Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139352e35382e3134352e302f32342d3234203d3e20313532363938.roa
File: 3139352e35382e3134352e302f32342d3234203d3e20313532363938.roa (raw, json)
Hash identifier: SCWuTTAznLtJ4WMx5Ey5QH6I39WSvxD0ZUPe/502S7Y=
Subject key identifier: DA:C9:C0:B3:65:52:37:8D:4F:AE:55:F0:2C:FD:D0:F3:BF:C3:E9:6B
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 5DDEC607249430153E54A5AB8A103AC3B1E81C43
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139352e35382e3134352e302f32342d3234203d3e20313532363938.roa
Signing time: Tue 04 Aug 2026 02:50:58 +0000
ROA not before: Tue 04 Aug 2026 02:45:58 +0000
ROA not after: Tue 03 Aug 2027 02:50:58 +0000
asID: 152698
IP address blocks: 195.58.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:de:c6:07:24:94:30:15:3e:54:a5:ab:8a:10:3a:c3:b1:e8:1c:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: Aug 4 02:45:58 2026 GMT
Not After : Aug 3 02:50:58 2027 GMT
Subject: CN=DAC9C0B36552378D4FAE55F02CFDD0F3BFC3E96B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6a:17:ac:5a:90:82:32:c6:8d:12:0c:6a:1c:
69:8a:98:ab:ab:e9:4d:77:b1:2b:dd:cf:31:21:68:
92:da:d7:34:ca:68:26:5e:ca:07:bc:16:0c:4b:7f:
3d:9f:ef:e8:50:54:ad:10:36:b5:0e:24:d4:0a:7d:
4e:5f:f4:4e:82:7d:21:a5:c3:bf:ed:28:ac:e3:d0:
6f:29:f6:0b:ea:2a:d9:c8:ec:db:d0:60:cc:49:52:
03:b4:89:70:a1:95:aa:f9:b2:d3:3e:c1:05:8c:53:
40:13:ea:69:b0:19:44:53:73:1a:77:50:9f:25:e3:
d5:e3:07:5c:d7:f2:68:62:ee:d7:91:67:d6:e8:83:
bb:84:89:9a:f0:a5:6c:86:c9:2a:41:2a:01:6c:23:
66:f6:3c:6a:9c:e2:fc:6b:bb:5a:5f:9b:28:09:1e:
15:b2:b0:3a:71:06:fe:81:d0:ce:16:ba:1c:ae:ff:
22:59:17:c3:f3:15:19:b0:6b:cc:34:23:9d:0b:1d:
c4:eb:6f:c1:ce:73:fa:54:26:41:ce:81:bc:17:79:
f1:b9:eb:f4:a1:32:90:a0:4e:f5:16:aa:fb:c1:ee:
54:d6:a2:75:94:14:9e:f5:f8:7b:99:25:be:00:e7:
71:47:d8:bf:ac:e6:7c:de:85:75:43:b7:c4:61:85:
c0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:C9:C0:B3:65:52:37:8D:4F:AE:55:F0:2C:FD:D0:F3:BF:C3:E9:6B
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139352e35382e3134352e302f32342d3234203d3e20313532363938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.58.145.0/24
Signature Algorithm: sha256WithRSAEncryption
41:7f:f2:eb:49:58:5c:ee:87:6f:82:1b:f0:49:cc:66:77:4d:
5a:3d:37:13:b9:4f:06:a5:38:ac:d5:bb:64:ce:22:8d:de:80:
f2:fd:68:71:36:b6:52:62:52:3f:cb:58:aa:bf:38:62:99:d9:
5a:46:9d:ed:7e:68:d4:33:25:76:9e:7f:58:a9:22:2b:22:0d:
c7:63:19:85:83:04:fc:14:06:e3:6c:a7:0a:54:32:0d:84:3e:
5c:80:04:73:e5:2a:0c:51:5f:a1:42:36:4c:ea:85:c2:69:ad:
88:16:2c:5e:ba:6b:94:29:ee:f1:4f:dd:2b:36:bb:b0:b4:a7:
7a:7b:b0:c2:2e:c2:83:1f:dd:fe:ab:3a:05:20:55:8b:3a:bd:
15:a1:40:b8:fd:2e:06:dc:0a:47:4a:ac:ec:8a:7f:8b:8e:43:
5b:dd:12:b1:0e:5a:bb:fe:ca:4f:c5:2e:49:0f:23:cc:21:dd:
a7:c4:d5:dd:28:79:71:80:53:f7:f6:3f:62:18:b2:b8:3e:c3:
13:0f:b2:d5:ee:a2:85:e1:34:ba:19:46:ea:0a:29:4a:64:e1:
ce:d7:11:f9:b9:13:41:7b:3d:78:c7:80:bb:f4:69:df:2c:31:
4d:7e:23:df:5b:d4:60:87:f9:f8:4f:01:c2:06:70:74:ee:2d:
dc:80:3f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 09:52:09 2026 by rpki-client