Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS0.roa
File: AS0.roa (raw, json)
Hash identifier: jWvH7Y8q2TPK9vExpn/Z1MTSOKK0ld4rHwh2ZUZGUE4=
Subject key identifier: D3:19:4F:A9:EC:D4:FC:9C:AE:DE:F4:DD:EB:77:9C:82:20:0D:5D:1C
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: B5001981B5F3FAA5487E8CDD4DC1745647B881
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS0.roa
Signing time: Fri 21 Aug 2026 07:00:11 +0000
ROA not before: Fri 21 Aug 2026 06:55:11 +0000
ROA not after: Fri 20 Aug 2027 07:00:11 +0000
asID: 0
IP address blocks: 193.150.40.0/24 maxlen: 24
2a14:7580:50::/44 maxlen: 44
2a14:7580:100::/40 maxlen: 48
2a14:7580:3000::/36 maxlen: 48
2a14:7580:4000::/36 maxlen: 48
2a14:7580:5000::/36 maxlen: 48
2a14:7580:9000::/36 maxlen: 48
2a14:7580:ff80::/44 maxlen: 48
2a14:7580:ffef::/48 maxlen: 48
2a14:7580:fff3::/48 maxlen: 48
2a14:7580:fff4::/48 maxlen: 48
2a14:7580:fff5::/48 maxlen: 48
2a14:7580:fff8::/48 maxlen: 48
2a14:7581:f10::/44 maxlen: 48
2a14:7581:fe0::/48 maxlen: 48
2a14:7581:fe1::/48 maxlen: 48
2a14:7581:fe6::/48 maxlen: 48
2a14:7581:fe8::/48 maxlen: 48
2a14:7581:fea::/48 maxlen: 48
2a14:7581:fec::/48 maxlen: 48
2a14:7581:fed::/48 maxlen: 48
2a14:7581:fef::/48 maxlen: 48
2a14:7581:ff2::/48 maxlen: 48
2a14:7581:ff5::/48 maxlen: 48
2a14:7581:ff6::/48 maxlen: 48
2a14:7581:ff7::/48 maxlen: 48
2a14:7581:ffa::/48 maxlen: 48
2a14:7581:ffc::/48 maxlen: 48
2a14:7581:ffe::/48 maxlen: 48
2a14:7581:3700::/40 maxlen: 48
2a14:7581:3e00::/40 maxlen: 48
2a14:7581:3f00::/40 maxlen: 48
2a14:7581:5000::/36 maxlen: 48
2a14:7581:9000::/40 maxlen: 48
2a14:7581:9100::/40 maxlen: 48
2a14:7581:9200::/40 maxlen: 48
2a14:7581:9300::/40 maxlen: 48
2a14:7581:9700::/40 maxlen: 48
2a14:7581:9f00::/44 maxlen: 48
2a14:7581:9ff0::/44 maxlen: 48
2a14:7581:e000::/36 maxlen: 48
2a14:7582::/32 maxlen: 48
2a14:7583:2000::/36 maxlen: 48
2a14:7583:8000::/36 maxlen: 48
2a14:7583:e300::/40 maxlen: 48
2a14:7585::/32 maxlen: 48
2a14:7586:a000::/36 maxlen: 48
2a14:7587::/32 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
b5:00:19:81:b5:f3:fa:a5:48:7e:8c:dd:4d:c1:74:56:47:b8:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Aug 21 06:55:11 2026 GMT
Not After : Aug 20 07:00:11 2027 GMT
Subject: CN=D3194FA9ECD4FC9CAEDEF4DDEB779C82200D5D1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:67:fb:6c:b2:17:01:49:0e:c2:1e:41:a2:51:
93:f4:51:28:3f:87:46:a4:5c:2d:fd:ad:67:8c:87:
65:8a:f5:53:5f:6e:7e:a6:c6:78:b0:5f:d2:b4:81:
f8:71:15:ee:89:69:6b:b3:27:0c:8f:d6:d0:63:c8:
fc:a6:3f:cb:58:4e:8c:23:0b:20:ae:e6:e0:40:49:
a8:e7:5c:63:f5:fd:17:b5:51:23:14:b4:28:28:3b:
1e:da:44:fc:21:a3:05:39:60:cf:e9:9f:48:61:53:
4f:61:f8:a7:d6:64:f1:c5:6e:fd:fb:cc:90:e2:45:
b6:9a:ed:52:05:9f:63:da:f9:e8:4f:c3:3c:58:fe:
4d:a6:f7:46:02:3b:a6:48:8f:51:8b:94:bd:87:2c:
91:42:93:15:af:68:38:10:7b:16:0a:db:73:3d:66:
f4:85:cd:e6:d4:a3:75:0d:da:2b:86:d0:99:45:1b:
f5:84:16:a5:58:10:67:d6:ad:23:0e:63:37:73:79:
9f:c0:60:f0:97:f4:e6:0b:6f:d8:cd:57:8c:09:e6:
0b:6f:67:b9:3e:86:4a:79:09:bf:95:3e:32:b1:79:
cb:a5:8c:51:ce:93:f5:35:f7:35:eb:8a:91:6d:0f:
4d:cb:62:08:41:14:ea:c4:f2:59:f4:44:54:1c:b7:
6e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:19:4F:A9:EC:D4:FC:9C:AE:DE:F4:DD:EB:77:9C:82:20:0D:5D:1C
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS0.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.150.40.0/24
IPv6:
2a14:7580:50::/44
2a14:7580:100::/40
2a14:7580:3000::-2a14:7580:5fff:ffff:ffff:ffff:ffff:ffff
2a14:7580:9000::/36
2a14:7580:ff80::/44
2a14:7580:ffef::/48
2a14:7580:fff3::-2a14:7580:fff5:ffff:ffff:ffff:ffff:ffff
2a14:7580:fff8::/48
2a14:7581:f10::/44
2a14:7581:fe0::/47
2a14:7581:fe6::/48
2a14:7581:fe8::/48
2a14:7581:fea::/48
2a14:7581:fec::/47
2a14:7581:fef::/48
2a14:7581:ff2::/48
2a14:7581:ff5::-2a14:7581:ff7:ffff:ffff:ffff:ffff:ffff
2a14:7581:ffa::/48
2a14:7581:ffc::/48
2a14:7581:ffe::/48
2a14:7581:3700::/40
2a14:7581:3e00::/39
2a14:7581:5000::/36
2a14:7581:9000::/38
2a14:7581:9700::/40
2a14:7581:9f00::/44
2a14:7581:9ff0::/44
2a14:7581:e000::/36
2a14:7582::/32
2a14:7583:2000::/36
2a14:7583:8000::/36
2a14:7583:e300::/40
2a14:7585::/32
2a14:7586:a000::/36
2a14:7587::/32
Signature Algorithm: sha256WithRSAEncryption
00:95:21:06:16:5d:8d:dc:16:13:05:d9:d7:94:04:4d:d0:4f:
9a:5b:c9:a2:1c:83:be:73:90:0a:89:79:ac:c5:f2:4c:36:a0:
7d:3d:7d:aa:63:56:8e:b5:7d:b0:d3:92:05:05:aa:5a:9a:30:
40:b7:31:72:79:14:98:fc:1a:29:1c:d5:ad:75:c2:e7:6e:29:
f7:8e:ee:60:5f:17:93:ab:d9:c9:e5:b4:88:f4:04:6c:ed:1a:
bd:ae:78:48:35:ce:0f:9f:5a:71:72:20:fa:b8:a5:64:5e:64:
79:67:2e:a9:d3:b4:b2:37:8e:97:78:d0:93:89:72:70:31:74:
84:d6:b5:56:46:eb:4d:dc:15:41:2d:6f:c4:36:32:25:2d:24:
84:ba:11:dc:25:b4:2e:e6:58:10:46:78:18:0e:e8:25:31:fe:
0c:9f:fd:75:1b:c8:a8:55:ea:61:b9:23:91:b6:0f:16:65:aa:
fb:3b:17:1c:40:a5:b4:f3:89:9c:d1:f9:2c:42:36:75:94:25:
1b:f1:39:87:be:7e:cf:a7:54:ea:11:c0:c7:96:bc:59:0b:38:
c2:e3:e4:33:ad:43:40:2c:23:2c:05:64:aa:c1:8e:43:a3:ce:
10:17:9b:39:d8:3f:60:95:cc:09:f0:2a:ac:a8:5a:7e:51:cb:
98:02:b9:2e
-----BEGIN CERTIFICATE-----
MIIGVTCCBT2gAwIBAgIUALUAGYG18/qlSH6M3U3BdFZHuIEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj
Y2ZkMzc3MjAeFw0yNjA4MjEwNjU1MTFaFw0yNzA4MjAwNzAwMTFaMDMxMTAvBgNV
BAMTKEQzMTk0RkE5RUNENEZDOUNBRURFRjREREVCNzc5QzgyMjAwRDVEMUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Z/tsshcBSQ7CHkGiUZP0USg/
h0akXC39rWeMh2WK9VNfbn6mxniwX9K0gfhxFe6JaWuzJwyP1tBjyPymP8tYTowj
CyCu5uBASajnXGP1/Re1USMUtCgoOx7aRPwhowU5YM/pn0hhU09h+KfWZPHFbv37
zJDiRbaa7VIFn2Pa+ehPwzxY/k2m90YCO6ZIj1GLlL2HLJFCkxWvaDgQexYK23M9
ZvSFzebUo3UN2iuG0JlFG/WEFqVYEGfWrSMOYzdzeZ/AYPCX9OYLb9jNV4wJ5gtv
Z7k+hkp5Cb+VPjKxeculjFHOk/U19zXripFtD03LYghBFOrE8ln0RFQct25PAgMB
AAGjggNfMIIDWzAdBgNVHQ4EFgQU0xlPqezU/Jyu3vTd63ecgiANXRwwHwYDVR0j
BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz
ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16
OU4zSS5jZXIwdgYIKwYBBQUHAQsEajBoMGYGCCsGAQUFBzALhlpyc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt
NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMC5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjCCAXcGCCsGAQUFBwEHAQH/BIIBZjCCAWIwDAQCAAEwBgMEAMGW
KDCCAVAEAgACMIIBSAMHBCoUdYAAUAMGACoUdYABMBADBgQqFHWAMAMGBSoUdYBA
AwYEKhR1gJADBwQqFHWA/4ADBwAqFHWA/+8wEgMHACoUdYD/8wMHASoUdYD/9AMH
ACoUdYD/+AMHBCoUdYEPEAMHASoUdYEP4AMHACoUdYEP5gMHACoUdYEP6AMHACoU
dYEP6gMHASoUdYEP7AMHACoUdYEP7wMHACoUdYEP8jASAwcAKhR1gQ/1AwcDKhR1
gQ/wAwcAKhR1gQ/6AwcAKhR1gQ/8AwcAKhR1gQ/+AwYAKhR1gTcDBgEqFHWBPgMG
BCoUdYFQAwYCKhR1gZADBgAqFHWBlwMHBCoUdYGfAAMHBCoUdYGf8AMGBCoUdYHg
AwUAKhR1ggMGBCoUdYMgAwYEKhR1g4ADBgAqFHWD4wMFACoUdYUDBgQqFHWGoAMF
ACoUdYcwDQYJKoZIhvcNAQELBQADggEBAACVIQYWXY3cFhMF2deUBE3QT5pbyaIc
g75zkAqJeazF8kw2oH09fapjVo61fbDTkgUFqlqaMEC3MXJ5FJj8Gikc1a11wudu
KfeO7mBfF5Or2cnltIj0BGztGr2ueEg1zg+fWnFyIPq4pWReZHlnLqnTtLI3jpd4
0JOJcnAxdITWtVZG603cFUEtb8Q2MiUtJIS6EdwltC7mWBBGeBgO6CUx/gyf/XUb
yKhV6mG5I5G2DxZlqvs7FxxApbTziZzR+SxCNnWUJRvxOYe+fs+nVOoRwMeWvFkL
OMLj5DOtQ0AsIywFZKrBjkOjzhAXmznYP2CVzAnwKqyoWn5Ry5gCuS4=
-----END CERTIFICATE-----
Generated at Fri Aug 21 22:25:59 2026 by rpki-client