Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3135302e3235312e3233312e302f32342d3234203d3e20323138383739.roa
File: 3135302e3235312e3233312e302f32342d3234203d3e20323138383739.roa (raw, json)
Hash identifier: J97dFvNJgBkmxjFu9FS858RLe2AIF0jinSN6Y/O+Fss=
Subject key identifier: F3:9E:4F:5A:15:FB:75:08:DD:50:01:85:C9:71:0F:B2:D3:A3:DE:46
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 5449E2B7E596D376BC5A82A732755C8D17A48E08
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3135302e3235312e3233312e302f32342d3234203d3e20323138383739.roa
Signing time: Sun 30 Aug 2026 17:22:54 +0000
ROA not before: Sun 30 Aug 2026 17:17:54 +0000
ROA not after: Sun 29 Aug 2027 17:22:54 +0000
asID: 218879
IP address blocks: 150.251.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 03:34:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:49:e2:b7:e5:96:d3:76:bc:5a:82:a7:32:75:5c:8d:17:a4:8e:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: Aug 30 17:17:54 2026 GMT
Not After : Aug 29 17:22:54 2027 GMT
Subject: CN=F39E4F5A15FB7508DD500185C9710FB2D3A3DE46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c4:51:dc:e6:ef:97:f9:da:b3:e1:ca:d4:60:
b7:82:9f:3a:05:b0:63:cd:44:44:59:dd:5e:5c:a9:
bb:73:a6:9b:7d:97:ed:f1:26:a5:c5:51:f8:e4:1d:
18:5a:8f:66:d5:6e:4a:80:ab:b7:81:9f:00:0c:9e:
85:6c:dd:12:64:17:3f:bd:69:d6:12:bc:b7:15:40:
7e:55:10:cc:f4:65:f1:bb:02:48:eb:c4:75:d0:ba:
77:f2:c6:c3:8c:58:5f:92:fc:99:56:4a:5d:15:2c:
9b:a8:4b:74:35:8d:2b:07:17:e9:59:e2:34:4c:37:
d1:a4:f3:ca:7f:44:a5:d1:b7:52:c6:05:44:94:81:
be:57:c5:0b:46:92:45:eb:f2:b2:e9:98:05:04:f1:
ad:75:be:97:12:f3:df:4f:ae:35:dd:ea:48:94:46:
5d:ec:4e:c6:0a:9b:40:4d:28:5c:4d:a3:6e:5d:73:
88:3e:4a:18:cb:8b:4b:9f:1e:f8:f4:93:45:5e:60:
62:f6:a6:f7:1b:54:c2:b6:d0:f6:b7:3a:94:1e:81:
b5:eb:15:74:bc:9d:c7:ef:27:7a:76:07:ab:5d:18:
b0:3f:6f:d8:10:cd:16:04:9f:11:c2:c9:e3:d7:af:
8f:9e:4d:e6:43:06:5c:ba:6b:28:58:05:ca:2b:46:
65:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:9E:4F:5A:15:FB:75:08:DD:50:01:85:C9:71:0F:B2:D3:A3:DE:46
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3135302e3235312e3233312e302f32342d3234203d3e20323138383739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.251.231.0/24
Signature Algorithm: sha256WithRSAEncryption
13:98:fc:ca:ee:d7:d1:6a:50:42:14:de:6f:ab:e5:b9:30:2a:
fe:d3:0e:9c:af:bd:c2:48:44:48:fa:92:d0:40:8d:03:20:67:
96:cf:76:63:4e:e4:2a:b8:b1:8a:f8:36:fa:b6:81:bb:34:7d:
52:a4:82:b7:5a:db:f9:37:d0:b5:46:45:bc:59:db:b0:3c:bf:
0f:cc:55:1d:aa:dd:2b:e0:5f:7d:96:bf:1d:4e:62:1e:93:8c:
d3:89:57:5e:49:7d:4c:8f:bb:0c:b8:4e:ed:17:40:7d:9e:87:
2a:9b:1a:81:7f:b6:f3:79:9f:6f:05:d5:93:26:68:6f:f7:73:
ec:39:7d:94:18:d2:14:4e:cf:a9:91:72:26:bd:a7:f5:d1:b3:
0d:c5:e1:5d:a7:6a:c8:0e:26:15:b0:24:fe:f4:62:42:9b:ae:
50:3c:36:5e:b8:11:89:c8:42:f3:3a:6f:c1:31:3f:52:47:2c:
50:21:0b:96:eb:44:16:9d:25:8c:6a:ed:18:ff:1d:e6:94:89:
2c:a4:10:a5:08:64:a1:32:ea:69:c4:fc:ae:e4:28:58:f4:32:
9b:27:80:e7:a3:4b:99:c5:00:54:2f:06:52:c5:cf:79:50:ce:
c4:b0:ae:1d:08:9d:97:87:3a:fe:a1:76:6a:f7:17:d0:43:26:
5f:03:18:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 10:43:46 2026 by rpki-client