Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/38392e3135302e34392e302f32342d3234203d3e20323135313134.roa
File: 38392e3135302e34392e302f32342d3234203d3e20323135313134.roa (raw, json)
Hash identifier: 8+3QXBkWfKHqJrin574kCECO066l0OpHPCh7UyKJaQw=
Subject key identifier: 47:EA:58:89:C7:F8:EC:54:C9:B0:CC:20:C2:31:74:0F:04:D5:E5:CD
Certificate issuer: /CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Certificate serial: 548A4445136AF751DE7B8E28C9ACBA56439BBBEF
Authority key identifier: E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/38392e3135302e34392e302f32342d3234203d3e20323135313134.roa
Signing time: Sun 08 Mar 2026 20:14:15 +0000
ROA not before: Sun 08 Mar 2026 20:09:15 +0000
ROA not after: Sun 07 Mar 2027 20:14:15 +0000
asID: 215114
IP address blocks: 89.150.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl
rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:8a:44:45:13:6a:f7:51:de:7b:8e:28:c9:ac:ba:56:43:9b:bb:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Validity
Not Before: Mar 8 20:09:15 2026 GMT
Not After : Mar 7 20:14:15 2027 GMT
Subject: CN=47EA5889C7F8EC54C9B0CC20C231740F04D5E5CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:88:ba:d0:4a:c5:9b:8e:b4:32:ec:ac:33:9d:
88:af:50:32:ae:6b:d7:2e:00:32:30:c8:1a:e2:9c:
e5:cb:4d:21:16:1b:55:8a:4f:ca:1f:8a:dc:20:b8:
4a:b3:07:87:8b:78:f3:24:6b:95:75:74:8a:3e:be:
06:3c:5a:dc:fc:2b:62:46:7d:e5:37:b7:89:b6:2d:
d8:9e:d3:93:a5:79:ca:76:64:49:1b:44:4e:b7:8d:
0a:58:a5:18:94:76:bc:b9:f9:b5:f3:aa:b0:d5:30:
82:38:a2:a8:26:fc:77:dc:85:a6:df:b2:0d:4c:5c:
da:dc:2e:61:be:4e:01:79:c1:3c:c2:97:80:9c:66:
71:e4:43:f7:6f:4a:eb:1e:f5:68:93:dc:13:41:f7:
6d:19:fe:06:6b:73:f1:c0:f3:25:b0:24:b5:12:91:
91:4f:7a:9c:03:9a:73:56:29:5a:87:ee:27:8b:26:
46:2b:2d:61:8a:96:52:20:2c:f5:69:96:d2:43:1a:
6d:0e:f3:fb:54:71:f2:30:ec:e5:f9:89:83:6b:a6:
7a:1c:44:f2:3b:5d:d2:0d:16:d0:3c:b6:b0:51:06:
5f:b5:07:76:03:6b:95:5d:db:e8:6d:fc:0a:14:2e:
20:8a:32:62:27:53:29:9b:16:ae:ab:64:ab:95:45:
84:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:EA:58:89:C7:F8:EC:54:C9:B0:CC:20:C2:31:74:0F:04:D5:E5:CD
X509v3 Authority Key Identifier:
keyid:E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/38392e3135302e34392e302f32342d3234203d3e20323135313134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.150.49.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:51:dc:89:97:99:7c:3b:59:24:b8:8d:d0:de:e2:84:ca:73:
33:3e:04:0b:ca:12:02:00:0e:b4:56:50:33:ee:a6:df:48:ed:
be:ef:8e:3c:75:79:0e:2d:c4:b2:28:c2:b8:83:ef:32:28:0d:
14:20:56:3e:16:37:5f:36:80:c1:78:9b:37:d3:cf:63:60:01:
e0:be:87:0c:51:38:f5:a1:f3:81:27:9b:a9:8d:ca:97:b7:e9:
7d:dd:f6:27:7d:ed:0e:41:72:92:8b:d4:63:35:3b:ad:2a:4f:
48:ff:19:c3:4e:33:9c:c7:71:3a:ad:75:ae:b5:17:60:e2:f6:
00:d0:95:6a:40:c9:1e:ea:26:a1:8e:25:cd:6c:7d:f0:d2:a9:
3a:51:b6:06:27:37:b8:fe:73:0a:2b:c0:23:12:c3:5e:6c:45:
92:2c:96:be:16:83:5a:9c:05:9a:a9:73:b4:03:00:df:89:74:
05:c2:19:b2:3c:0d:ff:63:d5:60:5c:e2:fa:25:9b:c1:88:11:
78:45:1e:ef:90:bb:fa:64:53:ac:8a:19:d4:d7:e2:79:30:aa:
f4:92:40:a4:d0:3b:c8:29:f6:d5:84:ad:77:bf:85:dc:9d:81:
05:23:02:02:a3:35:f9:e0:ab:95:21:55:58:cf:fc:11:db:cc:
5b:60:e8:7c
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUVIpERRNq91Hee44oyay6VkObu+8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZTFmMzUxMmY1MWRjNDJiYjllYjEyYWJjMGJiNTI5NjY4
YjJlZGVlNDAeFw0yNjAzMDgyMDA5MTVaFw0yNzAzMDcyMDE0MTVaMDMxMTAvBgNV
BAMTKDQ3RUE1ODg5QzdGOEVDNTRDOUIwQ0MyMEMyMzE3NDBGMDRENUU1Q0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYiLrQSsWbjrQy7KwznYivUDKu
a9cuADIwyBrinOXLTSEWG1WKT8ofitwguEqzB4eLePMka5V1dIo+vgY8Wtz8K2JG
feU3t4m2Ldie05Olecp2ZEkbRE63jQpYpRiUdry5+bXzqrDVMII4oqgm/Hfchabf
sg1MXNrcLmG+TgF5wTzCl4CcZnHkQ/dvSuse9WiT3BNB920Z/gZrc/HA8yWwJLUS
kZFPepwDmnNWKVqH7ieLJkYrLWGKllIgLPVpltJDGm0O8/tUcfIw7OX5iYNrpnoc
RPI7XdINFtA8trBRBl+1B3YDa5Vd2+ht/AoULiCKMmInUymbFq6rZKuVRYQNAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUR+pYicf47FTJsMwgwjF0DwTV5c0wHwYDVR0j
BBgwFoAU4fNRL1HcQruesSq8C7UpZosu3uQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZTNjZGM2NDgtZDIwMy00NjJhLWJkMGYtZWMxYjYwZDg3
OWE3LzAvRTFGMzUxMkY1MURDNDJCQjlFQjEyQUJDMEJCNTI5NjY4QjJFREVFNC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRmTlJMMUhjUXJ1ZXNTcThDN1VwWm9z
dTN1US5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZTNjZGM2NDgt
ZDIwMy00NjJhLWJkMGYtZWMxYjYwZDg3OWE3LzAvMzgzOTJlMzEzNTMwMmUzNDM5
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTM1MzEzMTM0LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
WZYxMA0GCSqGSIb3DQEBCwUAA4IBAQB/UdyJl5l8O1kkuI3Q3uKEynMzPgQLyhIC
AA60VlAz7qbfSO2+7448dXkOLcSyKMK4g+8yKA0UIFY+FjdfNoDBeJs3089jYAHg
vocMUTj1ofOBJ5upjcqXt+l93fYnfe0OQXKSi9RjNTutKk9I/xnDTjOcx3E6rXWu
tRdg4vYA0JVqQMke6iahjiXNbH3w0qk6UbYGJze4/nMKK8AjEsNebEWSLJa+FoNa
nAWaqXO0AwDfiXQFwhmyPA3/Y9VgXOL6JZvBiBF4RR7vkLv6ZFOsihnU1+J5MKr0
kkCk0DvIKfbVhK13v4XcnYEFIwICozX54KuVIVVYz/wR28xbYOh8
-----END CERTIFICATE-----
Generated at Fri Mar 13 10:32:16 2026 by rpki-client