Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3135302e3235312e3232382e302f32342d3234203d3e20343031373736.roa
File: 3135302e3235312e3232382e302f32342d3234203d3e20343031373736.roa (raw, json)
Hash identifier: 95ojaphVsAcyVAron4SIlOJi9uTr/G3KFY7/itOpPJ4=
Subject key identifier: 1A:3E:C3:71:78:D1:C9:4A:6C:0A:FE:86:BA:51:C3:1A:03:48:0E:9B
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 664C7B24D2B3E8C549E2884E5D19D404D238D909
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3135302e3235312e3232382e302f32342d3234203d3e20343031373736.roa
Signing time: Thu 29 Oct 2026 15:45:06 +0000
ROA not before: Thu 29 Oct 2026 15:40:06 +0000
ROA not after: Thu 28 Oct 2027 15:45:06 +0000
asID: 401776
IP address blocks: 150.251.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 20:20:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:4c:7b:24:d2:b3:e8:c5:49:e2:88:4e:5d:19:d4:04:d2:38:d9:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: Oct 29 15:40:06 2026 GMT
Not After : Oct 28 15:45:06 2027 GMT
Subject: CN=1A3EC37178D1C94A6C0AFE86BA51C31A03480E9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:80:a3:df:17:71:6e:ad:a9:57:7f:70:4b:f9:
f3:97:00:b6:16:eb:00:35:6c:e3:2c:75:83:95:b4:
8f:1a:c2:58:62:dd:23:cf:cd:e2:57:f7:bc:03:59:
5f:9b:36:2c:ce:3f:20:92:b6:87:68:ad:99:be:b8:
04:a0:bf:23:07:bd:06:c2:b5:a4:bc:84:77:2c:b9:
d3:0a:a5:d4:13:e5:84:e6:25:e3:37:9c:f7:dc:c0:
61:f8:51:27:f9:2e:96:98:c6:4b:6a:8a:d6:f3:03:
a7:be:a3:d6:66:6e:10:12:d7:8d:25:67:ab:f2:d9:
ea:74:52:bf:2e:3d:c8:a3:6a:c7:f9:97:4b:ee:88:
ed:6a:99:3c:fa:05:bc:3c:d9:de:98:35:72:fd:21:
4f:bd:60:b4:60:fb:f3:2e:1d:fa:38:cf:87:80:8d:
5f:64:8f:3f:b7:bf:3c:32:79:4e:04:97:b7:80:cb:
6a:bb:b5:1c:00:cf:5a:c3:19:d4:d5:73:fa:93:e0:
85:e6:1f:7b:d1:57:09:a8:06:4a:c4:2c:0a:68:77:
71:02:84:9d:f0:af:72:e3:20:0b:36:b3:f5:68:39:
6d:b9:be:1e:58:9a:3b:68:4d:a4:c7:ec:2e:d7:97:
d8:eb:39:d2:15:79:09:4b:9d:d7:8d:e3:42:07:49:
3f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:3E:C3:71:78:D1:C9:4A:6C:0A:FE:86:BA:51:C3:1A:03:48:0E:9B
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3135302e3235312e3232382e302f32342d3234203d3e20343031373736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.251.228.0/24
Signature Algorithm: sha256WithRSAEncryption
99:10:2b:10:3c:1f:f2:71:87:e5:de:b1:35:15:cb:b4:d5:d2:
80:05:b0:3d:f7:f1:9d:e1:4e:a4:92:04:12:37:b5:f7:2f:25:
16:b9:58:69:83:78:18:66:55:ef:40:c7:2f:9b:4d:5d:a2:f7:
01:69:cf:a7:87:f6:2e:46:23:ad:bf:40:fd:ca:38:f8:46:d8:
2e:81:79:d3:57:1b:f4:94:91:33:ba:8f:43:bf:44:a4:38:0b:
f5:9d:6d:56:c4:d3:33:3f:9a:62:32:9c:d0:e6:56:d6:32:99:
a2:60:7f:2a:51:e7:fb:31:1e:b7:d8:b3:ad:d5:58:56:1c:d9:
d1:2b:4a:6f:c5:9a:41:a2:5a:70:c7:ec:95:f6:93:76:8c:41:
65:bb:b1:62:1e:85:a7:fa:df:15:75:a7:a6:34:42:2e:e7:31:
56:cd:e7:8d:76:e4:37:8e:ea:ea:c6:cf:d9:c4:52:08:42:02:
1c:5c:f3:a0:c1:0a:4f:e3:f3:ab:2d:b1:a0:ca:b7:15:9a:46:
02:a7:0f:df:7f:89:59:37:af:ea:58:66:74:6f:e2:6b:59:ad:
67:b9:43:54:e7:38:3f:dd:3f:a8:57:39:4d:c0:b3:9d:8f:44:
aa:d6:b7:c4:ec:ff:86:12:c0:a1:78:1b:4c:24:8f:52:6c:1b:
d5:43:b3:ad
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUZkx7JNKz6MVJ4ohOXRnUBNI42QkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGQ3ZmZhZTMwMGRlZjA4NzZiZjg0ODkwZmI2ZWExN2Jl
ODQxYTRkMzAeFw0yNjEwMjkxNTQwMDZaFw0yNzEwMjgxNTQ1MDZaMDMxMTAvBgNV
BAMTKDFBM0VDMzcxNzhEMUM5NEE2QzBBRkU4NkJBNTFDMzFBMDM0ODBFOUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZgKPfF3FuralXf3BL+fOXALYW
6wA1bOMsdYOVtI8awlhi3SPPzeJX97wDWV+bNizOPyCStodorZm+uASgvyMHvQbC
taS8hHcsudMKpdQT5YTmJeM3nPfcwGH4USf5LpaYxktqitbzA6e+o9ZmbhAS140l
Z6vy2ep0Ur8uPcijasf5l0vuiO1qmTz6Bbw82d6YNXL9IU+9YLRg+/MuHfo4z4eA
jV9kjz+3vzwyeU4El7eAy2q7tRwAz1rDGdTVc/qT4IXmH3vRVwmoBkrELApod3EC
hJ3wr3LjIAs2s/VoOW25vh5YmjtoTaTH7C7Xl9jrOdIVeQlLndeN40IHST/tAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUGj7DcXjRyUpsCv6GulHDGgNIDpswHwYDVR0j
BBgwFoAUDX/64wDe8Idr+EiQ+26he+hBpNMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODExM2RkYTYtN2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4
Y2ExLzEvMEQ3RkZBRTMwMERFRjA4NzZCRjg0ODkwRkI2RUExN0JFODQxQTREMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RYXzY0d0RlOElkci1FaVEtMjZoZS1o
QnBOTS5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODExM2RkYTYt
N2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4Y2ExLzEvMzEzNTMwMmUzMjM1MzEyZTMy
MzIzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzAzMTM3MzczNi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAJb75DANBgkqhkiG9w0BAQsFAAOCAQEAmRArEDwf8nGH5d6xNRXLtNXSgAWw
PffxneFOpJIEEje19y8lFrlYaYN4GGZV70DHL5tNXaL3AWnPp4f2LkYjrb9A/co4
+EbYLoF501cb9JSRM7qPQ79EpDgL9Z1tVsTTMz+aYjKc0OZW1jKZomB/KlHn+zEe
t9izrdVYVhzZ0StKb8WaQaJacMfslfaTdoxBZbuxYh6Fp/rfFXWnpjRCLucxVs3n
jXbkN47q6sbP2cRSCEICHFzzoMEKT+Pzqy2xoMq3FZpGAqcP33+JWTev6lhmdG/i
a1mtZ7lDVOc4P90/qFc5TcCznY9Eqta3xOz/hhLAoXgbTCSPUmwb1UOzrQ==
-----END CERTIFICATE-----
Generated at Wed Nov 4 14:30:22 2026 by rpki-client