Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3135302e3235312e3232392e302f32342d3234203d3e20323135313532.roa
File: 3135302e3235312e3232392e302f32342d3234203d3e20323135313532.roa (raw, json)
Hash identifier: HUonHMUSHlk9aqJ/sQc6wral71Jta8wOY6iN7ui+u0E=
Subject key identifier: C2:FB:3B:6B:30:8E:7B:1B:2B:AF:27:05:FA:8B:C3:BD:83:A2:78:0A
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 5AD2ED73C90B469B1D76BE26D7425C4309DDD49B
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3135302e3235312e3232392e302f32342d3234203d3e20323135313532.roa
Signing time: Tue 17 Mar 2026 09:20:15 +0000
ROA not before: Tue 17 Mar 2026 09:15:15 +0000
ROA not after: Tue 16 Mar 2027 09:20:15 +0000
asID: 215152
IP address blocks: 150.251.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 07:19:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:d2:ed:73:c9:0b:46:9b:1d:76:be:26:d7:42:5c:43:09:dd:d4:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: Mar 17 09:15:15 2026 GMT
Not After : Mar 16 09:20:15 2027 GMT
Subject: CN=C2FB3B6B308E7B1B2BAF2705FA8BC3BD83A2780A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:89:41:85:84:e8:fc:d2:03:a1:6e:b3:0a:10:
4a:bd:1e:ac:34:28:66:a0:b6:57:15:37:f7:96:2a:
ec:04:46:ab:80:c1:c7:7f:37:81:bf:da:6b:49:2b:
50:2e:4c:0b:f8:e2:cd:88:99:f1:16:1e:c8:c8:27:
c5:60:df:03:64:a2:d8:96:bc:ef:7a:db:76:e0:f0:
21:20:f6:eb:87:94:df:ca:6b:99:1f:bc:88:ab:a6:
f1:c7:25:19:e9:11:46:67:7d:d2:12:cb:00:b3:10:
cc:eb:bb:fd:00:e8:af:1c:18:c1:29:57:dd:2f:44:
dc:8e:fe:86:90:c7:29:e3:47:99:de:26:51:c9:8e:
54:d2:59:8c:75:f3:9e:60:d8:24:87:6a:2d:9d:e5:
2e:ea:21:ad:d0:d8:54:7b:4a:81:7b:62:f4:1f:6a:
b1:72:bc:8a:e1:96:c6:38:79:43:b4:ff:9d:7b:cd:
64:84:29:fd:28:57:ee:a0:50:7a:d3:85:bf:8e:c8:
bd:6e:c1:3c:cd:9e:45:da:99:e7:0b:87:09:9f:e5:
84:71:0e:01:a0:9a:8e:f8:9a:2f:19:51:0b:c2:84:
ba:19:0b:30:0a:19:43:00:f1:99:b6:ad:fc:fb:9c:
f2:5e:ee:fe:2a:94:dc:ee:b4:07:55:8b:5b:1d:7b:
20:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:FB:3B:6B:30:8E:7B:1B:2B:AF:27:05:FA:8B:C3:BD:83:A2:78:0A
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3135302e3235312e3232392e302f32342d3234203d3e20323135313532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.251.229.0/24
Signature Algorithm: sha256WithRSAEncryption
25:40:ab:0f:0f:50:ee:45:57:fc:d1:ff:ad:4e:e9:c3:a5:5f:
e8:c2:e6:cf:02:a4:5c:a9:ff:66:75:ba:b9:7c:95:ce:6f:59:
f0:cc:07:f0:38:9f:11:c6:11:9c:31:61:6b:c3:74:59:e6:1a:
03:26:4e:72:3d:f7:5b:d7:52:a9:1a:45:1b:26:86:9c:61:ba:
e6:88:b3:33:02:45:ce:8b:f6:b6:01:f5:b3:44:7c:4f:2b:de:
36:f8:7b:6b:22:f6:dc:dd:f2:91:ec:c7:b5:a8:ef:8d:a0:d1:
37:30:12:18:21:38:b5:6f:89:01:9d:46:4e:0a:b0:e0:c3:d2:
70:fa:f0:03:77:ed:d8:33:9b:b3:85:69:03:07:16:cf:f2:9b:
c4:1f:a2:88:dc:99:dc:e7:f4:75:1a:e6:00:b5:e5:b2:3c:71:
30:71:49:59:a9:24:9b:78:86:1d:b5:47:33:72:7a:fa:38:99:
e6:71:58:4b:ae:f6:3b:c4:cb:70:43:45:85:c2:4b:cc:72:0d:
cb:ef:9b:9d:a5:e1:f9:2f:56:a8:12:1d:77:32:55:9b:df:f5:
2b:b0:ad:49:18:a3:bf:cb:4e:08:b5:15:55:92:56:c9:9c:f2:
ab:bc:cf:9a:2e:7b:ed:82:64:69:f9:59:2f:94:c4:c9:cc:df:
a4:42:73:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 20:34:06 2026 by rpki-client