Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139352e35382e3133352e302f32342d3234203d3e20323136343331.roa
File: 3139352e35382e3133352e302f32342d3234203d3e20323136343331.roa (raw, json)
Hash identifier: gezzVEAXNfEHkX7ccEEnJqNTNH1SM3/ga2rOHek063I=
Subject key identifier: 18:F1:09:70:31:87:1D:32:DE:1F:7A:62:FB:D4:5A:21:4B:B1:DE:4E
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 3409AA07EA828FE2C00EB037F95B1F8C83D5A6CC
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139352e35382e3133352e302f32342d3234203d3e20323136343331.roa
Signing time: Fri 01 May 2026 07:50:17 +0000
ROA not before: Fri 01 May 2026 07:45:17 +0000
ROA not after: Fri 30 Apr 2027 07:50:17 +0000
asID: 216431
IP address blocks: 195.58.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 18:48:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:09:aa:07:ea:82:8f:e2:c0:0e:b0:37:f9:5b:1f:8c:83:d5:a6:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: May 1 07:45:17 2026 GMT
Not After : Apr 30 07:50:17 2027 GMT
Subject: CN=18F1097031871D32DE1F7A62FBD45A214BB1DE4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7b:26:a2:7a:0a:4c:4d:9d:47:f6:46:b4:75:
57:59:79:f5:53:e4:0b:03:ac:c5:bd:2e:e1:f4:bb:
02:a9:c3:b5:dd:dc:79:9e:69:cb:03:c6:06:e1:2f:
8f:b9:2b:a5:9b:81:c5:1d:d3:40:3c:4f:e0:24:7e:
ed:a8:3d:33:23:89:6f:b7:f8:87:df:49:fb:ca:9e:
54:bb:ec:22:8c:65:95:47:a8:95:87:0b:c0:8d:0d:
57:fe:bd:dd:6e:25:dc:19:7d:af:dc:cb:4f:8e:35:
c5:c5:0f:2d:c8:1b:b5:25:23:9b:1b:15:57:07:d9:
10:34:7d:ae:6e:26:fe:8a:54:84:19:7a:6a:ce:b2:
2d:73:09:08:77:5b:37:ec:6e:6a:a7:1e:10:5e:6c:
4e:0b:ac:14:be:b2:8f:8f:6a:7d:88:70:f3:13:73:
ce:19:78:43:ef:68:1c:6c:4a:43:57:21:40:c1:4f:
3f:9b:eb:6f:c4:a3:83:3a:e8:94:1e:46:a9:f7:89:
52:71:23:2f:b8:22:4f:fb:c4:dc:82:18:a4:0b:a5:
1b:87:7a:81:9f:e2:0a:1b:7b:39:86:60:21:4d:b2:
fc:aa:ae:20:7d:48:5f:d0:13:d4:69:54:71:93:e6:
1f:4d:c7:a4:86:56:c3:df:19:b5:58:be:9b:e4:10:
e8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F1:09:70:31:87:1D:32:DE:1F:7A:62:FB:D4:5A:21:4B:B1:DE:4E
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139352e35382e3133352e302f32342d3234203d3e20323136343331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.58.135.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:37:8b:94:c4:62:b4:55:53:a3:95:ae:c7:d2:2b:42:c3:d2:
3b:40:d6:fe:ff:a3:d0:00:8d:51:63:7c:65:24:f1:e3:20:80:
2a:4f:4a:9e:42:99:46:2e:f0:67:4e:cc:d6:36:b8:71:ad:ef:
0a:b6:79:1a:8b:70:8a:e3:6e:7c:0a:93:cc:a9:0a:80:e1:db:
35:60:87:75:2f:53:2c:c6:81:30:0b:b5:66:9f:f1:1d:ba:1b:
28:11:e7:24:5c:09:4b:dc:0a:97:64:98:d0:03:e8:e3:bc:b1:
dc:fa:64:10:65:6e:04:b8:20:d0:e7:09:37:f3:a2:5f:b2:bd:
d7:31:e1:4c:6d:57:ac:ed:f4:f6:44:1f:5d:7f:50:72:fd:7f:
1a:5d:45:d1:2a:99:7b:b9:13:14:b9:bd:eb:1e:9b:38:59:95:
15:da:e1:52:21:f7:94:1c:fe:13:43:71:4d:b2:01:8f:da:8a:
98:7e:0f:a3:b0:62:84:4f:ae:55:50:54:8f:83:62:65:8a:6c:
81:09:01:58:07:40:b5:31:bf:fd:1c:41:c3:52:27:42:14:84:
a9:17:57:88:ac:d4:71:63:b3:7f:0b:a1:50:71:a2:32:51:9e:
3c:49:de:fb:f3:45:e1:11:10:3e:63:04:36:aa:3f:0a:ae:4f:
88:9b:2b:fd
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUNAmqB+qCj+LADrA3+VsfjIPVpswwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGQ3ZmZhZTMwMGRlZjA4NzZiZjg0ODkwZmI2ZWExN2Jl
ODQxYTRkMzAeFw0yNjA1MDEwNzQ1MTdaFw0yNzA0MzAwNzUwMTdaMDMxMTAvBgNV
BAMTKDE4RjEwOTcwMzE4NzFEMzJERTFGN0E2MkZCRDQ1QTIxNEJCMURFNEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGeyaiegpMTZ1H9ka0dVdZefVT
5AsDrMW9LuH0uwKpw7Xd3HmeacsDxgbhL4+5K6WbgcUd00A8T+Akfu2oPTMjiW+3
+IffSfvKnlS77CKMZZVHqJWHC8CNDVf+vd1uJdwZfa/cy0+ONcXFDy3IG7UlI5sb
FVcH2RA0fa5uJv6KVIQZemrOsi1zCQh3WzfsbmqnHhBebE4LrBS+so+Pan2IcPMT
c84ZeEPvaBxsSkNXIUDBTz+b62/Eo4M66JQeRqn3iVJxIy+4Ik/7xNyCGKQLpRuH
eoGf4gobezmGYCFNsvyqriB9SF/QE9RpVHGT5h9Nx6SGVsPfGbVYvpvkEOiXAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUGPEJcDGHHTLeH3pi+9RaIUux3k4wHwYDVR0j
BBgwFoAUDX/64wDe8Idr+EiQ+26he+hBpNMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODExM2RkYTYtN2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4
Y2ExLzEvMEQ3RkZBRTMwMERFRjA4NzZCRjg0ODkwRkI2RUExN0JFODQxQTREMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RYXzY0d0RlOElkci1FaVEtMjZoZS1o
QnBOTS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODExM2RkYTYt
N2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4Y2ExLzEvMzEzOTM1MmUzNTM4MmUzMTMz
MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzYzNDMzMzEucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADDOocwDQYJKoZIhvcNAQELBQADggEBAD03i5TEYrRVU6OVrsfSK0LD0jtA1v7/
o9AAjVFjfGUk8eMggCpPSp5CmUYu8GdOzNY2uHGt7wq2eRqLcIrjbnwKk8ypCoDh
2zVgh3UvUyzGgTALtWaf8R26GygR5yRcCUvcCpdkmNAD6OO8sdz6ZBBlbgS4INDn
CTfzol+yvdcx4UxtV6zt9PZEH11/UHL9fxpdRdEqmXu5ExS5vesemzhZlRXa4VIh
95Qc/hNDcU2yAY/aiph+D6OwYoRPrlVQVI+DYmWKbIEJAVgHQLUxv/0cQcNSJ0IU
hKkXV4is1HFjs38LoVBxojJRnjxJ3vvzReERED5jBDaqPwquT4ibK/0=
-----END CERTIFICATE-----
Generated at Wed May 6 01:11:52 2026 by rpki-client