Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3135392e3235332e312e302f32342d3234203d3e20343031333632.roa
File: 3135392e3235332e312e302f32342d3234203d3e20343031333632.roa (raw, json)
Hash identifier: QjYsR9MbUft7eF4N67W1ParO0QTKQ1t2pO8q+FvFFyk=
Subject key identifier: F0:E7:3C:92:02:F3:89:0B:78:06:27:04:36:08:3F:40:6F:2D:8F:C6
Certificate issuer: /CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Certificate serial: 4EF15397BDAB3A1B9CB112677B6470E5D0D54BD8
Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3135392e3235332e312e302f32342d3234203d3e20343031333632.roa
Signing time: Thu 10 Sep 2026 08:16:44 +0000
ROA not before: Thu 10 Sep 2026 08:11:44 +0000
ROA not after: Thu 09 Sep 2027 08:16:44 +0000
asID: 401362
IP address blocks: 159.253.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl
rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft
rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:f1:53:97:bd:ab:3a:1b:9c:b1:12:67:7b:64:70:e5:d0:d5:4b:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Validity
Not Before: Sep 10 08:11:44 2026 GMT
Not After : Sep 9 08:16:44 2027 GMT
Subject: CN=F0E73C9202F3890B7806270436083F406F2D8FC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a7:4c:b9:6e:c2:1e:ac:7d:57:5e:09:95:c0:
13:a0:f1:dd:17:7e:fb:70:c3:b6:70:34:0f:75:6b:
76:29:3a:6c:06:65:91:7b:46:85:1d:77:a6:e0:f7:
81:a0:a0:9d:2e:91:f1:be:83:f8:d1:83:1b:c1:49:
8a:36:28:e9:62:e6:cc:8d:af:d5:e5:b9:e1:12:9f:
63:58:b3:42:b2:0d:d8:a3:3e:9c:65:dc:fd:82:77:
ef:44:f9:a5:d8:64:f9:05:fa:6e:65:9a:eb:d5:aa:
4a:ec:1b:2e:67:e3:5d:64:3a:ed:76:4a:08:57:86:
af:6d:5c:83:b1:e4:7c:2b:ef:f4:a9:44:77:79:ca:
83:ea:d4:06:ee:75:12:5b:92:0f:f9:e9:dd:24:99:
40:5f:c6:f3:88:ca:58:82:95:a1:7e:7c:c3:a7:85:
ac:93:5d:10:77:87:f2:d2:4f:2f:55:0e:93:2a:84:
31:bb:f3:da:4f:43:09:b6:32:3a:a4:dc:e0:ab:e3:
f2:eb:a6:22:87:28:2d:c6:89:ec:96:ed:e2:f5:2c:
70:46:d4:94:70:41:5d:80:01:a3:a5:0d:e3:bc:a4:
03:49:a4:80:5a:3b:0b:18:f8:55:53:55:3b:0d:9c:
46:03:87:4e:a0:0d:09:e3:e8:7c:8d:e8:3e:a4:3a:
b4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E7:3C:92:02:F3:89:0B:78:06:27:04:36:08:3F:40:6F:2D:8F:C6
X509v3 Authority Key Identifier:
keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3135392e3235332e312e302f32342d3234203d3e20343031333632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.253.1.0/24
Signature Algorithm: sha256WithRSAEncryption
13:c5:3f:ab:f3:35:1a:fe:96:40:f1:dc:96:59:09:22:20:38:
cb:cc:a6:5b:fe:51:a2:5d:56:d6:51:5f:d7:8b:ed:0e:80:99:
44:9f:1d:0d:93:82:33:9b:20:89:3b:2c:a8:f8:2a:2a:fa:08:
8c:1f:9b:d3:3d:31:b0:ea:e1:a5:e3:6e:72:01:3f:9d:8e:1f:
e2:1a:a0:44:c7:a5:1b:d5:a6:b2:0c:4c:e6:eb:5d:85:4c:4a:
20:d6:41:19:4a:eb:46:ca:a2:c1:1a:6b:35:d5:ed:a1:e2:31:
41:51:20:7d:2f:e5:24:a1:1b:da:9a:8b:85:60:4e:ae:3e:67:
8e:5a:1c:2f:dd:61:b4:11:81:e3:47:e0:01:fd:d1:b9:05:1c:
50:3e:be:7d:87:50:f7:30:66:df:99:1f:f6:7c:5d:bd:b5:4e:
60:40:92:95:0d:00:0f:3c:6c:ff:ce:57:21:0b:12:49:58:27:
d3:0a:ab:20:d5:6c:f7:fe:c3:27:33:94:4d:69:7a:d9:d4:58:
45:38:97:58:67:a8:1f:e6:63:14:1e:5c:b9:0f:d8:83:3a:57:
f6:77:b6:d3:50:70:d9:be:6f:12:94:99:13:48:12:9a:3e:ee:
92:0e:aa:d6:60:2d:a5:97:e5:1a:f6:26:cf:cb:6f:32:64:79:
3d:ac:55:80
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUTvFTl72rOhucsRJne2Rw5dDVS9gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGMxODllNDJmMzVjOTQ0ZDQ2M2Q5ZWE2NTAxZjA5M2Vi
NjJiYTc4NTAeFw0yNjA5MTAwODExNDRaFw0yNzA5MDkwODE2NDRaMDMxMTAvBgNV
BAMTKEYwRTczQzkyMDJGMzg5MEI3ODA2MjcwNDM2MDgzRjQwNkYyRDhGQzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2p0y5bsIerH1XXgmVwBOg8d0X
fvtww7ZwNA91a3YpOmwGZZF7RoUdd6bg94GgoJ0ukfG+g/jRgxvBSYo2KOli5syN
r9XlueESn2NYs0KyDdijPpxl3P2Cd+9E+aXYZPkF+m5lmuvVqkrsGy5n411kOu12
SghXhq9tXIOx5Hwr7/SpRHd5yoPq1AbudRJbkg/56d0kmUBfxvOIyliClaF+fMOn
hayTXRB3h/LSTy9VDpMqhDG789pPQwm2Mjqk3OCr4/LrpiKHKC3GieyW7eL1LHBG
1JRwQV2AAaOlDeO8pANJpIBaOwsY+FVTVTsNnEYDh06gDQnj6HyN6D6kOrTbAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQU8Oc8kgLziQt4BicENgg/QG8tj8YwHwYDVR0j
BBgwFoAUTBieQvNclE1GPZ6mUB8JPrYrp4UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvY2U1MTBlMTctMzFmYS00MTRiLTk4OWUtMDI2ZGJiNmZk
ZjUxLzAvNEMxODlFNDJGMzVDOTQ0RDQ2M0Q5RUE2NTAxRjA5M0VCNjJCQTc4NS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1RCaWVRdk5jbEUxR1BaNm1VQjhKUHJZ
cnA0VS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2U1MTBlMTct
MzFmYS00MTRiLTk4OWUtMDI2ZGJiNmZkZjUxLzAvMzEzNTM5MmUzMjM1MzMyZTMx
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzMDMxMzMzNjMyLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
n/0BMA0GCSqGSIb3DQEBCwUAA4IBAQATxT+r8zUa/pZA8dyWWQkiIDjLzKZb/lGi
XVbWUV/Xi+0OgJlEnx0Nk4IzmyCJOyyo+Coq+giMH5vTPTGw6uGl425yAT+djh/i
GqBEx6Ub1aayDEzm612FTEog1kEZSutGyqLBGms11e2h4jFBUSB9L+UkoRvamouF
YE6uPmeOWhwv3WG0EYHjR+AB/dG5BRxQPr59h1D3MGbfmR/2fF29tU5gQJKVDQAP
PGz/zlchCxJJWCfTCqsg1Wz3/sMnM5RNaXrZ1FhFOJdYZ6gf5mMUHly5D9iDOlf2
d7bTUHDZvm8SlJkTSBKaPu6SDqrWYC2ll+Ua9ibPy28yZHk9rFWA
-----END CERTIFICATE-----
Generated at Fri Sep 18 19:09:48 2026 by rpki-client