Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139352e35382e3135312e302f32342d3234203d3e203137343937.roa
File: 3139352e35382e3135312e302f32342d3234203d3e203137343937.roa (raw, json)
Hash identifier: hUrKBDym22w/vosXj2nQSMKxTZrirJZQJUKot5hoK1k=
Subject key identifier: 07:22:C7:86:1D:CB:73:8D:6E:47:6C:F5:21:A9:97:53:3B:A0:44:F1
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 4133336CA715B4314C81D92CA5F1755E57FB91C6
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139352e35382e3135312e302f32342d3234203d3e203137343937.roa
Signing time: Thu 05 Mar 2026 08:59:24 +0000
ROA not before: Thu 05 Mar 2026 08:54:24 +0000
ROA not after: Thu 04 Mar 2027 08:59:24 +0000
asID: 17497
IP address blocks: 195.58.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Mar 2026 20:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:33:33:6c:a7:15:b4:31:4c:81:d9:2c:a5:f1:75:5e:57:fb:91:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: Mar 5 08:54:24 2026 GMT
Not After : Mar 4 08:59:24 2027 GMT
Subject: CN=0722C7861DCB738D6E476CF521A997533BA044F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:17:93:83:b8:b4:39:b7:c6:e0:a9:5b:83:d7:
4d:bd:08:4a:31:7f:fa:20:77:3f:34:29:f5:80:c3:
fd:6d:81:13:63:59:07:45:2f:f7:a9:bc:84:89:54:
d9:0a:31:34:bf:90:91:ed:e3:6a:8d:5b:a2:c3:83:
6e:63:4e:c2:e8:27:3c:b4:61:b2:97:ea:be:0a:f8:
7c:c0:7e:08:28:34:a1:36:2f:a2:e3:48:4a:d2:d7:
f6:21:46:27:74:d2:56:b6:37:a7:dc:9f:d6:9b:d3:
39:13:9f:d5:7d:bf:7e:0b:9a:66:78:bc:e8:91:dd:
2c:dd:ed:f2:de:59:bb:c2:f4:e3:f7:82:cd:c7:34:
15:16:b7:17:74:1b:ee:fd:2e:af:c8:69:13:f5:f3:
c3:7a:bb:5e:de:ea:05:64:c6:82:4e:b7:31:8b:1f:
04:cd:72:94:6d:f3:4c:a2:1c:a5:c5:31:ac:60:1f:
f1:fb:50:0d:46:78:4d:b9:7b:13:3d:d7:d2:c7:40:
ea:1a:e6:43:a5:08:0c:da:b4:64:27:42:b4:ab:c3:
e5:c5:9d:b5:b9:39:68:cb:a3:06:fa:2b:a1:7e:b7:
3d:5d:7c:ab:2e:7e:42:54:d3:03:b6:30:8b:4e:56:
5c:7d:9c:89:00:4b:61:6f:7c:1c:35:db:68:d7:ce:
f2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:22:C7:86:1D:CB:73:8D:6E:47:6C:F5:21:A9:97:53:3B:A0:44:F1
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139352e35382e3135312e302f32342d3234203d3e203137343937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.58.151.0/24
Signature Algorithm: sha256WithRSAEncryption
51:d0:58:9c:13:8f:13:9d:71:f2:de:56:ca:1a:24:56:99:7d:
ec:2f:44:47:29:32:de:59:a6:10:51:80:50:0d:4c:fb:e4:e3:
28:ba:73:76:0f:ac:6f:1c:20:42:6f:ac:59:99:da:e4:a2:cb:
25:d7:13:c1:1f:2f:b4:42:2f:8a:75:44:fc:df:b3:f6:c7:c2:
de:df:e6:05:8e:61:9f:84:6c:54:14:0e:a2:2b:30:31:48:24:
89:8b:eb:bb:f7:34:cc:d8:b1:21:e4:d9:da:29:cd:0c:2c:ae:
a1:72:27:56:73:c6:b2:1c:d6:16:86:f5:79:2c:f9:07:39:08:
07:53:98:ae:28:53:cd:43:ae:1b:07:17:da:23:f5:3b:dc:99:
db:8e:0e:2c:2a:60:52:de:9d:14:9a:2d:d5:1d:de:9c:16:17:
d5:c4:9a:f0:39:db:d4:d3:5a:46:83:2d:4d:d5:d8:86:f1:1d:
91:2e:ac:26:cc:dd:f5:ab:8b:ad:c8:fc:c0:60:56:65:4a:86:
18:f5:50:fe:9c:5a:cd:69:79:24:c0:16:3a:04:fb:f8:be:3d:
7c:0b:d2:79:d8:c9:ac:25:9f:6e:22:bf:10:3f:5d:4f:81:ba:
4b:37:fc:bf:c3:9a:91:76:42:9d:9c:11:36:11:eb:dc:40:04:
3e:69:d5:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 09:28:19 2026 by rpki-client