Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3135302e3235312e3233302e302f32342d3234203d3e20323134363638.roa
File: 3135302e3235312e3233302e302f32342d3234203d3e20323134363638.roa (raw, json)
Hash identifier: 5oRkZNHY5jOHApMzLJhjusPpBUXkcMRnJe0gClp6VvQ=
Subject key identifier: 07:08:D7:69:7D:81:00:AE:10:6A:0A:DE:72:08:EB:9E:50:EB:83:10
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 39673EBDE846D5F956C6397A322A313DA146973B
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3135302e3235312e3233302e302f32342d3234203d3e20323134363638.roa
Signing time: Mon 16 Mar 2026 16:08:25 +0000
ROA not before: Mon 16 Mar 2026 16:03:25 +0000
ROA not after: Mon 15 Mar 2027 16:08:25 +0000
asID: 214668
IP address blocks: 150.251.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 07:19:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:67:3e:bd:e8:46:d5:f9:56:c6:39:7a:32:2a:31:3d:a1:46:97:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: Mar 16 16:03:25 2026 GMT
Not After : Mar 15 16:08:25 2027 GMT
Subject: CN=0708D7697D8100AE106A0ADE7208EB9E50EB8310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2a:dd:c3:02:02:35:14:9f:93:f1:53:85:7b:
b7:4e:67:ce:4d:0c:15:76:d5:fb:24:46:f5:1e:0b:
ca:b8:ca:97:36:dd:70:89:47:27:53:a9:3b:fa:b1:
de:41:e7:81:d5:75:46:60:bd:c5:00:9e:bc:a5:95:
a0:98:8f:c6:63:15:b2:06:ea:69:7a:a6:4d:e6:29:
4f:32:2e:d1:d1:15:48:79:9f:fb:5a:6a:51:28:a2:
8d:8b:b5:3f:db:87:df:f4:f4:9a:4f:b3:64:98:d2:
c7:35:49:7c:fb:a7:36:4a:7a:be:35:09:1f:4d:37:
4d:66:ff:82:9a:25:e7:44:48:d1:0b:f9:b9:d2:27:
98:58:4f:68:05:c5:36:81:70:93:b8:9e:88:b0:e2:
b6:9d:6a:06:f6:15:b5:ca:2b:1a:28:82:57:44:50:
a9:5c:2b:11:43:a5:a4:ac:fb:cf:c8:b0:03:55:55:
4c:f3:79:45:7e:a2:0a:a6:56:87:4d:a4:cb:5d:62:
c5:3d:fb:84:b6:fe:48:28:ee:e7:17:aa:4c:8d:70:
f5:d1:35:97:6e:a5:1b:96:45:87:c1:94:c3:d5:be:
c5:b8:d6:5d:63:02:33:96:00:d1:8f:e7:b1:83:98:
23:30:0b:dd:25:9c:6e:62:3f:4f:c7:41:52:a0:60:
ef:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:08:D7:69:7D:81:00:AE:10:6A:0A:DE:72:08:EB:9E:50:EB:83:10
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3135302e3235312e3233302e302f32342d3234203d3e20323134363638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.251.230.0/24
Signature Algorithm: sha256WithRSAEncryption
51:f8:1f:1c:08:19:1d:09:ac:ee:a6:2e:a1:45:01:89:8a:17:
7e:59:1a:6d:52:52:24:b4:bd:f2:95:59:40:32:f8:3f:8e:72:
9f:69:65:1e:53:ce:c8:c6:cf:c8:9c:cb:a6:19:4d:64:52:e2:
b7:9c:ca:b8:2e:e6:16:f4:c0:63:39:c5:b0:74:3f:e1:06:09:
ac:f5:d9:b2:28:d1:ac:a2:a0:80:a1:6d:08:77:69:b7:75:dd:
6a:88:d0:7c:f7:47:95:ea:c1:d4:33:10:9c:73:49:3f:50:a4:
ee:27:e1:6f:bb:b6:10:4d:b1:f6:13:dd:f3:73:9a:fc:0f:1e:
f9:d8:3a:70:74:78:7c:07:f9:23:65:5c:65:52:bc:6c:d3:18:
53:13:16:7e:a1:11:32:3b:ab:2d:c1:40:5f:0b:0e:d0:22:4f:
5a:da:62:84:81:45:e6:06:e3:81:f4:03:22:9f:3a:29:4f:82:
87:e5:62:4c:ab:3a:0b:94:10:5a:6f:76:c3:ea:70:2d:62:bf:
39:40:8b:2a:7d:dc:7a:ed:f4:6c:5e:ec:76:69:01:48:58:82:
60:a7:94:18:bc:21:f4:3b:c6:e0:85:d7:4b:15:3b:13:96:d6:
7f:85:78:2c:a0:a4:b0:ba:5f:85:bf:b8:09:ca:da:cd:09:b3:
4c:00:e2:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 20:32:28 2026 by rpki-client