Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3135302e3235312e3232342e302f32342d3234203d3e20323134343332.roa
File: 3135302e3235312e3232342e302f32342d3234203d3e20323134343332.roa (raw, json)
Hash identifier: haWca6+aqQDXSnTE28SZx8fHsKAOLip+iOuBZOi5vh8=
Subject key identifier: B9:CE:27:62:25:FB:0A:34:F1:6C:5D:CB:C2:3B:0B:D1:74:A3:77:2F
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 4CA95881D3F5FE0DE0B3B1A3C758A69A62535554
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3135302e3235312e3232342e302f32342d3234203d3e20323134343332.roa
Signing time: Sun 19 Jul 2026 22:35:15 +0000
ROA not before: Sun 19 Jul 2026 22:30:15 +0000
ROA not after: Sun 18 Jul 2027 22:35:15 +0000
asID: 214432
IP address blocks: 150.251.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:a9:58:81:d3:f5:fe:0d:e0:b3:b1:a3:c7:58:a6:9a:62:53:55:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: Jul 19 22:30:15 2026 GMT
Not After : Jul 18 22:35:15 2027 GMT
Subject: CN=B9CE276225FB0A34F16C5DCBC23B0BD174A3772F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:71:51:27:5a:39:62:8c:1c:84:d8:1c:0e:8d:
fe:86:a5:62:15:f5:f0:3f:7a:d1:97:fb:eb:9b:d1:
68:39:e8:38:ed:d0:db:16:0f:3d:ab:4d:01:18:1e:
05:de:ff:7a:16:7d:74:19:88:40:e4:1b:19:21:a7:
3a:98:bf:bf:f0:3b:f4:d2:f1:45:48:bf:12:2c:38:
61:28:8c:1e:54:e3:6c:a7:02:71:19:9a:ab:2b:e9:
e8:f9:d0:4b:e4:44:8e:3c:d3:88:8b:07:ea:52:99:
3f:96:e4:2d:f1:7a:fc:fa:63:58:bf:ce:f2:3c:69:
e3:01:06:04:8b:15:9d:13:ea:88:25:42:74:fd:e3:
80:1d:ee:c6:e9:0a:17:73:4a:17:e2:99:d2:e3:24:
14:c4:b2:46:f3:23:d4:4d:ba:38:d8:a2:f9:1a:19:
2a:1c:7e:98:fa:bc:72:11:12:42:d4:83:f4:6c:e8:
c4:db:3d:93:e5:53:ca:e3:1e:49:a3:1b:21:c6:d4:
90:24:96:8e:77:93:cf:02:e4:00:e5:1d:d6:d3:db:
cc:b4:bf:a9:03:70:93:e4:6d:68:61:39:89:ac:6b:
35:88:79:15:1d:6b:87:fa:6f:c3:87:71:a0:2e:af:
60:97:0b:57:5e:cc:7a:ce:17:09:e9:ab:e3:31:92:
66:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:CE:27:62:25:FB:0A:34:F1:6C:5D:CB:C2:3B:0B:D1:74:A3:77:2F
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3135302e3235312e3232342e302f32342d3234203d3e20323134343332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.251.224.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:7e:c2:a9:e4:5d:e0:cf:ab:ef:4c:3b:69:5c:01:13:f8:6b:
cb:51:95:7f:dc:ec:3b:38:44:31:94:f0:3c:88:0e:77:b1:23:
6d:53:e7:c1:c4:01:5e:4f:8c:f6:7e:79:b7:fb:21:b5:d5:ff:
a8:37:09:3a:ab:dc:93:4c:98:54:33:a1:c1:3a:60:09:6e:e1:
70:a8:74:ea:75:f0:fe:73:43:fa:1c:fd:e3:05:35:62:f0:8e:
34:df:ec:65:9b:77:e8:fd:ce:22:79:25:04:30:b7:96:96:03:
cd:b2:0e:af:73:43:77:ff:87:5f:0e:a5:6b:68:d7:62:92:8e:
81:ab:7e:df:93:b8:dd:0f:40:e8:e0:a1:7d:6d:89:16:ad:ad:
26:6b:af:ec:e4:0b:65:0a:0d:d4:97:6e:40:2b:85:df:03:7d:
72:af:08:05:97:da:ca:04:a1:e8:2e:48:2f:01:e6:3f:3e:44:
66:50:5c:3d:3c:33:4d:4f:12:ed:24:d2:99:3a:ae:1f:4a:b7:
1a:37:99:85:a1:46:cb:b2:03:2c:4c:15:c4:5a:9f:f7:3e:07:
51:60:92:d1:98:2a:c8:b7:98:2f:08:53:d0:4e:6e:a5:1f:86:
45:15:4a:fd:96:62:16:fb:b5:f1:af:fb:e1:d3:c8:a3:4d:9a:
a6:97:91:04
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUTKlYgdP1/g3gs7Gjx1immmJTVVQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGQ3ZmZhZTMwMGRlZjA4NzZiZjg0ODkwZmI2ZWExN2Jl
ODQxYTRkMzAeFw0yNjA3MTkyMjMwMTVaFw0yNzA3MTgyMjM1MTVaMDMxMTAvBgNV
BAMTKEI5Q0UyNzYyMjVGQjBBMzRGMTZDNURDQkMyM0IwQkQxNzRBMzc3MkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkcVEnWjlijByE2BwOjf6GpWIV
9fA/etGX++ub0Wg56Djt0NsWDz2rTQEYHgXe/3oWfXQZiEDkGxkhpzqYv7/wO/TS
8UVIvxIsOGEojB5U42ynAnEZmqsr6ej50EvkRI4804iLB+pSmT+W5C3xevz6Y1i/
zvI8aeMBBgSLFZ0T6oglQnT944Ad7sbpChdzShfimdLjJBTEskbzI9RNujjYovka
GSocfpj6vHIREkLUg/Rs6MTbPZPlU8rjHkmjGyHG1JAklo53k88C5ADlHdbT28y0
v6kDcJPkbWhhOYmsazWIeRUda4f6b8OHcaAur2CXC1dezHrOFwnpq+MxkmY5AgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUuc4nYiX7CjTxbF3LwjsL0XSjdy8wHwYDVR0j
BBgwFoAUDX/64wDe8Idr+EiQ+26he+hBpNMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODExM2RkYTYtN2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4
Y2ExLzEvMEQ3RkZBRTMwMERFRjA4NzZCRjg0ODkwRkI2RUExN0JFODQxQTREMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RYXzY0d0RlOElkci1FaVEtMjZoZS1o
QnBOTS5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODExM2RkYTYt
N2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4Y2ExLzEvMzEzNTMwMmUzMjM1MzEyZTMy
MzIzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzNDM0MzMzMi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAJb74DANBgkqhkiG9w0BAQsFAAOCAQEAf37CqeRd4M+r70w7aVwBE/hry1GV
f9zsOzhEMZTwPIgOd7EjbVPnwcQBXk+M9n55t/shtdX/qDcJOqvck0yYVDOhwTpg
CW7hcKh06nXw/nND+hz94wU1YvCONN/sZZt36P3OInklBDC3lpYDzbIOr3NDd/+H
Xw6la2jXYpKOgat+35O43Q9A6OChfW2JFq2tJmuv7OQLZQoN1JduQCuF3wN9cq8I
BZfaygSh6C5ILwHmPz5EZlBcPTwzTU8S7STSmTquH0q3GjeZhaFGy7IDLEwVxFqf
9z4HUWCS0ZgqyLeYLwhT0E5upR+GRRVK/ZZiFvu18a/74dPIo02appeRBA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:02:49 2026 by rpki-client