Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139352e35382e3134352e302f32342d3234203d3e20323034393134.roa
File: 3139352e35382e3134352e302f32342d3234203d3e20323034393134.roa (raw, json)
Hash identifier: IwoP9ouIn2o/JOZwqVHn5/N4dA78+n9fQqCafGrX2ag=
Subject key identifier: 01:B1:13:8F:66:ED:3E:C5:5B:18:E7:E5:3C:59:FB:13:55:1E:46:97
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 26DFADF9B57660E8D9D06C7B4FFB286ACFEBD482
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139352e35382e3134352e302f32342d3234203d3e20323034393134.roa
Signing time: Sun 06 Sep 2026 10:15:36 +0000
ROA not before: Sun 06 Sep 2026 10:10:36 +0000
ROA not after: Sun 05 Sep 2027 10:15:36 +0000
asID: 204914
IP address blocks: 195.58.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 14:04:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:df:ad:f9:b5:76:60:e8:d9:d0:6c:7b:4f:fb:28:6a:cf:eb:d4:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: Sep 6 10:10:36 2026 GMT
Not After : Sep 5 10:15:36 2027 GMT
Subject: CN=01B1138F66ED3EC55B18E7E53C59FB13551E4697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:85:a0:09:9f:e9:d5:30:72:f4:a4:ad:4e:9b:
4a:62:9a:12:ab:ea:55:36:b6:71:b7:4e:a0:f4:09:
6a:4b:18:a5:cc:e1:31:8d:15:25:11:85:2a:19:78:
8a:0d:e1:59:21:50:e3:9a:f7:bd:e8:cf:0f:c4:b4:
e5:36:52:49:44:26:69:0e:94:18:4f:e8:14:df:d0:
6b:9a:d1:fd:4d:db:8d:c9:cb:d4:29:94:15:7f:29:
e4:d9:84:30:aa:09:c7:6e:20:6a:44:aa:b9:00:67:
f4:00:43:bd:e6:70:7a:a3:ce:c1:1f:59:c2:4e:1b:
44:b2:c4:ee:c1:c2:61:d4:cb:89:7c:da:00:c3:92:
4c:8b:56:24:6b:98:1a:9d:70:62:ae:92:5d:c1:05:
9f:e4:42:52:67:20:b3:cf:0c:1a:24:58:28:69:3d:
04:69:9b:33:df:32:2a:4d:29:07:54:10:a2:5d:5d:
4b:6c:00:b3:e9:38:06:c0:0f:36:68:5d:cb:7d:b2:
5c:9b:32:3e:b1:5d:d2:55:41:23:fb:4f:e7:52:ee:
6d:3d:6e:f5:e5:42:3c:8a:c1:34:4f:0f:3a:20:b0:
6c:8d:f4:9d:56:7a:a9:04:b9:11:85:5a:6b:28:c7:
57:2a:15:ab:c2:2d:a6:15:93:09:1f:db:58:cd:f7:
38:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B1:13:8F:66:ED:3E:C5:5B:18:E7:E5:3C:59:FB:13:55:1E:46:97
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139352e35382e3134352e302f32342d3234203d3e20323034393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.58.145.0/24
Signature Algorithm: sha256WithRSAEncryption
61:ed:27:26:e3:9d:a7:a9:3d:23:9b:61:7d:ff:df:41:35:b6:
74:4a:22:da:dd:16:51:da:d7:4d:cc:60:41:b3:33:5b:8a:48:
28:6a:c3:1e:54:1d:5f:a8:9b:36:a3:cc:cb:7d:5f:b1:ed:4a:
31:fe:d9:81:2f:7d:fd:cb:08:28:3a:1d:f0:c0:83:b0:15:b8:
af:6c:97:96:62:a2:91:7e:b5:0e:7b:94:18:36:6d:b5:b3:4c:
06:81:01:36:35:46:6a:bf:7f:29:62:9c:7d:9c:f7:dc:91:c6:
fd:40:65:2a:6c:94:25:01:51:da:ae:cb:8c:67:1d:02:3a:a0:
ae:d9:6d:54:fe:3f:f0:1a:b6:46:bf:4d:2f:2a:7d:18:44:2e:
9b:a9:b8:65:d0:aa:45:99:a4:07:1b:fa:86:6a:a9:8a:35:05:
4b:86:66:13:f0:45:17:4c:4e:50:b8:2a:72:b1:55:7d:46:12:
da:0f:bb:d9:21:4e:ae:20:55:04:b1:bb:bf:d1:e2:50:a8:c5:
2a:ac:fa:47:3d:cb:f0:08:e9:49:75:33:cc:61:d7:3a:fd:cc:
1f:34:95:6e:b6:29:52:75:8c:bb:20:31:bb:03:3e:b6:40:a4:
92:21:76:d7:0a:11:d1:7a:5c:43:fe:ec:cd:e5:fb:7b:47:be:
c8:60:5b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 22:23:25 2026 by rpki-client