Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e3135302e3133382e302f32332d3234203d3e20383334.roa
File: 3138352e3135302e3133382e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: 9silo27g9u3ambZ0M+NzkUaJS1FuzteJ2g0Ndd9QmEE=
Subject key identifier: 94:A2:6C:C7:A3:E0:D3:43:49:F2:E8:3E:B6:96:35:10:77:99:D8:FD
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 0F011794950C8AEAF81D2B600DF01441A1ACBA4C
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e3135302e3133382e302f32332d3234203d3e20383334.roa
Signing time: Thu 09 Jul 2026 11:00:36 +0000
ROA not before: Thu 09 Jul 2026 10:55:36 +0000
ROA not after: Thu 08 Jul 2027 11:00:36 +0000
asID: 834
IP address blocks: 185.150.138.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 23:41:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:01:17:94:95:0c:8a:ea:f8:1d:2b:60:0d:f0:14:41:a1:ac:ba:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Jul 9 10:55:36 2026 GMT
Not After : Jul 8 11:00:36 2027 GMT
Subject: CN=94A26CC7A3E0D34349F2E83EB69635107799D8FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:85:d1:3e:83:79:2c:c1:c7:88:7f:bb:e4:36:
d3:97:f0:26:53:64:25:78:57:60:47:15:8e:ec:0c:
7d:45:4c:aa:50:f6:ab:c5:be:51:67:42:14:85:c6:
e4:11:e3:9b:8f:51:2b:33:2f:48:68:9d:6f:e0:73:
21:db:8d:87:b7:36:cc:bb:e7:1d:c7:55:8a:bf:73:
23:ca:e1:8b:a3:31:85:d4:5a:6e:72:eb:e7:72:c3:
50:75:2e:85:94:5b:97:6e:bf:7c:4e:09:f0:30:04:
91:0d:8b:f9:f7:1f:7e:f2:60:9e:a6:e8:c6:93:ca:
4f:ef:b7:03:24:e7:82:18:6d:d8:25:d3:ba:07:0a:
ab:fc:df:e6:ee:30:dd:ca:9d:35:25:95:49:4c:98:
2e:7e:c5:a4:07:84:32:c0:c5:64:c1:6e:18:2d:af:
4e:30:f4:41:2a:28:35:11:c1:0c:5c:6d:6a:a3:c6:
89:20:1a:4c:1b:2a:4e:d6:c1:1b:8d:90:db:d8:fa:
31:66:57:0a:ae:d4:c3:6a:d4:74:d6:5c:f3:fc:77:
52:08:eb:9c:98:93:39:fa:e7:4f:71:9b:b3:24:75:
a8:2a:3c:3a:97:e4:9b:46:ea:64:51:41:dd:ef:77:
de:5f:df:47:df:59:84:45:79:c6:b1:6b:9a:f8:9a:
17:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A2:6C:C7:A3:E0:D3:43:49:F2:E8:3E:B6:96:35:10:77:99:D8:FD
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e3135302e3133382e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.138.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:88:ae:fa:cb:ad:1f:62:0e:55:ba:b5:e9:0f:81:48:7e:eb:
71:6d:80:5e:fc:b7:2b:7b:6d:62:f5:12:87:24:55:d5:79:84:
ee:f5:8a:fe:3a:33:ff:14:14:1f:ab:bd:83:5f:10:e0:a9:73:
9d:52:89:07:62:78:36:04:ef:e1:f5:a2:ee:5b:bc:15:af:54:
23:64:13:cc:78:4a:36:c9:81:68:37:f3:17:2e:34:79:2b:28:
e8:74:c3:be:87:fa:17:b7:74:9f:61:d6:c8:c6:ba:6d:69:4e:
35:c4:8c:a6:7e:f7:1d:56:c9:7a:f8:6c:34:f6:62:f3:52:a2:
3f:30:5e:e0:c1:92:9d:42:a7:71:79:76:06:43:5e:be:44:cd:
3e:a1:a5:de:ea:a9:d5:80:b6:97:52:3c:59:15:ee:6b:f7:06:
d0:6d:9d:46:60:9e:c3:a9:4e:39:b0:70:44:c0:c1:b1:cd:dd:
b7:8e:32:bd:57:68:9b:49:7c:83:71:f9:d8:9d:38:05:a7:16:
c6:eb:75:62:d6:ae:3e:dd:11:cd:2f:3f:f8:de:15:11:5a:a8:
21:85:d3:dd:28:ad:83:55:1c:c0:bb:51:a4:85:94:ab:aa:fe:
07:6e:0f:4e:d7:05:8e:a1:3b:22:83:68:0f:ea:45:a2:71:9f:
71:6f:a5:2e
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUDwEXlJUMiur4HStgDfAUQaGsukwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0
MGI1ZjNlMzAeFw0yNjA3MDkxMDU1MzZaFw0yNzA3MDgxMTAwMzZaMDMxMTAvBgNV
BAMTKDk0QTI2Q0M3QTNFMEQzNDM0OUYyRTgzRUI2OTYzNTEwNzc5OUQ4RkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9hdE+g3kswceIf7vkNtOX8CZT
ZCV4V2BHFY7sDH1FTKpQ9qvFvlFnQhSFxuQR45uPUSszL0honW/gcyHbjYe3Nsy7
5x3HVYq/cyPK4YujMYXUWm5y6+dyw1B1LoWUW5duv3xOCfAwBJENi/n3H37yYJ6m
6MaTyk/vtwMk54IYbdgl07oHCqv83+buMN3KnTUllUlMmC5+xaQHhDLAxWTBbhgt
r04w9EEqKDURwQxcbWqjxokgGkwbKk7WwRuNkNvY+jFmVwqu1MNq1HTWXPP8d1II
65yYkzn6509xm7MkdagqPDqX5JtG6mRRQd3vd95f30ffWYRFecaxa5r4mhepAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUlKJsx6Pg00NJ8ug+tpY1EHeZ2P0wHwYDVR0j
BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx
ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD
MTgtTS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt
MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzEzODM1MmUzMTM1MzAyZTMx
MzMzODJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAbmW
ijANBgkqhkiG9w0BAQsFAAOCAQEALoiu+sutH2IOVbq16Q+BSH7rcW2AXvy3K3tt
YvUShyRV1XmE7vWK/joz/xQUH6u9g18Q4KlznVKJB2J4NgTv4fWi7lu8Fa9UI2QT
zHhKNsmBaDfzFy40eSso6HTDvof6F7d0n2HWyMa6bWlONcSMpn73HVbJevhsNPZi
81KiPzBe4MGSnUKncXl2BkNevkTNPqGl3uqp1YC2l1I8WRXua/cG0G2dRmCew6lO
ObBwRMDBsc3dt44yvVdom0l8g3H52J04BacWxut1YtauPt0RzS8/+N4VEVqoIYXT
3Sitg1UcwLtRpIWUq6r+B24PTtcFjqE7IoNoD+pFonGfcW+lLg==
-----END CERTIFICATE-----
Generated at Tue Jul 21 10:20:16 2026 by rpki-client