Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3135302e3235312e3232392e302f32342d3234203d3e2039303039.roa
File: 3135302e3235312e3232392e302f32342d3234203d3e2039303039.roa (raw, json)
Hash identifier: JJTteUvrmiPY+U+momyu9uK2wrpU9K7XzaRj5OzwPkc=
Subject key identifier: E9:76:3F:6A:5B:62:DF:AA:94:14:D6:0D:8B:23:50:D7:BE:B1:50:2A
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 3623E223BFCFF1E7849DE6A7D92969280B392E61
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3135302e3235312e3232392e302f32342d3234203d3e2039303039.roa
Signing time: Thu 23 Apr 2026 08:10:05 +0000
ROA not before: Thu 23 Apr 2026 08:05:05 +0000
ROA not after: Thu 22 Apr 2027 08:10:05 +0000
asID: 9009
IP address blocks: 150.251.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 18:48:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:23:e2:23:bf:cf:f1:e7:84:9d:e6:a7:d9:29:69:28:0b:39:2e:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: Apr 23 08:05:05 2026 GMT
Not After : Apr 22 08:10:05 2027 GMT
Subject: CN=E9763F6A5B62DFAA9414D60D8B2350D7BEB1502A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:bf:a9:4d:53:12:83:70:81:85:9b:f1:74:64:
47:92:ef:1d:bd:09:9b:ad:3d:2d:48:01:57:cb:18:
3e:68:70:a4:b3:5b:bb:5f:11:eb:8f:34:60:b4:3d:
6f:39:de:c5:e2:9e:b9:0e:90:09:b8:73:84:b7:72:
74:08:2a:aa:3b:92:c0:46:b2:07:90:46:27:94:10:
35:ed:60:d8:1d:4a:1b:0a:ad:0d:ae:2a:c9:1a:bb:
d6:8f:15:57:89:d0:80:7d:54:d9:05:48:52:e5:71:
4f:b7:23:72:01:71:09:1a:a4:50:fe:d1:81:00:62:
e7:56:ea:f1:82:8b:3e:a5:7e:9f:ea:db:10:48:35:
ab:91:f4:d7:2b:58:f8:5a:e7:16:b0:c3:eb:58:11:
65:29:09:2c:1c:e7:69:f9:e9:71:57:3a:4a:f6:87:
51:e1:b5:75:e7:94:ff:28:a8:e6:a1:00:75:52:d8:
dc:77:2a:f1:58:fc:4c:2b:b2:18:c5:b3:e5:f3:61:
80:3d:f4:18:8b:5a:24:aa:64:d9:cb:5b:04:72:25:
c2:7b:36:a0:f4:f3:c1:1f:0d:cd:4a:e3:79:dc:d0:
49:c2:d3:fa:a6:97:e5:f3:b5:b8:fa:30:0f:40:be:
7a:57:6e:79:01:ca:19:30:75:3a:72:c2:db:3a:4e:
67:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:76:3F:6A:5B:62:DF:AA:94:14:D6:0D:8B:23:50:D7:BE:B1:50:2A
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3135302e3235312e3232392e302f32342d3234203d3e2039303039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.251.229.0/24
Signature Algorithm: sha256WithRSAEncryption
72:8a:fa:ad:7c:71:82:e0:60:35:b6:4d:82:74:85:0a:9e:8f:
b5:78:3a:ae:15:72:20:a4:97:33:4b:94:a4:0e:55:e9:e3:fa:
e2:d8:4d:8a:e8:c9:1a:2f:fe:80:49:ec:54:4b:14:b1:9d:be:
3f:60:40:c8:fe:b5:44:20:00:3e:0d:3f:58:92:62:f9:72:9b:
04:26:81:29:5b:5b:82:ad:bf:6e:20:37:7d:35:aa:7e:ad:f0:
9b:96:5c:33:43:52:29:6b:9d:20:20:e7:e3:ec:b3:28:25:b5:
8c:2b:f4:95:51:89:48:f8:55:d1:c3:4f:55:f8:dd:42:d3:9a:
50:20:56:fc:db:62:bf:5e:87:03:f4:2e:9f:85:57:4d:97:b2:
74:de:c5:c9:12:7c:76:1d:b6:ee:0d:f1:ac:29:5e:bc:40:b4:
c8:61:cd:24:9a:89:62:ce:98:d5:50:b5:0c:05:43:db:54:35:
67:86:b2:c3:f9:58:0e:04:11:94:cf:3e:4e:c7:03:ab:9d:f4:
f2:db:7f:5a:11:59:fe:39:f2:d3:a0:0f:36:f4:88:e9:76:37:
6b:f6:3b:1a:82:48:50:bf:59:34:05:cc:01:cc:4b:5c:19:9e:
f0:e7:85:4f:47:e4:27:42:ee:5f:00:ab:5e:02:3e:ae:8e:38:
f1:eb:4c:d4
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUNiPiI7/P8eeEnean2SlpKAs5LmEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGQ3ZmZhZTMwMGRlZjA4NzZiZjg0ODkwZmI2ZWExN2Jl
ODQxYTRkMzAeFw0yNjA0MjMwODA1MDVaFw0yNzA0MjIwODEwMDVaMDMxMTAvBgNV
BAMTKEU5NzYzRjZBNUI2MkRGQUE5NDE0RDYwRDhCMjM1MEQ3QkVCMTUwMkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQv6lNUxKDcIGFm/F0ZEeS7x29
CZutPS1IAVfLGD5ocKSzW7tfEeuPNGC0PW853sXinrkOkAm4c4S3cnQIKqo7ksBG
sgeQRieUEDXtYNgdShsKrQ2uKskau9aPFVeJ0IB9VNkFSFLlcU+3I3IBcQkapFD+
0YEAYudW6vGCiz6lfp/q2xBINauR9NcrWPha5xaww+tYEWUpCSwc52n56XFXOkr2
h1HhtXXnlP8oqOahAHVS2Nx3KvFY/EwrshjFs+XzYYA99BiLWiSqZNnLWwRyJcJ7
NqD088EfDc1K43nc0EnC0/qml+Xztbj6MA9AvnpXbnkByhkwdTpywts6TmdhAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQU6XY/alti36qUFNYNiyNQ176xUCowHwYDVR0j
BBgwFoAUDX/64wDe8Idr+EiQ+26he+hBpNMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODExM2RkYTYtN2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4
Y2ExLzEvMEQ3RkZBRTMwMERFRjA4NzZCRjg0ODkwRkI2RUExN0JFODQxQTREMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RYXzY0d0RlOElkci1FaVEtMjZoZS1o
QnBOTS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODExM2RkYTYt
N2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4Y2ExLzEvMzEzNTMwMmUzMjM1MzEyZTMy
MzIzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM5MzAzMDM5LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
lvvlMA0GCSqGSIb3DQEBCwUAA4IBAQByivqtfHGC4GA1tk2CdIUKno+1eDquFXIg
pJczS5SkDlXp4/ri2E2K6MkaL/6ASexUSxSxnb4/YEDI/rVEIAA+DT9YkmL5cpsE
JoEpW1uCrb9uIDd9Nap+rfCbllwzQ1Ipa50gIOfj7LMoJbWMK/SVUYlI+FXRw09V
+N1C05pQIFb822K/XocD9C6fhVdNl7J03sXJEnx2HbbuDfGsKV68QLTIYc0kmoli
zpjVULUMBUPbVDVnhrLD+VgOBBGUzz5OxwOrnfTy239aEVn+OfLToA829Ijpdjdr
9jsagkhQv1k0BcwBzEtcGZ7w54VPR+QnQu5fAKteAj6ujjjx60zU
-----END CERTIFICATE-----
Generated at Wed May 6 01:11:52 2026 by rpki-client