Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/38332e3135302e3231362e302f32342d3234203d3e20343032323838.roa
File: 38332e3135302e3231362e302f32342d3234203d3e20343032323838.roa (raw, json)
Hash identifier: 7f7PvrEvUml3ihI6q0+dEc4wcNNIlNKmEluIVprvm/M=
Subject key identifier: 85:88:89:89:A1:B8:4A:A5:66:36:D0:0A:4D:F2:53:FB:E1:C6:BA:9A
Certificate issuer: /CN=5e5179bb1757068d7028510feeb1177aa7cc8818
Certificate serial: 06810ED7E6ACB6E07D09387C5B5BE1323961F4FC
Authority key identifier: 5E:51:79:BB:17:57:06:8D:70:28:51:0F:EE:B1:17:7A:A7:CC:88:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/38332e3135302e3231362e302f32342d3234203d3e20343032323838.roa
Signing time: Thu 17 Sep 2026 10:45:52 +0000
ROA not before: Thu 17 Sep 2026 10:40:52 +0000
ROA not after: Thu 16 Sep 2027 10:45:52 +0000
asID: 402288
IP address blocks: 83.150.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.crl
rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.mft
rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 19:43:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:81:0e:d7:e6:ac:b6:e0:7d:09:38:7c:5b:5b:e1:32:39:61:f4:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e5179bb1757068d7028510feeb1177aa7cc8818
Validity
Not Before: Sep 17 10:40:52 2026 GMT
Not After : Sep 16 10:45:52 2027 GMT
Subject: CN=85888989A1B84AA56636D00A4DF253FBE1C6BA9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:46:83:bf:d5:fe:51:67:e3:28:0b:83:8d:78:
8d:f8:ec:0b:6a:96:c4:b8:63:b9:c3:3b:2d:34:6d:
42:86:f8:ee:85:b8:f7:29:93:06:0b:7f:e8:d8:4b:
36:66:57:2e:f5:2f:b8:71:ab:97:e1:f0:9b:e8:ce:
ec:54:d8:b9:a4:19:49:67:a5:3c:3a:8d:91:eb:69:
3a:36:3e:39:da:4e:5b:83:2a:59:70:f0:35:ce:64:
bb:71:f2:ff:ed:2f:c8:db:f9:72:75:ed:8a:00:a0:
73:48:59:24:41:cf:2a:7b:e0:28:b5:14:5d:e4:03:
3e:eb:49:13:ff:b4:e8:39:1e:00:f1:a8:c7:8b:47:
87:b9:93:30:cd:ab:07:b1:c9:26:1a:75:e3:10:27:
ab:90:1a:11:1a:08:8a:06:c7:c8:61:4b:5a:f1:9f:
7e:e3:08:d5:eb:49:e2:2b:e2:15:17:7d:81:1b:25:
ef:89:ad:d8:89:a1:0f:d9:46:0c:68:d3:e2:d9:f7:
f5:38:b0:70:19:99:b0:38:14:92:4e:80:b1:13:11:
60:a9:46:2a:c8:14:cf:0b:3f:84:fa:06:2d:23:b8:
90:7f:31:50:4c:81:bd:a5:7b:61:de:69:e4:c9:b3:
64:31:f9:11:84:2b:58:68:43:cc:80:40:8c:ac:5f:
ab:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:88:89:89:A1:B8:4A:A5:66:36:D0:0A:4D:F2:53:FB:E1:C6:BA:9A
X509v3 Authority Key Identifier:
keyid:5E:51:79:BB:17:57:06:8D:70:28:51:0F:EE:B1:17:7A:A7:CC:88:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/38332e3135302e3231362e302f32342d3234203d3e20343032323838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.150.216.0/24
Signature Algorithm: sha256WithRSAEncryption
48:0b:09:e7:cc:a5:2d:3e:6e:8b:77:d1:d9:b5:0f:f1:9c:1f:
22:94:18:55:1f:c9:7a:d8:48:ce:7d:17:45:e5:5b:5e:2a:c1:
28:2b:7d:34:32:21:9e:e7:bb:ab:22:e6:14:b5:41:51:20:74:
5b:b3:04:a3:fb:57:fd:69:7b:8a:c2:cf:35:26:19:62:12:8a:
3d:fd:d5:d0:97:ac:b1:52:08:57:0f:e0:9c:f8:06:2a:b5:74:
af:dc:16:2f:cf:e0:00:c1:e9:31:b8:88:da:6f:7c:5c:40:bd:
6c:d8:62:74:38:a9:95:31:18:df:aa:b8:2e:35:ac:11:e7:7f:
f9:4c:f5:f1:87:c3:83:b2:c6:ff:5b:18:75:46:35:5d:30:5d:
2e:0c:5d:18:f2:44:59:ef:ef:5b:e3:72:ff:e8:04:b2:fb:ec:
85:39:eb:2f:a1:8d:23:fa:26:35:ad:e2:ec:0c:de:a4:78:19:
0f:9a:d4:c0:86:96:68:37:b3:89:ef:60:7c:86:41:14:de:68:
d7:f9:6f:50:fb:f9:80:4b:31:fa:78:8d:0c:f3:38:b1:98:b9:
e3:d7:58:73:27:07:23:fc:0f:b9:f4:32:eb:78:65:b3:0d:b7:
d4:89:6c:b0:ae:d6:1f:32:74:e6:ff:5b:a7:26:5c:93:ad:83:
a1:52:b9:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 08:41:12 2026 by rpki-client