Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e3135302e3133372e302f32342d3234203d3e20323035353434.roa
File: 3138352e3135302e3133372e302f32342d3234203d3e20323035353434.roa (raw, json)
Hash identifier: 89/P2+/oWSzllSdGMI9pNtIwQkq5KmFMXALPBL7SmgM=
Subject key identifier: 5C:0C:E9:3C:6B:63:8A:A2:DC:75:54:6F:63:94:1F:DC:7A:E9:D4:C8
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 0919FF34832804FB39A1260D77388A2464D65242
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e3135302e3133372e302f32342d3234203d3e20323035353434.roa
Signing time: Wed 21 Oct 2026 11:39:57 +0000
ROA not before: Wed 21 Oct 2026 11:34:57 +0000
ROA not after: Wed 20 Oct 2027 11:39:57 +0000
asID: 205544
IP address blocks: 185.150.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 22:54:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:19:ff:34:83:28:04:fb:39:a1:26:0d:77:38:8a:24:64:d6:52:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Oct 21 11:34:57 2026 GMT
Not After : Oct 20 11:39:57 2027 GMT
Subject: CN=5C0CE93C6B638AA2DC75546F63941FDC7AE9D4C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1a:a3:52:4d:8d:80:bc:b7:60:69:d8:3d:b5:
d7:d9:7f:df:15:8c:bd:72:f0:6a:1e:b9:2d:47:3d:
62:6d:26:75:d5:f8:aa:6f:8e:ba:4f:5f:d0:9e:82:
25:9c:b2:1c:06:cf:99:a1:43:63:77:30:dc:d3:35:
10:27:2f:e7:16:6c:fd:e5:b5:3a:7c:81:7b:98:a7:
1c:24:f8:ee:78:9a:b9:ce:13:b8:e4:56:a1:b2:7b:
86:88:79:24:bf:29:53:a8:90:ee:95:89:85:09:05:
99:34:7a:18:63:2f:13:f8:e2:9c:53:3c:3b:6b:9b:
c5:18:25:16:19:d3:9f:24:c6:c0:19:67:00:08:11:
d3:9b:a0:92:f0:ba:9b:aa:94:9b:fe:48:b6:9f:f9:
f1:b5:0e:c7:e7:b9:87:1d:89:8a:aa:c6:0f:bc:1c:
85:c3:8e:34:54:1c:96:1c:fb:bb:3a:9d:67:c1:00:
b6:ba:b8:c6:38:a6:c3:9b:33:5f:5d:3f:d0:ec:b4:
27:67:f2:34:0e:61:53:93:f7:45:be:a9:f5:5c:1d:
b7:53:9e:60:72:03:40:39:c5:eb:91:24:c2:0b:74:
3f:ba:78:ba:0b:b2:48:d0:b5:a1:9a:53:d4:57:84:
5f:2f:e6:fd:4c:e7:48:00:6e:22:db:27:5a:b8:89:
cd:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:0C:E9:3C:6B:63:8A:A2:DC:75:54:6F:63:94:1F:DC:7A:E9:D4:C8
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e3135302e3133372e302f32342d3234203d3e20323035353434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.137.0/24
Signature Algorithm: sha256WithRSAEncryption
70:28:05:42:93:05:60:99:20:0f:25:df:f7:e1:ee:df:6b:1c:
19:01:6f:3b:aa:ed:c1:32:37:68:22:10:e5:7d:6a:e0:0d:53:
16:8e:a1:d9:7f:fb:aa:b1:87:fc:47:59:3f:93:10:13:6d:1b:
71:9b:e4:73:3f:5b:43:70:4a:42:78:51:0a:be:42:a4:12:b6:
a9:91:eb:6b:56:f4:93:d6:bc:8d:9e:8f:e3:db:e8:c7:a6:78:
7f:0c:25:59:ea:4f:6b:55:fd:46:6a:0e:10:40:ae:60:09:dd:
f0:09:86:a9:6b:76:ee:27:07:5c:7b:ef:f0:fa:09:63:e9:c6:
ad:3f:f5:e9:57:dd:05:ee:45:80:b6:a8:ea:00:c4:06:83:84:
93:e6:ab:ce:ce:f3:30:69:ae:ac:b5:ba:15:dd:14:50:e9:ca:
3c:42:fa:3a:5e:a1:c8:59:84:0f:b3:d5:8d:74:c5:75:f5:d5:
5f:14:8e:6c:fc:73:67:b2:b6:27:4a:e6:4b:54:45:5b:b3:17:
2b:76:5b:b3:fd:6f:39:b2:c7:7b:1c:93:a7:62:4a:16:58:e1:
00:a7:d1:ae:66:7d:03:27:e5:d1:89:11:c7:ba:80:01:ba:ec:
e7:fc:04:15:70:20:67:3a:20:da:e7:aa:8d:a0:1a:b6:8a:53:
5a:fe:d5:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 14:11:17 2026 by rpki-client