Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS0.roa
File: AS0.roa (raw, json)
Hash identifier: qIGrN5q1QTl7LUz2Rvk4v1ZK537QUNEnBfEhFWTOC5A=
Subject key identifier: A5:63:41:53:45:B7:60:61:1D:B4:14:3E:C5:39:18:B2:56:B1:1D:39
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 42580968C9C360775861451CBA093E9FB3ADACB6
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS0.roa
Signing time: Sun 04 Oct 2026 07:00:11 +0000
ROA not before: Sun 04 Oct 2026 06:55:11 +0000
ROA not after: Sun 03 Oct 2027 07:00:11 +0000
asID: 0
IP address blocks: 193.150.40.0/24 maxlen: 24
2a14:7580:50::/44 maxlen: 44
2a14:7580:100::/40 maxlen: 48
2a14:7580:3000::/36 maxlen: 48
2a14:7580:4000::/36 maxlen: 48
2a14:7580:5000::/36 maxlen: 48
2a14:7580:9000::/36 maxlen: 48
2a14:7580:ff80::/44 maxlen: 48
2a14:7580:ffb0::/44 maxlen: 48
2a14:7580:ffef::/48 maxlen: 48
2a14:7580:fff3::/48 maxlen: 48
2a14:7580:fff4::/48 maxlen: 48
2a14:7580:fff5::/48 maxlen: 48
2a14:7580:fff8::/48 maxlen: 48
2a14:7580:fff9::/48 maxlen: 48
2a14:7580:fffa::/48 maxlen: 48
2a14:7581:f10::/44 maxlen: 48
2a14:7581:fe0::/48 maxlen: 48
2a14:7581:fe1::/48 maxlen: 48
2a14:7581:fe6::/48 maxlen: 48
2a14:7581:fe8::/48 maxlen: 48
2a14:7581:fea::/48 maxlen: 48
2a14:7581:fec::/48 maxlen: 48
2a14:7581:fed::/48 maxlen: 48
2a14:7581:fef::/48 maxlen: 48
2a14:7581:ff2::/48 maxlen: 48
2a14:7581:ff5::/48 maxlen: 48
2a14:7581:ff6::/48 maxlen: 48
2a14:7581:ff7::/48 maxlen: 48
2a14:7581:ffa::/48 maxlen: 48
2a14:7581:ffc::/48 maxlen: 48
2a14:7581:ffe::/48 maxlen: 48
2a14:7581:3e00::/40 maxlen: 48
2a14:7581:3f00::/40 maxlen: 48
2a14:7581:9000::/40 maxlen: 48
2a14:7581:9100::/40 maxlen: 48
2a14:7581:9200::/40 maxlen: 48
2a14:7581:9300::/40 maxlen: 48
2a14:7581:9700::/40 maxlen: 48
2a14:7581:9f00::/44 maxlen: 48
2a14:7581:9ff0::/44 maxlen: 48
2a14:7581:a000::/36 maxlen: 48
2a14:7581:e000::/36 maxlen: 48
2a14:7582::/36 maxlen: 48
2a14:7582:1000::/36 maxlen: 48
2a14:7582:2000::/36 maxlen: 48
2a14:7582:3000::/36 maxlen: 48
2a14:7582:4000::/36 maxlen: 48
2a14:7582:5000::/36 maxlen: 48
2a14:7582:6000::/36 maxlen: 48
2a14:7582:7000::/36 maxlen: 48
2a14:7583:2000::/36 maxlen: 48
2a14:7583:8000::/36 maxlen: 48
2a14:7583:b000::/36 maxlen: 48
2a14:7583:e300::/40 maxlen: 48
2a14:7583:f600::/40 maxlen: 48
2a14:7583:f800::/40 maxlen: 48
2a14:7584:3000::/36 maxlen: 48
2a14:7584:a000::/36 maxlen: 48
2a14:7584:b000::/36 maxlen: 48
2a14:7586:a000::/36 maxlen: 48
2a14:7587::/32 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 20:22:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:58:09:68:c9:c3:60:77:58:61:45:1c:ba:09:3e:9f:b3:ad:ac:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Oct 4 06:55:11 2026 GMT
Not After : Oct 3 07:00:11 2027 GMT
Subject: CN=A563415345B760611DB4143EC53918B256B11D39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4d:82:1e:89:5f:f7:17:08:12:13:0f:f7:c8:
51:f2:d0:59:f4:63:c9:69:dd:07:5b:de:76:e8:4b:
9d:82:8a:2d:17:7b:63:b6:0d:a6:3e:79:7e:23:2b:
8c:84:75:53:31:87:fa:16:67:04:30:13:02:60:85:
5b:57:a9:d4:10:16:19:c4:79:e7:78:4f:ba:eb:85:
b0:f2:8a:06:94:af:88:70:fc:df:5c:e2:57:67:82:
87:1a:69:f2:92:6f:44:9f:3f:44:a6:68:8f:a7:b0:
6f:8d:c9:c6:78:2b:a1:f3:27:ef:47:0d:c3:66:87:
01:5a:11:42:f2:ee:54:4d:4a:8d:2c:b5:82:ab:0d:
01:f7:52:12:4b:49:63:2b:97:d3:57:18:66:f0:56:
c1:0c:c9:a7:7f:3a:fc:75:0b:e8:de:6d:3d:07:4c:
bd:9e:25:17:7d:df:87:db:ac:66:16:0d:2a:5b:50:
3b:ac:d7:20:e9:4c:b4:07:9e:fb:49:20:a4:39:a1:
1d:7a:a7:c0:54:ce:2a:23:e5:07:d6:a3:ca:4b:83:
8a:cd:ef:8b:86:a4:74:2b:03:34:46:f4:3c:bc:ca:
f5:b4:3f:30:81:cf:ea:7d:2d:0b:71:41:81:10:e3:
93:dc:97:64:d7:26:79:88:7e:cd:eb:5a:2d:29:28:
75:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:63:41:53:45:B7:60:61:1D:B4:14:3E:C5:39:18:B2:56:B1:1D:39
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS0.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.150.40.0/24
IPv6:
2a14:7580:50::/44
2a14:7580:100::/40
2a14:7580:3000::-2a14:7580:5fff:ffff:ffff:ffff:ffff:ffff
2a14:7580:9000::/36
2a14:7580:ff80::/44
2a14:7580:ffb0::/44
2a14:7580:ffef::/48
2a14:7580:fff3::-2a14:7580:fff5:ffff:ffff:ffff:ffff:ffff
2a14:7580:fff8::-2a14:7580:fffa:ffff:ffff:ffff:ffff:ffff
2a14:7581:f10::/44
2a14:7581:fe0::/47
2a14:7581:fe6::/48
2a14:7581:fe8::/48
2a14:7581:fea::/48
2a14:7581:fec::/47
2a14:7581:fef::/48
2a14:7581:ff2::/48
2a14:7581:ff5::-2a14:7581:ff7:ffff:ffff:ffff:ffff:ffff
2a14:7581:ffa::/48
2a14:7581:ffc::/48
2a14:7581:ffe::/48
2a14:7581:3e00::/39
2a14:7581:9000::/38
2a14:7581:9700::/40
2a14:7581:9f00::/44
2a14:7581:9ff0::-2a14:7581:afff:ffff:ffff:ffff:ffff:ffff
2a14:7581:e000::/36
2a14:7582::/33
2a14:7583:2000::/36
2a14:7583:8000::/36
2a14:7583:b000::/36
2a14:7583:e300::/40
2a14:7583:f600::/40
2a14:7583:f800::/40
2a14:7584:3000::/36
2a14:7584:a000::/35
2a14:7586:a000::/36
2a14:7587::/32
Signature Algorithm: sha256WithRSAEncryption
46:67:43:04:65:dc:0b:88:dc:12:cb:81:67:89:e6:36:85:4e:
7c:54:17:1b:33:b7:a0:60:81:d3:fb:04:5f:e2:2f:73:83:f5:
cf:18:bb:59:2d:61:53:64:80:cc:e0:1d:ae:c9:76:70:a9:a8:
13:da:0d:f0:54:79:fe:36:1e:61:37:d4:b0:8c:70:ba:48:56:
81:9c:d7:03:22:24:df:00:f4:eb:1c:d0:89:41:9b:a3:0c:6e:
82:3b:65:e7:db:c3:79:c4:27:6b:7b:59:a0:88:3b:ab:2f:a2:
6e:49:56:c7:f4:78:f1:52:2f:6c:f1:bb:07:5d:74:26:53:47:
56:7c:74:a0:13:5e:0a:32:6b:f8:16:60:53:9d:1e:1c:1f:f0:
e8:14:7b:27:e5:69:d8:0a:ef:31:12:e5:74:f2:27:ef:fc:60:
54:ab:f1:3a:24:55:93:21:dd:9d:2d:6c:22:3b:b4:34:ef:2d:
fa:5d:fc:58:7f:55:17:18:e2:c1:bc:6e:b1:76:e2:93:a3:56:
fc:d9:17:5c:d9:48:ea:5d:0a:18:da:7d:58:c6:1e:f5:cc:eb:
7f:39:a0:9c:a4:43:b3:b8:fa:df:4f:63:64:2d:46:b7:9e:93:
0c:7e:48:62:97:e2:f7:aa:75:76:8a:f5:c5:5e:fe:2b:2c:ae:
70:63:92:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 03:50:10 2026 by rpki-client