Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e3135302e3133372e302f32342d3234203d3e203239383032.roa
File: 3138352e3135302e3133372e302f32342d3234203d3e203239383032.roa (raw, json)
Hash identifier: C4k6yjk2Vt7Vqfj+5eiGIstUQ5ncmxfyTCx1GO8UilI=
Subject key identifier: 47:AD:38:AC:1F:6B:73:77:68:E5:DE:8E:65:B2:30:8B:90:6A:5E:B6
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 656EE3595A0D877DDD09D0FE3D0DD8D93FB5FE41
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e3135302e3133372e302f32342d3234203d3e203239383032.roa
Signing time: Sat 24 Oct 2026 13:49:38 +0000
ROA not before: Sat 24 Oct 2026 13:44:38 +0000
ROA not after: Sat 23 Oct 2027 13:49:38 +0000
asID: 29802
IP address blocks: 185.150.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:6e:e3:59:5a:0d:87:7d:dd:09:d0:fe:3d:0d:d8:d9:3f:b5:fe:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Oct 24 13:44:38 2026 GMT
Not After : Oct 23 13:49:38 2027 GMT
Subject: CN=47AD38AC1F6B737768E5DE8E65B2308B906A5EB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ff:29:a5:a8:1b:41:35:3b:06:22:34:e7:ce:
51:46:e1:48:e3:d8:03:ad:02:e6:2b:0b:78:52:ea:
70:79:16:58:8d:18:a9:e3:94:a8:ca:5a:7a:7a:f3:
32:c2:d7:5d:ca:76:42:ac:11:80:e8:56:16:1d:87:
4d:fd:5c:63:b6:5a:73:39:31:51:de:45:27:7f:9b:
79:3d:93:13:63:c4:59:fd:5e:72:71:62:b6:7f:37:
5f:ce:b4:a2:61:e1:e9:c5:f6:06:77:34:67:1a:1f:
04:c3:7e:cc:33:10:12:8c:87:05:db:bd:a0:60:bd:
ca:2b:5a:25:13:ad:51:51:8a:97:c3:38:2a:3d:60:
6f:f0:ae:51:f4:e9:a8:cc:3f:16:d8:63:97:93:81:
0f:b6:31:80:9b:18:80:75:0d:02:f1:8b:90:fd:7f:
07:0d:4a:e3:1c:96:c4:b3:ce:71:08:1e:f6:10:aa:
b4:17:d5:3c:02:42:eb:fc:37:bf:85:15:88:a4:96:
4c:0f:ad:26:14:ea:20:0b:1c:aa:dc:ad:f8:68:b5:
24:d6:5e:f8:3b:40:2d:3d:58:53:75:f1:01:e4:fd:
de:12:03:78:6c:db:a2:15:dc:e0:88:b1:63:9e:31:
c6:cc:ea:25:59:a6:42:ec:ef:a5:a5:51:07:0f:ac:
b5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:AD:38:AC:1F:6B:73:77:68:E5:DE:8E:65:B2:30:8B:90:6A:5E:B6
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e3135302e3133372e302f32342d3234203d3e203239383032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.137.0/24
Signature Algorithm: sha256WithRSAEncryption
34:05:64:85:48:37:a8:1e:fc:eb:2a:45:68:bc:00:4d:dd:18:
cb:09:77:ff:02:e4:79:61:c1:32:6a:70:f3:74:df:43:77:82:
26:4c:8b:af:1a:9c:30:fd:cb:9c:c8:6e:59:08:fe:16:e1:3c:
77:48:c9:bb:97:02:6a:bb:ec:d1:04:64:6c:5d:7b:56:c2:fc:
d4:36:46:ad:c7:bf:8c:6d:a2:76:8a:1e:8c:72:63:57:30:47:
12:76:dc:0a:ea:ca:74:95:21:62:99:9d:49:02:bc:7b:5f:c9:
41:9b:f3:14:1a:2f:10:92:e1:ff:2c:a3:48:c6:90:99:8a:17:
7a:18:5c:15:54:ab:5d:a9:f4:5e:a5:84:74:90:84:fa:3c:3f:
b3:7a:0d:18:d9:7c:26:97:a7:ae:08:cd:4d:97:27:b9:99:e8:
40:44:33:9d:d0:15:29:bc:df:4d:36:49:25:77:a2:01:8e:60:
d3:fe:4d:69:92:d9:18:24:e2:3e:55:6c:51:c5:ff:63:a5:28:
64:18:db:84:bd:b6:2d:de:1e:ff:64:ca:42:b7:61:d9:ad:5a:
a6:92:fa:ab:db:f9:8e:d3:5e:87:f3:9d:e7:a3:4a:9e:12:0b:
6d:71:08:ff:79:8f:01:30:a0:71:f2:13:6f:4a:02:42:23:85:
84:3b:6c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 11:27:45 2026 by rpki-client