Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139352e35382e3134372e302f32342d3234203d3e20323030323633.roa
File: 3139352e35382e3134372e302f32342d3234203d3e20323030323633.roa (raw, json)
Hash identifier: 9z8RR+4kicIpHtWAN+MA+nQ48HTmtmjCQKliFrSYxUU=
Subject key identifier: E2:28:A2:07:C1:2D:B7:90:BA:9C:CF:38:AA:5D:F9:C7:FC:18:0A:24
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 393F6A0D5F122DF9EC29EF38BAEEF37C205F3DC5
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139352e35382e3134372e302f32342d3234203d3e20323030323633.roa
Signing time: Mon 09 Mar 2026 07:08:59 +0000
ROA not before: Mon 09 Mar 2026 07:03:59 +0000
ROA not after: Mon 08 Mar 2027 07:08:59 +0000
asID: 200263
IP address blocks: 195.58.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Mar 2026 20:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:3f:6a:0d:5f:12:2d:f9:ec:29:ef:38:ba:ee:f3:7c:20:5f:3d:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: Mar 9 07:03:59 2026 GMT
Not After : Mar 8 07:08:59 2027 GMT
Subject: CN=E228A207C12DB790BA9CCF38AA5DF9C7FC180A24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:91:3d:bd:fe:93:86:cf:d1:85:8b:fc:2e:e2:
ea:be:c9:aa:70:ad:b1:f0:12:a1:79:ef:e1:15:a8:
e4:89:02:19:fb:88:b2:71:4f:fb:17:94:da:f4:8c:
14:9b:44:69:8f:e0:df:3c:e8:d2:66:ca:4a:08:a6:
82:f9:7e:3a:34:8a:f6:37:9e:7f:31:9c:51:74:a4:
3d:18:de:53:9e:4d:2b:8c:31:ec:96:64:51:1a:89:
49:61:30:f4:5d:6f:23:93:24:df:5f:4a:fb:49:46:
c0:22:11:a0:da:57:35:5a:c3:fe:4e:7d:53:a0:50:
64:c7:c3:3c:23:93:7a:1e:5f:7b:4f:e0:9c:4b:cb:
eb:70:b9:3c:4c:00:d8:b0:c2:40:18:00:e7:27:27:
15:b6:08:5b:e7:62:45:b8:f9:bb:52:5d:c1:be:50:
19:42:06:75:c6:cf:eb:bf:dd:d1:1a:05:69:ec:b5:
9a:de:34:ce:ab:1d:a1:7f:50:cb:19:42:42:f6:51:
7a:43:64:be:86:ac:d3:4a:a0:58:a7:12:d5:eb:c5:
32:93:f3:b7:99:64:8c:f3:6e:ab:0b:01:26:25:07:
90:18:90:3e:69:ba:2c:49:47:76:4a:a5:0f:8f:32:
ec:35:d2:35:6a:17:3e:5b:b5:65:47:d6:08:08:3f:
ab:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:28:A2:07:C1:2D:B7:90:BA:9C:CF:38:AA:5D:F9:C7:FC:18:0A:24
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139352e35382e3134372e302f32342d3234203d3e20323030323633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.58.147.0/24
Signature Algorithm: sha256WithRSAEncryption
05:0b:50:da:f2:30:22:e5:5b:9a:cb:38:5e:c7:4f:6d:58:9e:
f8:ae:ed:b8:7b:8e:73:b0:3b:21:74:f4:3a:4b:86:fa:f9:e0:
2a:6f:6b:10:49:63:31:c9:e6:cc:85:f6:9a:bf:e2:74:9b:88:
48:97:00:29:c2:0f:06:6b:18:ef:fc:7c:85:32:92:ad:e3:c6:
ba:dc:66:7c:e5:14:ab:df:8e:bd:f3:f2:e2:27:23:5c:3c:e8:
67:77:3b:21:93:b9:7c:05:37:85:ea:bb:55:2b:58:31:61:14:
26:06:09:ea:4e:6f:ba:98:39:c3:24:80:c5:2f:a0:67:e9:0d:
13:cf:45:1a:41:95:01:f1:05:72:61:9e:33:bd:bc:13:bc:6f:
f0:c7:c4:52:94:8c:d4:f5:69:ac:86:e0:e7:d3:ac:98:b5:0d:
44:d3:60:c3:69:0f:76:20:08:81:1e:b0:6d:b8:a1:d5:56:37:
ea:5e:61:0e:00:6d:1f:f7:96:62:be:b0:5a:8e:94:ad:0b:b6:
d8:fc:9f:21:32:db:df:03:8b:6e:15:44:95:34:cd:23:f8:ae:
34:5b:f7:cd:72:04:7e:36:1f:25:97:08:b9:ab:25:00:a5:28:
c8:8a:7c:e3:20:2d:4f:85:37:df:3a:9c:91:94:50:83:54:b6:
a1:28:e4:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 07:34:49 2026 by rpki-client