Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139352e35382e3135302e302f32342d3234203d3e20323039383838.roa
File: 3139352e35382e3135302e302f32342d3234203d3e20323039383838.roa (raw, json)
Hash identifier: 75kKSWuTAcCxuCVoGmf6y8s6f7AnPyLhz9c9nMTZ46g=
Subject key identifier: 18:6E:6A:2A:0A:A1:9A:86:39:A3:7A:5C:F2:FD:6D:5B:D1:C3:CC:84
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 7E72FDA5A7EACB364143550CED0B9ABCCDB87F3C
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139352e35382e3135302e302f32342d3234203d3e20323039383838.roa
Signing time: Wed 29 Apr 2026 14:47:55 +0000
ROA not before: Wed 29 Apr 2026 14:42:55 +0000
ROA not after: Wed 28 Apr 2027 14:47:55 +0000
asID: 209888
IP address blocks: 195.58.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 18:48:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:72:fd:a5:a7:ea:cb:36:41:43:55:0c:ed:0b:9a:bc:cd:b8:7f:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: Apr 29 14:42:55 2026 GMT
Not After : Apr 28 14:47:55 2027 GMT
Subject: CN=186E6A2A0AA19A8639A37A5CF2FD6D5BD1C3CC84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2e:ca:e7:9d:5d:00:87:1c:4c:ce:da:00:dd:
85:89:cc:24:22:cf:0d:4e:31:81:84:07:3b:ba:3e:
8a:f6:0b:e4:28:15:30:b2:75:5b:09:c8:b4:4c:c7:
c9:5b:19:37:94:20:c9:78:db:71:31:6c:a7:c5:fc:
65:a1:6d:6d:cb:b3:18:0c:f3:cd:d9:45:3a:c6:27:
56:6a:1c:fc:03:29:0e:07:ff:0c:31:74:46:ee:1c:
64:03:0b:ef:f7:f0:3f:76:31:8c:8f:e6:00:ee:54:
03:3b:b8:d6:84:69:c4:23:ce:91:ca:13:0f:74:d7:
c7:b5:f0:86:ee:9f:51:14:a3:07:6f:de:52:ce:da:
9c:d1:e4:e1:b8:90:c1:26:82:06:fc:9e:61:45:4d:
e9:66:95:31:0c:77:a7:18:c5:6a:01:a1:2d:57:25:
54:ef:9d:72:52:10:36:8d:51:e5:ee:6f:14:d0:85:
01:0a:86:d1:4c:9f:1d:74:40:f9:ee:e8:21:b8:fd:
b4:c8:2e:dc:14:78:f1:b2:76:77:79:3b:e7:31:dc:
da:6b:bf:ce:40:de:be:e3:ff:d3:76:71:59:43:fe:
d7:58:f4:1f:46:ea:69:7c:98:2f:ce:96:97:d2:99:
99:16:5e:51:9f:12:a4:5d:03:e9:f2:e1:a4:71:27:
da:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:6E:6A:2A:0A:A1:9A:86:39:A3:7A:5C:F2:FD:6D:5B:D1:C3:CC:84
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139352e35382e3135302e302f32342d3234203d3e20323039383838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.58.150.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:0e:37:15:e6:8e:b6:d4:67:16:73:b0:2d:c9:31:b9:26:ba:
7d:e7:b6:e3:87:6c:d6:df:a2:ea:e3:ad:76:6f:10:6c:96:c6:
17:f5:9c:41:a1:fc:30:db:d3:dd:cd:17:96:fb:ac:fa:b2:53:
37:e9:e8:2e:09:84:e6:67:76:38:9b:a0:f2:1b:ba:71:a2:87:
49:16:ba:54:67:1d:9b:5d:39:ca:cd:c2:36:69:34:04:64:a2:
ed:ac:bc:75:81:46:71:9b:94:24:71:e2:46:79:dc:0e:31:a0:
92:cf:e6:b9:e3:24:18:6f:06:9c:88:6f:f4:9a:f4:11:6c:68:
22:70:a9:f3:0b:41:c6:37:cf:dd:e4:97:67:7c:b0:6b:0d:84:
be:a3:84:55:5f:3e:99:0b:44:80:6a:80:14:fb:15:0b:56:2f:
83:48:66:f8:d5:94:46:d9:93:91:60:10:e2:55:f2:72:09:7a:
ed:bd:91:fb:4b:85:43:1b:e0:22:49:44:6d:8b:25:cf:6e:44:
6f:3a:ba:49:f2:53:a0:ba:40:d0:2d:29:2b:bf:88:f3:bc:94:
56:e9:d6:29:05:04:7e:c4:0f:6b:28:e2:b3:0f:b9:f8:63:05:
2d:b1:c1:29:18:65:79:64:12:e4:59:b7:18:ff:59:e8:7f:96:
e4:09:2b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 01:11:52 2026 by rpki-client