Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3135392e3235332e332e302f32342d3234203d3e203330303838.roa
File: 3135392e3235332e332e302f32342d3234203d3e203330303838.roa (raw, json)
Hash identifier: m/WsgDnKudN9OxxS5uP/FnsHB6L05+9JXXKTrSkVWmA=
Subject key identifier: E9:D1:34:58:06:7D:ED:F8:FE:B9:24:4B:09:62:C8:12:6D:90:8A:8F
Certificate issuer: /CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Certificate serial: 3239BD89644AE4015389AF086E23B09BA8747DB5
Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3135392e3235332e332e302f32342d3234203d3e203330303838.roa
Signing time: Tue 15 Sep 2026 07:21:41 +0000
ROA not before: Tue 15 Sep 2026 07:16:41 +0000
ROA not after: Tue 14 Sep 2027 07:21:41 +0000
asID: 30088
IP address blocks: 159.253.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl
rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft
rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:39:bd:89:64:4a:e4:01:53:89:af:08:6e:23:b0:9b:a8:74:7d:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Validity
Not Before: Sep 15 07:16:41 2026 GMT
Not After : Sep 14 07:21:41 2027 GMT
Subject: CN=E9D13458067DEDF8FEB9244B0962C8126D908A8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0f:8c:9c:11:f9:3f:dd:ea:25:ea:22:ef:39:
fb:40:0d:85:e8:08:70:d0:2a:cc:d8:4d:60:9e:91:
0a:0c:7c:fc:79:68:cb:16:7d:f2:43:a5:5c:23:a3:
a4:9f:44:a2:60:a6:8a:b7:a6:0c:d1:8d:cb:92:1a:
e7:47:e5:66:e2:9b:38:22:28:a1:08:2a:01:a6:83:
d1:64:c7:41:9d:3f:27:38:ee:24:52:8c:7e:b3:d1:
cf:de:bd:f1:89:9a:32:14:a6:f3:1c:e1:e7:39:e8:
a7:62:c6:72:8e:e7:39:66:f2:b6:4d:a2:2a:20:4a:
b0:4a:56:4c:20:7b:eb:7b:f1:2b:31:06:d7:96:3e:
5e:90:10:3e:22:a7:4d:77:98:93:1c:50:6c:38:96:
39:ad:17:7f:b9:b4:d9:f8:e2:d9:f0:f8:fb:7c:49:
2d:c2:05:dc:b6:dc:b2:89:6b:87:84:c1:e5:a8:42:
b0:ea:5f:99:2c:88:e7:6b:4b:ee:59:3f:2f:c9:2b:
7f:47:cf:da:4b:1c:7a:76:08:6d:4c:9e:e1:05:da:
c2:f8:99:c5:4e:68:81:f3:1c:e9:fe:1f:7a:b5:ee:
8c:22:bd:08:0b:23:73:a3:b1:5d:8b:bc:25:da:85:
95:ca:be:cd:a5:c1:a9:92:82:3a:96:dd:9b:c2:a4:
1e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:D1:34:58:06:7D:ED:F8:FE:B9:24:4B:09:62:C8:12:6D:90:8A:8F
X509v3 Authority Key Identifier:
keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3135392e3235332e332e302f32342d3234203d3e203330303838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.253.3.0/24
Signature Algorithm: sha256WithRSAEncryption
71:15:c6:8f:5a:73:8b:02:f4:5d:23:11:0c:05:7b:b2:9a:2d:
6b:1b:45:e1:a0:ba:6d:96:b0:08:d9:b8:65:44:36:e3:15:12:
35:3e:87:b7:90:df:99:a8:f0:9a:ef:28:2c:87:d5:2c:d5:60:
94:30:f5:e1:16:66:36:3f:f3:07:8b:a1:99:19:c1:cb:be:77:
e7:82:ad:a8:f2:95:04:9e:3f:54:24:ab:11:f7:64:90:dc:5b:
8c:b7:23:b1:61:bd:6e:ce:60:ce:f0:f4:d4:0e:1c:ba:30:16:
c5:69:b0:9c:8a:90:22:58:c1:ed:6e:01:8c:5f:05:4f:70:62:
78:8b:a3:6f:fe:bd:3d:c2:af:1a:07:22:ca:1e:12:0b:f1:71:
23:d8:f4:6f:a8:33:e1:4c:23:87:36:e7:29:da:a0:61:31:9e:
74:f9:72:09:5c:c5:2e:2e:4c:41:47:75:bf:3c:a1:ac:b1:fa:
b3:1f:23:7a:ff:62:c0:60:f6:5d:3a:be:53:55:71:44:8a:51:
ee:65:d8:bb:05:e5:5d:a2:c0:74:81:1c:f9:b9:12:e7:2e:2e:
ba:80:18:63:e5:cc:b3:66:13:94:f5:b3:c6:77:3c:ab:4a:64:
8b:00:a1:06:42:dc:dd:7f:ee:ba:44:ad:07:12:e0:cb:80:17:
5a:1a:0f:6e
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUMjm9iWRK5AFTia8IbiOwm6h0fbUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGMxODllNDJmMzVjOTQ0ZDQ2M2Q5ZWE2NTAxZjA5M2Vi
NjJiYTc4NTAeFw0yNjA5MTUwNzE2NDFaFw0yNzA5MTQwNzIxNDFaMDMxMTAvBgNV
BAMTKEU5RDEzNDU4MDY3REVERjhGRUI5MjQ0QjA5NjJDODEyNkQ5MDhBOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnD4ycEfk/3eol6iLvOftADYXo
CHDQKszYTWCekQoMfPx5aMsWffJDpVwjo6SfRKJgpoq3pgzRjcuSGudH5Wbimzgi
KKEIKgGmg9Fkx0GdPyc47iRSjH6z0c/evfGJmjIUpvMc4ec56KdixnKO5zlm8rZN
oiogSrBKVkwge+t78SsxBteWPl6QED4ip013mJMcUGw4ljmtF3+5tNn44tnw+Pt8
SS3CBdy23LKJa4eEweWoQrDqX5ksiOdrS+5ZPy/JK39Hz9pLHHp2CG1MnuEF2sL4
mcVOaIHzHOn+H3q17owivQgLI3OjsV2LvCXahZXKvs2lwamSgjqW3ZvCpB6vAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU6dE0WAZ97fj+uSRLCWLIEm2Qio8wHwYDVR0j
BBgwFoAUTBieQvNclE1GPZ6mUB8JPrYrp4UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvY2U1MTBlMTctMzFmYS00MTRiLTk4OWUtMDI2ZGJiNmZk
ZjUxLzAvNEMxODlFNDJGMzVDOTQ0RDQ2M0Q5RUE2NTAxRjA5M0VCNjJCQTc4NS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1RCaWVRdk5jbEUxR1BaNm1VQjhKUHJZ
cnA0VS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2U1MTBlMTct
MzFmYS00MTRiLTk4OWUtMDI2ZGJiNmZkZjUxLzAvMzEzNTM5MmUzMjM1MzMyZTMz
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzMzMDMwMzgzOC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ/9
AzANBgkqhkiG9w0BAQsFAAOCAQEAcRXGj1pziwL0XSMRDAV7spotaxtF4aC6bZaw
CNm4ZUQ24xUSNT6Ht5Dfmajwmu8oLIfVLNVglDD14RZmNj/zB4uhmRnBy75354Kt
qPKVBJ4/VCSrEfdkkNxbjLcjsWG9bs5gzvD01A4cujAWxWmwnIqQIljB7W4BjF8F
T3BieIujb/69PcKvGgciyh4SC/FxI9j0b6gz4UwjhzbnKdqgYTGedPlyCVzFLi5M
QUd1vzyhrLH6sx8jev9iwGD2XTq+U1VxRIpR7mXYuwXlXaLAdIEc+bkS5y4uuoAY
Y+XMs2YTlPWzxnc8q0pkiwChBkLc3X/uukStBxLgy4AXWhoPbg==
-----END CERTIFICATE-----
Generated at Fri Sep 18 19:09:47 2026 by rpki-client