Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3135322e38392e3132362e302f32342d3234203d3e203630363032.roa
File: 3135322e38392e3132362e302f32342d3234203d3e203630363032.roa (raw, json)
Hash identifier: 2SSyILKSuybY7BU3UWinedUCaIZzCm7w0HCEh3wI2QU=
Subject key identifier: AA:5B:FF:A1:82:01:F4:D7:9F:4F:D2:AB:F9:78:5C:0A:86:83:E5:E9
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 1A723B0108E36F2F153DEC5B6E5C184773830FE8
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3135322e38392e3132362e302f32342d3234203d3e203630363032.roa
Signing time: Fri 14 Aug 2026 07:50:07 +0000
ROA not before: Fri 14 Aug 2026 07:45:07 +0000
ROA not after: Fri 13 Aug 2027 07:50:07 +0000
asID: 60602
IP address blocks: 152.89.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 11:22:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:72:3b:01:08:e3:6f:2f:15:3d:ec:5b:6e:5c:18:47:73:83:0f:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Aug 14 07:45:07 2026 GMT
Not After : Aug 13 07:50:07 2027 GMT
Subject: CN=AA5BFFA18201F4D79F4FD2ABF9785C0A8683E5E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4d:07:94:8d:62:a0:4d:b9:90:05:82:a9:4d:
3f:c4:5f:f2:96:96:9e:c5:91:e7:e5:0c:98:29:b2:
ec:02:ab:4e:2d:5a:6f:c0:10:4f:fc:ba:06:8a:2c:
a8:d7:87:a0:0c:7c:c3:e4:9d:89:eb:f2:06:ce:9a:
25:81:12:9a:1f:8f:a3:73:c2:55:11:38:e6:3d:33:
2e:db:79:c3:e2:ac:88:5a:47:3e:eb:5e:6f:b7:f2:
6c:af:75:69:b1:52:33:84:dc:37:36:4e:bf:17:9e:
35:3f:6c:e3:bd:e4:28:b3:cb:25:97:28:86:3a:c4:
a9:fe:d5:fb:47:fa:b2:63:39:32:13:36:06:67:5b:
f6:36:b7:29:6e:39:c8:8f:73:0d:68:69:12:91:2d:
7e:0d:5e:6a:c0:11:0c:ae:89:21:38:7b:2e:ac:44:
f2:03:99:48:ec:a4:3c:51:26:e2:9e:42:af:52:b0:
cc:dd:24:9a:b6:6d:d7:09:6a:ad:2c:5e:66:8f:a3:
93:c7:36:2e:36:4b:2b:f9:92:ad:ac:1f:57:4a:b9:
1a:ca:61:3d:71:ef:f1:fc:09:5b:e2:96:42:e9:89:
aa:d1:3e:0c:25:72:df:d5:4e:0f:8f:ea:b7:e8:75:
07:d2:82:49:be:7d:56:0b:7f:48:4f:a8:53:e7:f4:
cb:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:5B:FF:A1:82:01:F4:D7:9F:4F:D2:AB:F9:78:5C:0A:86:83:E5:E9
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3135322e38392e3132362e302f32342d3234203d3e203630363032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.126.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:49:98:5e:a7:2f:63:96:2c:e9:7a:fe:b9:92:54:bb:41:e6:
1e:02:2e:c7:0b:d1:bf:52:d1:5a:a6:f2:a5:21:94:f7:95:d4:
0b:94:b8:2c:69:3f:24:01:47:51:8a:b5:82:f2:04:ba:ce:da:
4c:95:7c:2b:5d:7b:3f:d4:02:0c:c0:0e:1b:4d:df:2a:4d:66:
0a:8f:80:84:32:72:08:35:93:58:ca:b2:ac:72:c5:e5:9c:46:
31:38:bc:6d:c4:d4:ef:7e:f4:74:c3:5a:f2:e6:61:37:71:94:
a6:a9:56:cf:2e:7a:4a:d3:11:61:9e:fb:23:9a:15:0e:84:e0:
60:44:f1:14:79:40:11:a1:d9:e1:23:52:dc:be:e7:cc:31:be:
13:bf:fd:35:75:2c:cf:9a:6b:56:69:1f:46:c0:15:26:41:57:
c8:75:cb:cf:fd:6c:b6:e8:c8:2b:dd:54:55:b7:c0:59:dd:b7:
50:6c:35:f2:f6:87:cf:27:84:50:5a:d6:07:48:4a:02:d0:d9:
cd:01:62:c3:e1:f5:46:0a:10:7c:23:15:38:ce:6f:f0:7b:8f:
8b:e6:21:1d:21:08:80:c2:92:c3:93:bd:fd:ee:2a:2d:e5:4f:
0f:42:3c:43:f2:42:07:f0:88:3f:2a:e1:ca:4c:c4:25:5d:70:
9c:4f:bc:20
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUGnI7AQjjby8VPexbblwYR3ODD+gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj
MjMxM2EzYTAeFw0yNjA4MTQwNzQ1MDdaFw0yNzA4MTMwNzUwMDdaMDMxMTAvBgNV
BAMTKEFBNUJGRkExODIwMUY0RDc5RjRGRDJBQkY5Nzg1QzBBODY4M0U1RTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiTQeUjWKgTbmQBYKpTT/EX/KW
lp7FkeflDJgpsuwCq04tWm/AEE/8ugaKLKjXh6AMfMPknYnr8gbOmiWBEpofj6Nz
wlUROOY9My7becPirIhaRz7rXm+38myvdWmxUjOE3Dc2Tr8XnjU/bOO95CizyyWX
KIY6xKn+1ftH+rJjOTITNgZnW/Y2tyluOciPcw1oaRKRLX4NXmrAEQyuiSE4ey6s
RPIDmUjspDxRJuKeQq9SsMzdJJq2bdcJaq0sXmaPo5PHNi42Syv5kq2sH1dKuRrK
YT1x7/H8CVvilkLpiarRPgwlct/VTg+P6rfodQfSgkm+fVYLf0hPqFPn9Mv/AgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUqlv/oYIB9NefT9Kr+XhcCoaD5ekwHwYDVR0j
BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J
eE9qby5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzEzNTMyMmUzODM5MmUzMTMy
MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMwMzYzMDMyLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
mFl+MA0GCSqGSIb3DQEBCwUAA4IBAQCPSZhepy9jlizpev65klS7QeYeAi7HC9G/
UtFapvKlIZT3ldQLlLgsaT8kAUdRirWC8gS6ztpMlXwrXXs/1AIMwA4bTd8qTWYK
j4CEMnIINZNYyrKscsXlnEYxOLxtxNTvfvR0w1ry5mE3cZSmqVbPLnpK0xFhnvsj
mhUOhOBgRPEUeUARodnhI1LcvufMMb4Tv/01dSzPmmtWaR9GwBUmQVfIdcvP/Wy2
6Mgr3VRVt8BZ3bdQbDXy9ofPJ4RQWtYHSEoC0NnNAWLD4fVGChB8IxU4zm/we4+L
5iEdIQiAwpLDk7397iot5U8PQjxD8kIH8Ig/KuHKTMQlXXCcT7wg
-----END CERTIFICATE-----
Generated at Fri Sep 4 20:34:38 2026 by rpki-client