Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e3135302e3133362e302f32342d3234203d3e20323138383837.roa
File: 3138352e3135302e3133362e302f32342d3234203d3e20323138383837.roa (raw, json)
Hash identifier: d8SGqT+3e97mP1JuNbIjPJyRM+IWLvpdAzTOnM/axGI=
Subject key identifier: 4F:1F:9A:EB:50:21:69:CD:A1:4B:9F:1C:73:71:DC:D2:5A:94:B9:EB
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 6B8A7123F1928F361FF5CA160C141AB2FAB7CA35
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e3135302e3133362e302f32342d3234203d3e20323138383837.roa
Signing time: Mon 07 Sep 2026 09:32:52 +0000
ROA not before: Mon 07 Sep 2026 09:27:52 +0000
ROA not after: Mon 06 Sep 2027 09:32:52 +0000
asID: 218887
IP address blocks: 185.150.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:8a:71:23:f1:92:8f:36:1f:f5:ca:16:0c:14:1a:b2:fa:b7:ca:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Sep 7 09:27:52 2026 GMT
Not After : Sep 6 09:32:52 2027 GMT
Subject: CN=4F1F9AEB502169CDA14B9F1C7371DCD25A94B9EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d1:9d:51:18:96:f4:37:cd:b8:c2:86:eb:1e:
d3:cf:61:aa:a6:51:8b:b7:22:b5:31:70:b0:39:59:
d4:4f:8d:43:ab:b9:81:ee:36:35:c8:c6:3c:79:c8:
2d:90:d4:85:d5:90:3e:a1:ba:cb:ab:04:f4:8d:a7:
d0:fb:65:1b:95:d9:1c:ba:c9:d8:3c:db:c5:dc:ba:
e3:c4:7e:a1:eb:6b:0b:56:4f:03:b5:9d:4d:55:57:
c8:3b:2c:e7:2f:88:aa:b3:44:ac:31:40:7e:4d:13:
84:28:84:f6:b2:97:3a:7a:6d:55:bd:70:79:74:79:
d6:c8:17:74:a8:16:d7:e3:61:58:ba:b1:6b:80:95:
e7:dd:6d:c5:50:91:98:56:88:4b:ed:0a:39:ad:6c:
ea:01:46:64:4f:c2:32:a0:de:59:7d:f1:7f:cb:70:
83:9b:76:65:f0:ac:bf:7a:f9:c1:3f:64:cb:86:58:
0b:46:d0:0c:b4:91:c5:b0:99:5f:f3:d6:a6:65:96:
47:e6:40:84:3d:b6:e5:a6:a4:58:a3:28:30:3a:0a:
bc:fb:2f:7f:1f:46:05:87:fd:6e:5e:0f:b4:13:c4:
3b:7c:17:93:0e:df:56:f6:e1:4a:ea:c1:27:3c:d3:
93:2b:c0:5b:89:2c:81:79:7d:4f:7c:57:55:e5:11:
23:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:1F:9A:EB:50:21:69:CD:A1:4B:9F:1C:73:71:DC:D2:5A:94:B9:EB
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e3135302e3133362e302f32342d3234203d3e20323138383837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.136.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:5f:3d:d1:52:4c:88:59:15:1f:d2:16:b1:52:60:47:41:b5:
1a:6b:bf:19:3e:79:79:70:a5:8b:2c:f3:2f:e1:e3:39:36:c8:
1b:98:24:2d:c7:63:09:dc:19:d5:d5:1b:fb:82:50:01:4c:0e:
c0:21:8d:6e:ed:b8:71:00:de:35:be:4a:21:9a:81:50:4d:18:
6b:b4:a2:e4:a9:cf:ad:68:a7:96:99:58:c7:ae:39:79:fc:9c:
4f:00:d9:1d:57:73:fd:81:ac:e5:86:75:65:c4:2a:df:64:b2:
07:4c:f3:f7:3a:bf:89:05:a2:41:7f:c0:92:e3:2e:43:62:82:
0b:66:2f:3a:b2:d0:56:cc:e2:75:76:e3:13:75:dd:f3:39:53:
72:51:89:e1:4a:03:32:13:19:57:37:ce:f6:17:02:0d:c7:0e:
cb:d2:6d:31:f0:a6:a3:d0:12:b7:2f:05:4d:67:23:66:ea:e4:
59:ce:d4:a7:1e:8c:95:4a:1e:02:fa:1f:c7:9c:37:3a:3a:92:
18:a8:7b:4e:65:e2:6e:4b:93:5c:7a:02:42:92:2c:29:55:44:
63:e7:b3:40:10:d7:11:bd:4b:57:98:26:32:11:81:b7:ea:6e:
65:12:4d:18:97:b0:6c:af:7f:86:f8:47:75:78:5f:27:9f:70:
86:61:b4:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 16 07:33:17 2026 by rpki-client