Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3135322e38392e3132362e302f32342d3234203d3e20323035353434.roa
File: 3135322e38392e3132362e302f32342d3234203d3e20323035353434.roa (raw, json)
Hash identifier: Do803s2FazrjlSwF16SHXT72v5XDcsajJxlX2vGQyJM=
Subject key identifier: EC:05:5A:D1:E6:1B:7B:6C:6F:2F:30:E1:E1:C4:06:1A:E5:9A:48:8F
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 324B2F35627E1F57A51C6A93E5716352F992B760
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3135322e38392e3132362e302f32342d3234203d3e20323035353434.roa
Signing time: Wed 21 Oct 2026 17:25:56 +0000
ROA not before: Wed 21 Oct 2026 17:20:56 +0000
ROA not after: Wed 20 Oct 2027 17:25:56 +0000
asID: 205544
IP address blocks: 152.89.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 11:02:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:4b:2f:35:62:7e:1f:57:a5:1c:6a:93:e5:71:63:52:f9:92:b7:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Oct 21 17:20:56 2026 GMT
Not After : Oct 20 17:25:56 2027 GMT
Subject: CN=EC055AD1E61B7B6C6F2F30E1E1C4061AE59A488F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:bb:2c:c3:1b:8c:f8:d3:a5:b8:b0:4d:77:97:
96:51:52:ca:7b:cd:c7:f5:97:df:1c:e9:c2:1b:49:
96:2a:26:8a:d8:2c:47:be:c7:15:d7:57:e7:4d:93:
22:fd:47:fa:81:7e:c0:ca:66:9f:01:1a:ef:87:b7:
de:79:63:e6:6c:de:14:eb:cb:2f:24:c5:94:b6:1c:
87:b0:e4:53:f8:d4:b8:db:5a:0c:b1:1a:ea:44:cb:
1d:f5:b7:a5:d9:2d:04:a3:6d:29:2e:5f:1c:cd:1f:
77:46:ee:45:8c:45:9d:90:43:d5:49:1d:38:cd:c7:
55:b6:f5:ae:8b:64:0a:2c:4b:dc:4d:b8:12:ed:5e:
7f:e0:ea:1b:c0:1b:72:e6:9c:ef:de:9d:f5:9b:cc:
27:b8:11:2c:63:42:e6:c1:58:4d:8e:7b:e9:c1:63:
01:a2:bf:2b:4e:66:67:c4:d0:3d:5f:fc:cf:89:24:
2b:d6:d4:6f:fe:ea:d0:11:15:c8:3f:0d:b9:80:c9:
f2:8f:5c:de:6f:d5:d6:2e:f3:7d:98:d1:07:30:45:
2e:c9:f0:57:2c:fd:7d:bd:e0:9c:6d:6e:03:81:c7:
99:d4:64:c7:70:40:65:14:63:f0:ef:e9:23:0f:2e:
8f:1a:55:4e:3a:1e:34:00:ab:f9:6f:69:e9:e6:94:
3c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:05:5A:D1:E6:1B:7B:6C:6F:2F:30:E1:E1:C4:06:1A:E5:9A:48:8F
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3135322e38392e3132362e302f32342d3234203d3e20323035353434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.126.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:90:4b:2f:a9:8a:da:73:54:ef:09:56:30:ee:b5:8e:b2:62:
5a:30:5a:5f:cd:38:d1:6e:15:70:ae:ba:6d:2d:96:5a:38:87:
73:a1:77:ef:a9:4b:41:c1:06:a2:6a:f2:07:5c:07:5a:95:13:
c3:90:d7:92:29:f8:34:ea:30:97:96:e6:28:72:ec:b1:3a:3f:
42:c3:f3:70:a0:83:51:bd:0a:26:99:27:b6:e5:57:aa:42:27:
74:5b:81:7b:5b:e3:b8:ce:56:3c:35:bf:f2:b6:f3:83:44:fe:
dd:97:05:4b:eb:28:ac:ac:3e:6b:3c:75:35:d4:4f:82:3d:9f:
32:90:b0:b1:a5:4a:36:e8:69:98:7a:75:4b:72:61:76:ad:b5:
f1:27:08:89:6c:44:c9:fb:35:63:3b:6e:3f:f2:5c:3e:3c:fa:
60:1a:c7:95:6d:b0:a3:5c:11:b7:48:45:0f:7a:fe:6b:f2:b8:
a4:26:59:6a:ee:82:a5:21:37:08:65:44:9f:17:f8:47:a0:8e:
d8:ed:87:2f:43:f1:37:50:2d:19:92:1f:01:ac:45:b9:85:e5:
aa:80:a2:e1:c2:e2:f8:de:d3:ea:1a:d6:a1:40:c3:98:a9:09:
55:25:18:77:01:f2:d4:00:6e:c5:92:d2:40:4b:e9:e9:9b:ce:
54:fb:30:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 00:52:48 2026 by rpki-client