Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/38332e3135302e3231362e302f32342d3234203d3e203436333730.roa
File: 38332e3135302e3231362e302f32342d3234203d3e203436333730.roa (raw, json)
Hash identifier: IVIWJ3UkzAwwCoH8I7JxOaylMB3GsZjFpJW+lWsBs4U=
Subject key identifier: D0:20:C0:EF:E5:43:C7:D6:59:9B:A5:34:C8:8F:94:C9:96:87:43:92
Certificate issuer: /CN=5e5179bb1757068d7028510feeb1177aa7cc8818
Certificate serial: 34493452DD8180231156537E4AD64937DA236F02
Authority key identifier: 5E:51:79:BB:17:57:06:8D:70:28:51:0F:EE:B1:17:7A:A7:CC:88:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/38332e3135302e3231362e302f32342d3234203d3e203436333730.roa
Signing time: Thu 07 May 2026 08:19:07 +0000
ROA not before: Thu 07 May 2026 08:14:07 +0000
ROA not after: Thu 06 May 2027 08:19:07 +0000
asID: 46370
IP address blocks: 83.150.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.crl
rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.mft
rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 May 2026 22:40:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:49:34:52:dd:81:80:23:11:56:53:7e:4a:d6:49:37:da:23:6f:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e5179bb1757068d7028510feeb1177aa7cc8818
Validity
Not Before: May 7 08:14:07 2026 GMT
Not After : May 6 08:19:07 2027 GMT
Subject: CN=D020C0EFE543C7D6599BA534C88F94C996874392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a4:66:ad:f0:98:9f:1e:3f:ba:7b:fd:3b:67:
db:22:32:ae:55:73:29:9e:f2:ca:53:ae:94:2c:00:
65:d9:de:9a:e1:5b:73:96:34:4a:9a:d7:41:88:89:
6d:0a:cb:b2:e6:1a:5d:ec:b4:2b:f2:75:84:2a:5d:
18:fe:8e:9e:0d:6d:95:47:3c:1c:2a:86:bc:77:f9:
21:2a:cc:36:91:7b:88:6a:e0:56:1b:9f:ae:16:b4:
bf:fb:5a:f8:cf:02:7d:10:60:65:c4:00:b6:30:ef:
5f:cc:e8:7c:8e:88:d1:ed:d5:02:08:bd:71:06:a0:
07:7e:ad:c6:e4:f5:09:21:be:55:5c:c1:b3:f4:1d:
33:c7:8f:76:c6:65:d9:ba:ae:ea:5e:96:ae:fa:b5:
43:16:cf:26:23:2f:3f:8c:26:8b:ec:c7:2a:95:4e:
c4:ce:56:c1:80:b5:82:17:29:de:e9:38:09:1e:40:
cb:a2:0b:98:74:14:18:b7:08:76:6e:e6:88:8a:b8:
d1:7c:ea:8b:35:47:58:95:b4:ab:dd:e8:3a:e4:8d:
6e:03:8c:b8:4b:f8:2e:db:fe:bf:2a:57:2b:cd:3c:
d8:6b:4e:8c:0f:cf:c7:0e:7a:f0:e0:6d:97:79:cc:
1e:6d:39:54:2a:19:88:12:fb:65:40:d9:2f:0d:8f:
64:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:20:C0:EF:E5:43:C7:D6:59:9B:A5:34:C8:8F:94:C9:96:87:43:92
X509v3 Authority Key Identifier:
keyid:5E:51:79:BB:17:57:06:8D:70:28:51:0F:EE:B1:17:7A:A7:CC:88:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/38332e3135302e3231362e302f32342d3234203d3e203436333730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.150.216.0/24
Signature Algorithm: sha256WithRSAEncryption
78:64:f2:49:8b:6c:e6:fe:14:88:fa:5f:fa:60:c9:ba:63:cc:
e9:94:03:1c:39:c2:e3:75:3c:c4:c3:a1:7b:bb:de:b7:97:c1:
22:2b:d2:42:9c:bc:4d:64:99:90:c5:71:61:ac:10:0a:c7:0f:
1b:19:28:05:8d:1e:9a:a1:1c:f4:e7:15:0e:65:3e:79:d9:1e:
f0:2b:0e:c8:00:9e:30:fa:bf:4f:e9:b1:d3:4e:3a:7c:70:25:
d2:39:de:b3:76:d6:01:a7:df:f8:76:eb:81:af:56:83:e7:db:
c3:02:a8:c6:47:90:e5:93:25:15:65:33:3b:ed:5c:92:fa:68:
86:60:23:ff:39:a9:0f:93:f2:55:ef:ae:c8:9c:31:1c:41:01:
91:c4:bf:16:51:22:c9:8c:8a:23:68:e2:89:1e:ff:7e:17:21:
88:76:a1:20:69:9f:a8:d9:06:32:5a:bf:00:f3:29:21:79:3b:
1b:9b:4a:07:2a:a9:83:6f:ea:d3:9f:d0:5f:43:67:71:93:c2:
92:d7:ec:54:05:a5:f5:26:04:f8:04:85:9d:bd:81:70:69:0c:
71:25:72:6b:73:91:13:6c:11:ee:3a:a7:89:20:b5:ed:6f:3a:
91:0d:23:1d:95:73:19:56:49:ce:b1:90:d5:38:ef:ef:1b:64:
f7:f6:69:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 09:30:45 2026 by rpki-client