Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/38332e3135302e3231362e302f32342d3234203d3e20383334.roa
File: 38332e3135302e3231362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: i430w1PiSeAtfbvjqhVlZHMZ4fIVTkAYclCfFhIeKT0=
Subject key identifier: 8A:45:05:C4:12:EE:06:A7:FA:41:BD:3D:77:FD:16:1A:CF:AE:14:92
Certificate issuer: /CN=5e5179bb1757068d7028510feeb1177aa7cc8818
Certificate serial: 6DF4A355D0D553CDB2A2A7C2D3AF0F8C7ACC6C85
Authority key identifier: 5E:51:79:BB:17:57:06:8D:70:28:51:0F:EE:B1:17:7A:A7:CC:88:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/38332e3135302e3231362e302f32342d3234203d3e20383334.roa
Signing time: Fri 07 Aug 2026 00:08:46 +0000
ROA not before: Fri 07 Aug 2026 00:03:46 +0000
ROA not after: Fri 06 Aug 2027 00:08:46 +0000
asID: 834
IP address blocks: 83.150.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.crl
rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.mft
rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 03:58:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:f4:a3:55:d0:d5:53:cd:b2:a2:a7:c2:d3:af:0f:8c:7a:cc:6c:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e5179bb1757068d7028510feeb1177aa7cc8818
Validity
Not Before: Aug 7 00:03:46 2026 GMT
Not After : Aug 6 00:08:46 2027 GMT
Subject: CN=8A4505C412EE06A7FA41BD3D77FD161ACFAE1492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e0:92:a7:26:ce:42:0c:2e:0f:fe:f0:86:68:
22:f2:0d:7f:49:54:a8:a0:3f:ab:09:dd:d5:99:56:
01:2d:92:2e:b7:db:8d:b9:58:96:f1:4c:78:a4:b6:
cf:47:d0:3d:f5:30:cf:5a:68:ab:35:72:56:3a:2a:
7b:1c:3b:31:68:e1:02:90:c8:ba:e6:68:b2:d7:5c:
c5:a2:e0:fb:42:cc:87:5e:08:f8:10:77:36:40:69:
77:48:6f:c3:5b:c2:bf:6a:0f:71:a1:83:8a:9f:46:
40:ef:00:0b:e4:c0:fe:a7:8a:84:f1:06:b8:21:00:
1e:c4:1e:d9:23:00:b3:0e:e2:45:e0:ed:37:ff:c1:
78:a5:aa:67:6d:c1:55:c8:86:cb:47:21:df:d9:94:
d6:23:3c:32:18:5e:57:10:9f:ce:07:9a:00:b8:08:
01:f0:92:13:49:53:02:06:c3:56:3d:61:d0:ad:90:
dc:71:fe:17:0f:c0:80:d1:b5:da:0f:71:e5:1d:5c:
75:d2:db:f5:cd:0b:41:bf:3b:ed:e3:06:5a:27:9d:
9f:9a:50:f7:11:61:a9:75:08:d4:7e:4d:81:78:14:
ae:f9:3a:96:8c:78:a5:77:de:9a:6c:89:61:71:85:
ec:0e:ea:63:c8:76:bb:79:1d:63:0a:ae:3f:04:d7:
d9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:45:05:C4:12:EE:06:A7:FA:41:BD:3D:77:FD:16:1A:CF:AE:14:92
X509v3 Authority Key Identifier:
keyid:5E:51:79:BB:17:57:06:8D:70:28:51:0F:EE:B1:17:7A:A7:CC:88:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/38332e3135302e3231362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.150.216.0/24
Signature Algorithm: sha256WithRSAEncryption
be:54:c9:57:49:54:ce:10:1d:f0:c0:e1:59:f4:57:e4:ce:63:
99:7b:e1:c9:b1:b7:65:e2:83:27:00:d5:52:a6:89:09:00:20:
42:02:37:a8:64:24:52:62:20:ab:06:6f:20:a1:20:e3:27:3f:
63:fb:9b:aa:46:b1:39:43:a8:17:44:cd:80:59:76:d4:09:09:
4c:99:ec:33:7a:7b:8c:3f:22:6c:0b:f8:d2:5e:96:c5:a6:ac:
e7:b3:47:a6:37:7c:4a:71:02:ab:32:66:33:97:3e:0c:87:3a:
15:c1:96:b7:91:3a:f2:63:cd:0a:63:dc:c3:c3:f2:94:99:5b:
b2:5b:d3:df:3b:47:1e:bd:1a:92:62:05:5d:39:98:f0:38:4b:
1d:11:c8:79:2e:f7:c5:49:3d:46:83:40:77:c4:3b:8e:af:19:
b9:74:cb:5e:fc:42:9b:66:36:13:96:89:b5:6d:c6:f5:a9:1f:
e0:11:82:3e:19:ab:22:ea:00:61:7e:0c:19:99:49:da:dd:3e:
ba:96:c6:ad:b2:e0:b5:d2:a5:5b:90:9d:c1:7c:3a:2f:94:6c:
e8:6b:5f:fa:11:57:24:1c:8e:99:82:0c:7f:ad:bf:d7:84:30:
35:91:d3:f1:05:9d:08:e5:46:88:41:bd:9b:a4:49:87:f4:18:
b5:e7:83:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:20:17 2026 by rpki-client