Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3135302e3235312e3233302e302f32342d3234203d3e20323139303736.roa
File: 3135302e3235312e3233302e302f32342d3234203d3e20323139303736.roa (raw, json)
Hash identifier: XZZSILjWoP6vjwrKH61gQpjV1QQ9tfISGg1yk01u6Uk=
Subject key identifier: 71:6C:AE:60:5F:B9:A9:84:79:58:9E:15:59:4D:83:E4:84:A1:E3:2B
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 55050D7AB36A9215D36E401333148E8890F772F0
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3135302e3235312e3233302e302f32342d3234203d3e20323139303736.roa
Signing time: Fri 21 Aug 2026 06:38:16 +0000
ROA not before: Fri 21 Aug 2026 06:33:16 +0000
ROA not after: Fri 20 Aug 2027 06:38:16 +0000
asID: 219076
IP address blocks: 150.251.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 14:04:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:05:0d:7a:b3:6a:92:15:d3:6e:40:13:33:14:8e:88:90:f7:72:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: Aug 21 06:33:16 2026 GMT
Not After : Aug 20 06:38:16 2027 GMT
Subject: CN=716CAE605FB9A98479589E15594D83E484A1E32B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d2:f9:c0:5e:97:c5:3a:16:c7:6e:ba:f3:15:
6f:67:72:78:75:cb:bc:06:46:96:bd:13:9e:89:d7:
9f:dd:3c:ae:52:21:37:28:de:cc:7f:b4:9b:69:68:
34:91:a8:79:dc:5c:d0:27:35:90:df:74:33:76:43:
f8:6d:47:62:52:68:9e:47:a3:6b:d7:cb:a8:a6:71:
75:dd:e0:8f:2d:7b:d5:d5:e3:e0:99:6d:7a:e3:2e:
80:b3:48:e2:76:2c:3c:5b:2c:b2:0a:26:4f:c1:2e:
e7:f7:47:e8:a5:61:e0:46:bc:80:d5:af:7d:8c:00:
63:56:b4:34:cf:eb:3c:85:d1:25:04:37:f9:da:b6:
45:79:3f:f5:27:8b:ea:95:05:f6:e2:50:67:d1:37:
ef:62:bb:ed:b5:63:ad:d6:9a:1a:65:8a:1c:06:eb:
45:9a:95:39:7e:96:73:9d:68:1d:37:c4:ab:b6:85:
56:76:ec:4e:78:82:c5:5e:b7:3d:8e:af:a9:9a:56:
6e:53:f6:0a:26:4c:a9:6f:35:2a:84:1f:f4:79:12:
de:e1:d6:e3:52:0f:e6:cd:6f:03:c0:21:2c:01:20:
a1:c3:5a:d3:c3:a9:10:2b:4e:2b:56:94:d7:52:c1:
1c:ea:c0:43:ee:e7:92:f0:8e:10:c7:63:ae:ae:18:
61:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:6C:AE:60:5F:B9:A9:84:79:58:9E:15:59:4D:83:E4:84:A1:E3:2B
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3135302e3235312e3233302e302f32342d3234203d3e20323139303736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.251.230.0/24
Signature Algorithm: sha256WithRSAEncryption
33:d7:94:2f:b1:e0:5d:34:e1:2e:75:f7:d9:3a:ad:fe:ce:dd:
96:8d:96:27:33:24:e9:d1:49:a0:96:bb:e8:2f:a7:f6:b8:27:
7b:cd:09:13:ab:39:ac:74:05:85:a2:9c:cc:be:b4:ce:15:f4:
fc:32:cb:15:13:54:61:8d:6b:67:94:73:7d:bb:0e:eb:b2:c2:
32:81:77:4d:ce:5f:7a:59:de:85:68:11:e6:87:a2:1d:28:e5:
36:db:4a:be:c8:ee:fa:dd:25:55:f0:4d:ab:81:a2:37:b2:50:
a7:8c:46:1f:83:03:93:11:1c:fb:c5:ef:28:49:12:7f:ab:a6:
f4:98:59:77:2a:27:ee:9f:6e:51:a4:85:b7:a9:5d:8e:44:3e:
1a:cb:88:a0:b1:e1:f8:ca:87:ee:7b:7f:ac:63:8a:c5:ae:f2:
28:d8:b3:42:8a:0a:7c:be:90:2a:b8:c2:d7:e6:7d:48:d2:36:
48:56:ba:d3:9e:dd:0c:ed:0f:18:78:4c:a8:58:3a:5c:98:9c:
d9:02:ee:b1:29:34:3d:21:0a:b9:60:92:24:1a:63:ea:00:4a:
13:6f:f2:88:d5:85:ad:e4:30:71:1b:24:44:f8:15:dd:05:10:
da:36:99:5f:0f:f9:09:f5:3f:5a:79:eb:b9:a0:8c:98:37:0b:
eb:96:5a:a4
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUVQUNerNqkhXTbkATMxSOiJD3cvAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGQ3ZmZhZTMwMGRlZjA4NzZiZjg0ODkwZmI2ZWExN2Jl
ODQxYTRkMzAeFw0yNjA4MjEwNjMzMTZaFw0yNzA4MjAwNjM4MTZaMDMxMTAvBgNV
BAMTKDcxNkNBRTYwNUZCOUE5ODQ3OTU4OUUxNTU5NEQ4M0U0ODRBMUUzMkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC80vnAXpfFOhbHbrrzFW9ncnh1
y7wGRpa9E56J15/dPK5SITco3sx/tJtpaDSRqHncXNAnNZDfdDN2Q/htR2JSaJ5H
o2vXy6imcXXd4I8te9XV4+CZbXrjLoCzSOJ2LDxbLLIKJk/BLuf3R+ilYeBGvIDV
r32MAGNWtDTP6zyF0SUEN/natkV5P/Uni+qVBfbiUGfRN+9iu+21Y63WmhplihwG
60WalTl+lnOdaB03xKu2hVZ27E54gsVetz2Or6maVm5T9gomTKlvNSqEH/R5Et7h
1uNSD+bNbwPAISwBIKHDWtPDqRArTitWlNdSwRzqwEPu55LwjhDHY66uGGGxAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUcWyuYF+5qYR5WJ4VWU2D5ISh4yswHwYDVR0j
BBgwFoAUDX/64wDe8Idr+EiQ+26he+hBpNMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODExM2RkYTYtN2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4
Y2ExLzEvMEQ3RkZBRTMwMERFRjA4NzZCRjg0ODkwRkI2RUExN0JFODQxQTREMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RYXzY0d0RlOElkci1FaVEtMjZoZS1o
QnBOTS5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODExM2RkYTYt
N2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4Y2ExLzEvMzEzNTMwMmUzMjM1MzEyZTMy
MzMzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzOTMwMzczNi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAJb75jANBgkqhkiG9w0BAQsFAAOCAQEAM9eUL7HgXTThLnX32Tqt/s7dlo2W
JzMk6dFJoJa76C+n9rgne80JE6s5rHQFhaKczL60zhX0/DLLFRNUYY1rZ5RzfbsO
67LCMoF3Tc5felnehWgR5oeiHSjlNttKvsju+t0lVfBNq4GiN7JQp4xGH4MDkxEc
+8XvKEkSf6um9JhZdyon7p9uUaSFt6ldjkQ+GsuIoLHh+MqH7nt/rGOKxa7yKNiz
QooKfL6QKrjC1+Z9SNI2SFa6057dDO0PGHhMqFg6XJic2QLusSk0PSEKuWCSJBpj
6gBKE2/yiNWFreQwcRskRPgV3QUQ2jaZXw/5CfU/WnnruaCMmDcL65ZapA==
-----END CERTIFICATE-----
Generated at Fri Sep 18 22:23:26 2026 by rpki-client