Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3135302e3235312e3232372e302f32342d3234203d3e20323130383039.roa
File: 3135302e3235312e3232372e302f32342d3234203d3e20323130383039.roa (raw, json)
Hash identifier: eyLd11fakGFFDhUP1FOBvFuoLUKafobuh0+Bmto2/p8=
Subject key identifier: 5F:4A:63:5C:59:C6:14:24:3A:25:2E:64:0C:D1:E8:A6:73:FA:08:A2
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 4D9BBC0238374C5B68F58992C081D15A41AE6808
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3135302e3235312e3232372e302f32342d3234203d3e20323130383039.roa
Signing time: Wed 24 Jun 2026 11:56:38 +0000
ROA not before: Wed 24 Jun 2026 11:51:38 +0000
ROA not after: Wed 23 Jun 2027 11:56:38 +0000
asID: 210809
IP address blocks: 150.251.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:9b:bc:02:38:37:4c:5b:68:f5:89:92:c0:81:d1:5a:41:ae:68:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: Jun 24 11:51:38 2026 GMT
Not After : Jun 23 11:56:38 2027 GMT
Subject: CN=5F4A635C59C614243A252E640CD1E8A673FA08A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:53:22:cb:83:50:65:91:b9:ae:ca:ca:91:1e:
d1:8c:96:9a:15:84:c5:5f:1d:25:1e:a5:6d:bc:02:
06:cd:02:19:61:f2:9d:3e:89:47:ef:ad:9e:30:75:
fb:cb:81:48:6b:3f:fc:ef:30:66:87:85:3a:e3:03:
dc:df:bd:1c:3f:13:8f:c0:04:c1:43:2b:6a:ae:e1:
47:32:1c:19:34:a2:b8:9c:9a:20:6d:2c:68:36:e1:
74:23:84:f9:b5:8c:f9:a3:6b:18:90:e9:b6:9f:42:
a6:08:4b:b7:56:2e:75:df:e1:07:8d:93:ce:7e:c0:
61:ca:21:66:2b:d1:f1:9b:44:0c:36:aa:15:ba:a3:
df:89:c9:a2:4f:14:8f:8b:2a:5f:e4:ac:4e:0d:88:
9a:11:77:39:fd:c3:48:d1:db:9c:e8:92:9b:92:b0:
4d:f0:05:3e:28:b4:fe:dd:8d:7a:4b:d5:07:da:31:
07:8b:f3:17:bd:e6:cb:b1:20:c1:8b:5b:ea:a1:d2:
25:77:17:8b:82:b6:6d:79:ff:9a:12:7f:75:40:7f:
a2:14:ce:10:0c:9f:85:a8:d8:d6:5e:3c:d4:92:18:
78:15:b3:14:e2:9d:ad:09:b0:e5:5b:70:ee:e8:bd:
e9:68:df:a4:43:25:3f:6b:d1:e7:e9:f6:27:72:b5:
9a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:4A:63:5C:59:C6:14:24:3A:25:2E:64:0C:D1:E8:A6:73:FA:08:A2
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3135302e3235312e3232372e302f32342d3234203d3e20323130383039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.251.227.0/24
Signature Algorithm: sha256WithRSAEncryption
71:73:5d:fc:cb:58:69:98:2b:0a:4d:10:87:d3:1a:fc:24:82:
f6:ad:04:a2:0e:85:34:26:51:ca:b0:cd:1a:20:79:3b:05:64:
e6:58:4d:4e:fb:33:c7:f7:f1:b2:8d:7a:0d:0c:e5:c7:17:dd:
8c:21:25:74:bd:21:6e:31:7e:3d:c8:bb:4b:58:ee:51:eb:0e:
4d:b4:0d:dd:dc:b6:c3:8b:f2:13:8e:3d:42:e0:d3:3f:26:c8:
54:58:65:af:38:78:cf:2e:e5:b5:5d:f3:8a:a8:e1:53:c1:55:
dd:61:26:74:43:ae:59:7d:6a:a6:7f:e1:61:25:dd:00:78:7c:
45:d1:46:60:77:40:13:6d:43:1a:ac:7a:c2:15:59:f8:b3:23:
fc:3e:68:44:da:bc:2d:89:ba:26:88:4f:6d:f2:cf:bd:8d:49:
64:eb:64:08:c7:d4:3f:fc:33:c6:46:88:28:78:95:47:60:1e:
d2:95:27:7d:ba:05:21:f6:cd:76:43:7d:b1:97:f4:09:7b:e1:
2e:4e:55:8c:95:90:fb:7b:49:6d:b3:2c:25:b3:b2:2c:37:4c:
5c:a5:f5:00:75:da:5a:c3:a8:4c:fb:94:44:bc:dc:36:2c:14:
33:da:dd:59:b9:1b:17:ed:7c:b4:7e:c4:ac:9a:aa:78:68:3d:
9e:23:01:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:57:39 2026 by rpki-client