Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139352e35382e3134362e302f32342d3234203d3e2039303039.roa
File: 3139352e35382e3134362e302f32342d3234203d3e2039303039.roa (raw, json)
Hash identifier: ll1+DsZYPuV5DuCTUxj9BRS7ybU8F+wDFqJlEZ+e8bA=
Subject key identifier: 3A:C0:1C:A5:BE:18:C2:7A:F9:C7:B9:DB:37:4D:52:2F:4C:E0:41:6D
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 4FF4E8594F26FAF448E3B5681814D843A9C594E9
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139352e35382e3134362e302f32342d3234203d3e2039303039.roa
Signing time: Mon 10 Aug 2026 14:04:36 +0000
ROA not before: Mon 10 Aug 2026 13:59:36 +0000
ROA not after: Mon 09 Aug 2027 14:04:36 +0000
asID: 9009
IP address blocks: 195.58.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:f4:e8:59:4f:26:fa:f4:48:e3:b5:68:18:14:d8:43:a9:c5:94:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: Aug 10 13:59:36 2026 GMT
Not After : Aug 9 14:04:36 2027 GMT
Subject: CN=3AC01CA5BE18C27AF9C7B9DB374D522F4CE0416D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d4:0e:df:94:02:b3:5b:c7:fc:17:ca:53:52:
1b:9d:7a:94:1e:fd:01:5c:77:07:3f:ef:23:5e:49:
49:fe:bf:af:74:44:d1:31:cf:8f:f8:46:74:59:5a:
70:cd:43:16:a7:7e:89:32:9a:e6:ca:2e:dc:7f:82:
87:3a:ae:23:d7:61:a1:e5:62:a5:d9:62:56:16:1f:
7b:62:2b:21:82:8a:64:bc:59:17:83:6d:21:5a:5a:
7f:db:52:8a:86:db:f4:32:90:05:6c:cc:06:c3:57:
ed:75:59:e7:3c:e6:77:4f:bf:df:d7:a6:94:d3:c0:
de:b4:25:90:dd:51:c5:91:4b:e5:eb:d9:96:71:f9:
ce:1b:e6:eb:18:85:7c:64:7a:8c:6c:11:33:d7:e3:
db:c2:5c:f6:28:76:ee:f0:71:8f:aa:b3:20:62:bb:
ea:35:9e:70:34:23:da:9f:5d:86:5e:7b:fb:3b:e4:
c7:e7:28:c9:6c:ed:62:35:77:7c:be:fb:85:53:c5:
06:71:07:47:3b:cf:c4:d7:c2:95:44:28:61:ef:ff:
b8:11:cb:81:20:72:65:75:9c:b5:7e:82:b7:92:08:
00:2e:cd:2c:f7:3b:31:78:62:bc:47:78:aa:54:58:
ff:88:d4:d0:aa:6d:f3:60:11:24:26:1a:e2:ca:e7:
2d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C0:1C:A5:BE:18:C2:7A:F9:C7:B9:DB:37:4D:52:2F:4C:E0:41:6D
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139352e35382e3134362e302f32342d3234203d3e2039303039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.58.146.0/24
Signature Algorithm: sha256WithRSAEncryption
76:d3:30:7e:42:38:2c:af:9c:f8:94:f5:f4:23:fe:7f:af:e6:
5c:1b:e5:c8:eb:e4:9d:17:6b:8d:58:cb:56:96:92:8e:27:f7:
5a:59:a4:9d:d1:05:e6:be:75:5f:db:5b:64:50:ff:08:cb:ac:
3c:02:97:e8:3a:30:11:49:85:9e:76:69:09:8c:4d:b1:8d:aa:
59:95:d6:45:4f:e9:37:07:e9:f8:be:1b:8f:7f:5a:06:2e:30:
eb:78:1f:95:01:2d:99:49:e4:d4:89:2d:17:0e:30:11:1e:8b:
b9:ff:98:03:c2:f7:ad:64:27:21:32:47:69:54:2e:54:08:5f:
2f:c8:14:74:6a:47:2d:25:6e:57:e5:51:b7:54:6e:60:4a:5d:
14:19:b8:b2:5b:58:61:41:6f:8d:11:05:39:6e:07:c8:03:52:
85:5c:f3:89:a9:36:4a:1e:b0:9f:5a:a1:75:c4:16:31:af:41:
28:61:34:1e:3f:55:37:ad:c3:cb:2d:4f:61:fd:ff:a3:37:b9:
76:85:0f:0d:e9:02:a0:f8:ef:0a:0e:af:f3:9e:18:8f:01:38:
c7:1a:06:b3:15:1e:fc:25:0f:4e:e5:e5:40:b9:e4:40:05:b9:
68:a8:ce:9f:21:44:38:8c:62:01:cc:53:7f:b6:58:74:a8:cb:
6d:f6:40:a2
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUT/ToWU8m+vRI47VoGBTYQ6nFlOkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGQ3ZmZhZTMwMGRlZjA4NzZiZjg0ODkwZmI2ZWExN2Jl
ODQxYTRkMzAeFw0yNjA4MTAxMzU5MzZaFw0yNzA4MDkxNDA0MzZaMDMxMTAvBgNV
BAMTKDNBQzAxQ0E1QkUxOEMyN0FGOUM3QjlEQjM3NEQ1MjJGNENFMDQxNkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD1A7flAKzW8f8F8pTUhudepQe
/QFcdwc/7yNeSUn+v690RNExz4/4RnRZWnDNQxanfokymubKLtx/goc6riPXYaHl
YqXZYlYWH3tiKyGCimS8WReDbSFaWn/bUoqG2/QykAVszAbDV+11Wec85ndPv9/X
ppTTwN60JZDdUcWRS+Xr2ZZx+c4b5usYhXxkeoxsETPX49vCXPYodu7wcY+qsyBi
u+o1nnA0I9qfXYZee/s75MfnKMls7WI1d3y++4VTxQZxB0c7z8TXwpVEKGHv/7gR
y4EgcmV1nLV+greSCAAuzSz3OzF4YrxHeKpUWP+I1NCqbfNgESQmGuLK5y1NAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUOsAcpb4Ywnr5x7nbN01SL0zgQW0wHwYDVR0j
BBgwFoAUDX/64wDe8Idr+EiQ+26he+hBpNMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODExM2RkYTYtN2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4
Y2ExLzEvMEQ3RkZBRTMwMERFRjA4NzZCRjg0ODkwRkI2RUExN0JFODQxQTREMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RYXzY0d0RlOElkci1FaVEtMjZoZS1o
QnBOTS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODExM2RkYTYt
N2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4Y2ExLzEvMzEzOTM1MmUzNTM4MmUzMTM0
MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzOTMwMzAzOS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMM6
kjANBgkqhkiG9w0BAQsFAAOCAQEAdtMwfkI4LK+c+JT19CP+f6/mXBvlyOvknRdr
jVjLVpaSjif3WlmkndEF5r51X9tbZFD/CMusPAKX6DowEUmFnnZpCYxNsY2qWZXW
RU/pNwfp+L4bj39aBi4w63gflQEtmUnk1IktFw4wER6Luf+YA8L3rWQnITJHaVQu
VAhfL8gUdGpHLSVuV+VRt1RuYEpdFBm4sltYYUFvjREFOW4HyANShVzziak2Sh6w
n1qhdcQWMa9BKGE0Hj9VN63Dyy1PYf3/oze5doUPDekCoPjvCg6v854YjwE4xxoG
sxUe/CUPTuXlQLnkQAW5aKjOnyFEOIxiAcxTf7ZYdKjLbfZAog==
-----END CERTIFICATE-----
Generated at Tue Sep 1 02:08:33 2026 by rpki-client