Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3135302e3235312e3233312e302f32342d3234203d3e20313333313530.roa
File: 3135302e3235312e3233312e302f32342d3234203d3e20313333313530.roa (raw, json)
Hash identifier: nBVQUxoc2ECQR4gh4v5xdeMnohNknC3pHq03e7cz2d4=
Subject key identifier: 83:32:52:A8:CA:94:33:46:18:68:33:7A:19:91:16:13:AC:55:97:AF
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 03E28205B57C8536C16C072D9129DA3F9A4AEBCD
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3135302e3235312e3233312e302f32342d3234203d3e20313333313530.roa
Signing time: Thu 23 Apr 2026 13:31:54 +0000
ROA not before: Thu 23 Apr 2026 13:26:54 +0000
ROA not after: Thu 22 Apr 2027 13:31:54 +0000
asID: 133150
IP address blocks: 150.251.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 18:48:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:e2:82:05:b5:7c:85:36:c1:6c:07:2d:91:29:da:3f:9a:4a:eb:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: Apr 23 13:26:54 2026 GMT
Not After : Apr 22 13:31:54 2027 GMT
Subject: CN=833252A8CA9433461868337A19911613AC5597AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:33:74:88:e6:b6:34:5f:e9:5c:aa:e0:18:9f:
fc:aa:fa:03:f3:5f:5d:8b:44:17:70:b7:b2:22:d6:
db:2e:64:15:5d:96:60:5e:e4:ee:05:47:77:ca:d5:
e6:82:b4:85:b3:7c:e7:1c:0b:9a:3a:b4:d2:77:6c:
3b:44:f0:58:45:7b:0f:f3:41:cb:db:99:79:0c:52:
bf:5b:69:eb:22:bf:66:de:2d:29:d4:31:79:7d:f0:
74:46:a9:f0:83:3e:64:d7:d0:04:9a:25:e4:c4:a1:
b0:7d:dc:37:a9:ad:a1:e4:c6:63:30:89:47:6b:69:
26:ce:aa:2c:8f:8f:f6:ed:6d:24:bf:4a:6f:23:b8:
44:e9:02:ed:a7:12:7e:d7:98:8d:ec:11:3b:67:8d:
df:76:8b:44:c6:ff:3d:d1:ab:3b:e2:e2:be:7d:1a:
d6:80:d6:f5:e2:85:74:49:2e:2b:5a:cf:54:14:35:
ed:c2:e3:2c:d3:a4:a5:c4:04:9c:d2:6a:bc:c8:12:
e8:d6:57:fc:bb:01:9b:ed:73:cc:50:ec:b5:59:ca:
e2:e5:99:96:19:b6:97:7d:b0:3f:31:62:ee:3f:b9:
cc:f6:14:61:b9:ea:42:01:ff:2c:df:77:d9:72:57:
cf:b2:14:22:07:ab:6d:c7:e3:2d:6d:13:e4:bb:85:
8b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:32:52:A8:CA:94:33:46:18:68:33:7A:19:91:16:13:AC:55:97:AF
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3135302e3235312e3233312e302f32342d3234203d3e20313333313530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.251.231.0/24
Signature Algorithm: sha256WithRSAEncryption
49:87:08:c5:ca:e6:24:8e:71:6f:4b:6d:0c:e6:da:bb:75:fb:
48:c1:ff:c6:3b:e5:fc:78:6c:4e:16:db:0b:33:db:17:02:5a:
d4:12:a4:4b:8e:4b:ea:ea:34:e9:81:74:17:eb:95:f5:2f:72:
42:da:f0:37:bc:c5:66:b9:d5:cf:23:ce:3f:c9:42:74:f9:8f:
d3:04:21:58:04:cf:e8:91:a8:17:74:72:d6:ec:2c:b7:40:6e:
b3:d7:9f:56:eb:74:47:d5:28:12:f4:8b:b4:44:63:d1:b9:11:
39:88:5c:89:90:7a:7e:a3:37:16:b9:74:6b:71:cd:09:69:46:
fc:2b:f4:ce:a2:6b:34:aa:33:c8:b5:5d:a4:57:ed:05:d8:09:
5e:68:0f:21:bf:54:2b:dc:24:fa:9e:a9:30:99:bf:a0:6a:67:
cc:3d:ea:63:b2:1c:55:92:81:e1:44:fb:9c:39:e6:18:f6:7d:
64:2c:ff:4c:c2:2d:12:93:7f:4f:40:0e:55:3a:e6:88:54:e7:
e0:ef:0a:cc:3b:63:87:9c:4b:3c:9e:41:b1:6a:0d:7e:c0:24:
37:6a:19:81:bf:b3:72:32:16:54:d9:bc:34:e2:c5:63:f0:c8:
77:35:f2:f9:5e:75:9f:35:a0:71:08:f1:f0:28:eb:39:41:0d:
8f:a8:52:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 01:11:52 2026 by rpki-client