:af:ec:af:7c:9d:
f9:35:77:ca:83:15:ed:fd:c7:e5:5f:a3:96:2d:26:
4a:06:a1:06:7d:72:dd:e5:10:25:56:bc:e5:82:48:
91:4c:f5:6f:5d:70:a8:28:a0:cf:4c:c7:eb:00:6b:
5e:7c:39:bd:1f:4d:fa:6b:2b:64:33:2a:2e:56:89:
ea:11:61:1a:4b:e8:6c:36:16:1f:5d:7d:e1:01:b5:
ad:e1:99:70:b6:6a:9b:72:fc:f7:8b:ba:77:44:cd:
52:15:87:69:10:85:33:53:dc:fa:8b:fa:40:a7:be:
3e:40:54:96:63:40:82:14:bc:88:19:47:e0:e1:78:
d2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:04:AD:AF:41:BB:ED:3E:30:37:CE:54:C8:96:C3:9A:D1:73:CC:AC
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3135302e3235312e3232362e302f32342d3234203d3e20323134353738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.251.226.0/24
Signature Algorithm: sha256WithRSAEncryption
75:33:8c:98:a6:07:35:c7:20:3c:1d:9e:b6:12:89:b0:ee:ad:
f1:5a:16:25:79:8f:11:2f:50:ee:0f:8e:72:de:5b:45:aa:c1:
12:68:c7:fd:7f:d9:df:c8:d1:f8:a2:07:dc:18:57:82:ce:2c:
95:67:69:66:62:49:26:3d:73:2b:8d:6d:b0:6d:3b:99:3d:fc:
e0:11:44:b7:4e:19:c1:80:16:e7:0f:1b:50:4b:cd:05:85:81:
10:f3:1f:85:ab:b8:f2:d1:bb:23:f1:39:54:51:c0:22:7c:6f:
95:fa:82:86:c5:a3:6b:05:bd:7a:f1:93:6b:7f:12:72:35:f4:
b2:85:32:03:b4:40:75:03:b3:9b:0a:92:4d:2e:97:3f:8b:4d:
f3:94:71:00:2e:67:d2:de:13:3e:87:73:5f:ca:55:72:a2:49:
b0:a9:d0:4f:41:bb:08:b0:4d:e7:38:7a:a4:a0:a4:6c:cd:75:
9e:f3:29:1c:03:7d:89:d3:27:4a:f5:c7:55:a1:15:a2:f8:52:
5f:9d:f5:4a:1e:6a:48:3a:04:80:0b:59:d6:bd:38:4d:18:3c:
68:19:11:3f:ca:4c:71:8b:bf:21:8b:6e:4e:b7:4f:8c:82:92:
93:db:ec:ad:d7:ba:87:fe:7e:fa:2f:8e:33:6b:c3:b7:02:16:
dd:f8:fc:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 01:12:13 2026 by rpki-client