Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3135302e3235312e3232382e302f32342d3234203d3e20323134343332.roa
File: 3135302e3235312e3232382e302f32342d3234203d3e20323134343332.roa (raw, json)
Hash identifier: 2KoIymDUs9jOiQNM3x5WVfabYD3YWH6MK0lMLsNNo+8=
Subject key identifier: F5:A7:AF:4B:CF:00:7D:FC:B9:07:64:34:0C:27:09:EC:55:97:F9:48
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 07CE1B7A38C2851084B9E8D376E0754E69FD8F10
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3135302e3235312e3232382e302f32342d3234203d3e20323134343332.roa
Signing time: Sun 19 Jul 2026 22:35:18 +0000
ROA not before: Sun 19 Jul 2026 22:30:18 +0000
ROA not after: Sun 18 Jul 2027 22:35:18 +0000
asID: 214432
IP address blocks: 150.251.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:ce:1b:7a:38:c2:85:10:84:b9:e8:d3:76:e0:75:4e:69:fd:8f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: Jul 19 22:30:18 2026 GMT
Not After : Jul 18 22:35:18 2027 GMT
Subject: CN=F5A7AF4BCF007DFCB90764340C2709EC5597F948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ba:1a:85:00:a2:c3:bb:57:bc:39:84:52:4a:
c8:81:fc:d4:9c:ec:c1:e3:8e:7f:51:50:8b:2d:8b:
ee:a3:f5:94:d6:da:a3:4f:49:bd:2d:19:da:be:00:
44:e0:4c:10:a3:62:72:7d:bb:b6:20:1a:d2:37:92:
23:12:2b:45:0f:61:ec:88:7d:54:99:c2:03:14:c7:
76:3f:b1:a1:cb:84:32:0c:c7:6c:64:63:ec:c0:c9:
f4:e3:57:ce:e7:f3:2f:c4:84:4f:b5:e8:b2:81:b6:
d9:6e:dd:bd:18:14:f5:11:7b:d2:f3:c7:5b:d0:11:
3c:3e:63:21:be:54:4d:dc:f6:22:9e:31:c0:4d:60:
f2:b0:05:69:48:c2:77:d3:d0:99:4e:4b:09:26:99:
bd:9e:18:ca:67:ed:fe:46:35:a5:26:1b:07:fd:f6:
05:6e:02:30:2d:ab:fc:b5:60:85:48:14:ab:d9:21:
00:67:b8:3a:c3:b2:fb:10:79:84:af:19:79:96:04:
33:41:11:bf:e5:a9:92:7f:1e:41:ff:ca:f1:45:96:
34:9a:85:cd:3a:7f:c3:3c:b7:df:70:0a:86:44:03:
4e:32:1b:02:35:53:93:db:78:a9:22:de:30:ff:dd:
72:c3:9b:70:e2:85:5d:ff:60:4d:51:71:9b:80:32:
20:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A7:AF:4B:CF:00:7D:FC:B9:07:64:34:0C:27:09:EC:55:97:F9:48
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3135302e3235312e3232382e302f32342d3234203d3e20323134343332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.251.228.0/24
Signature Algorithm: sha256WithRSAEncryption
40:92:30:83:de:35:02:1a:f7:7f:8b:43:81:7b:0a:46:03:06:
31:14:be:c7:e2:56:68:b0:64:3b:d4:26:42:df:2b:d9:f6:b3:
20:da:45:85:9c:41:5e:a5:f9:fc:c9:24:12:17:79:da:8b:f4:
64:03:47:7b:15:b8:83:63:8d:b0:90:27:eb:13:77:02:71:36:
08:36:42:fa:60:22:a3:76:c5:20:80:e9:61:9d:bb:29:01:e2:
d5:39:dd:43:32:65:c3:38:8e:25:8b:bb:31:b2:16:2b:3b:1a:
e8:70:1d:c5:de:3b:69:4f:ae:4d:56:a4:8d:dd:4f:18:46:22:
ac:6d:44:8e:92:ca:5d:01:17:6b:61:fb:ad:f5:b7:d8:b4:ef:
d0:7f:20:ea:a5:ea:d1:61:ee:46:4f:dd:2a:70:e1:b7:9b:68:
43:5d:41:17:06:ae:23:9c:af:42:06:d8:2f:26:46:79:b9:ec:
fe:3f:21:5c:dc:0c:fc:c5:e0:f3:93:5c:97:b7:50:f1:02:ff:
5b:a4:75:89:e9:42:0b:9b:15:8d:4a:cf:1f:57:c4:29:ae:ae:
90:a1:b2:22:5e:d1:2a:ac:55:d5:4d:e5:5b:10:bd:12:ad:55:
75:5d:2f:ad:56:6b:9a:81:06:63:9d:69:52:d5:a4:5f:26:ba:
b4:b9:b6:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:11:43 2026 by rpki-client