Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3135302e3235312e3232362e302f32342d3234203d3e203238353835.roa
File: 3135302e3235312e3232362e302f32342d3234203d3e203238353835.roa (raw, json)
Hash identifier: g+Q01iXq5jz18bgN5O1lwM0dVePZyOYe11QnSHrU7cI=
Subject key identifier: B2:2E:E2:1B:92:49:3B:93:0A:B3:B9:54:09:59:43:8A:BF:BC:D7:32
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 5D700B3583D16497794B625EE2550D2BFCB78943
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3135302e3235312e3232362e302f32342d3234203d3e203238353835.roa
Signing time: Fri 31 Jul 2026 14:04:36 +0000
ROA not before: Fri 31 Jul 2026 13:59:36 +0000
ROA not after: Fri 30 Jul 2027 14:04:36 +0000
asID: 28585
IP address blocks: 150.251.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:70:0b:35:83:d1:64:97:79:4b:62:5e:e2:55:0d:2b:fc:b7:89:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: Jul 31 13:59:36 2026 GMT
Not After : Jul 30 14:04:36 2027 GMT
Subject: CN=B22EE21B92493B930AB3B9540959438ABFBCD732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6d:c7:a5:a6:d6:7d:fc:8f:50:e8:d0:6b:66:
b0:99:30:5f:a3:85:95:c6:a5:3f:4b:07:e8:ae:bb:
4e:52:a7:e8:72:e2:87:09:e5:ca:22:f5:a3:a7:8a:
b6:fa:61:bf:6f:6b:32:c2:ce:f3:5c:99:fe:5e:2d:
db:4c:dd:d9:f2:c8:1a:26:a7:1f:b7:3e:ef:b2:c1:
d9:23:04:59:d6:7b:c8:17:6e:28:62:d7:36:0d:9d:
56:b4:e4:4e:9a:e5:34:5e:c2:c2:cd:3a:d1:62:07:
ae:1e:6c:de:8d:98:cf:92:37:a1:f4:f5:a1:01:d3:
c6:0f:ae:2c:29:a9:55:6f:62:dc:ce:1a:10:d9:bb:
1a:82:de:d2:55:8c:ff:d2:85:c2:26:c4:9f:97:af:
f1:c5:5a:92:95:61:50:68:0d:4b:49:b9:8d:a8:88:
35:5d:c0:56:c7:c9:b1:88:a0:ef:1d:ba:03:b6:fb:
e1:ea:9f:44:fe:3c:dd:b6:ed:84:d0:98:e4:cc:66:
b2:78:14:00:40:51:ad:70:e8:4e:e6:4a:b1:1e:dd:
2b:ee:09:6e:ce:93:75:5c:2d:96:30:ec:7f:8a:b3:
20:76:d4:c6:7a:78:f5:e7:17:6f:e3:99:60:c6:ea:
51:f8:e9:b3:23:3d:11:34:96:a0:2c:bc:14:e0:59:
52:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:2E:E2:1B:92:49:3B:93:0A:B3:B9:54:09:59:43:8A:BF:BC:D7:32
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3135302e3235312e3232362e302f32342d3234203d3e203238353835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.251.226.0/24
Signature Algorithm: sha256WithRSAEncryption
98:e2:24:db:d5:42:5e:3a:75:a5:73:60:3f:7c:30:5b:15:ab:
c3:9d:ff:d1:27:1a:2d:4c:07:c1:b1:4a:5a:b0:45:a3:ba:a6:
2f:c2:70:69:1b:5b:23:2b:97:bc:ad:73:7d:0c:1c:b5:41:26:
03:6b:d8:70:a2:b7:a6:e9:74:be:81:02:89:a8:f1:54:0d:c0:
c3:dd:d3:ea:c6:19:88:7d:61:8c:43:d9:03:41:1c:81:68:95:
d1:f9:94:d4:3d:95:f4:e2:29:4f:00:ca:85:10:3a:c5:6e:27:
4d:3e:24:cb:b0:b8:a2:91:91:f1:bd:75:0c:69:2a:6b:22:c1:
8f:7f:68:f0:56:1f:00:62:2e:6a:01:97:4a:ee:4a:76:0d:69:
9a:c2:17:61:85:1b:f0:be:20:a1:d3:af:17:a7:c5:f7:dc:44:
d5:b5:19:ca:2d:7e:2e:5e:07:2e:6a:ff:4d:16:b4:8b:4d:45:
cb:fd:0d:b5:92:43:8b:49:8d:45:28:7f:c4:ef:4a:56:67:f0:
02:24:4b:1a:03:24:03:38:ef:6f:b9:c2:5f:52:0e:19:4a:b2:
cf:71:a1:d4:76:61:6e:d9:f3:3f:71:ee:89:b9:c9:58:1a:59:
1b:b2:c5:de:07:7b:1f:e8:4d:56:c4:90:71:c7:06:2c:3a:16:
40:7f:d1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 09:52:08 2026 by rpki-client