Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3135302e3235312e3232382e302f32342d3234203d3e20383334.roa
File: 3135302e3235312e3232382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: Ik4L7tUUvBEdqSjNmCL1Rt9cW5dT8J9xZbjAa25OeXA=
Subject key identifier: B5:4F:8B:0D:D7:8C:D3:34:66:28:E2:E8:02:E6:81:62:58:E9:6B:64
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 0ED58D095E8DB540B8064F0FB141FB0F9B3B270C
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3135302e3235312e3232382e302f32342d3234203d3e20383334.roa
Signing time: Tue 24 Mar 2026 07:49:23 +0000
ROA not before: Tue 24 Mar 2026 07:44:23 +0000
ROA not after: Tue 23 Mar 2027 07:49:23 +0000
asID: 834
IP address blocks: 150.251.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:d5:8d:09:5e:8d:b5:40:b8:06:4f:0f:b1:41:fb:0f:9b:3b:27:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: Mar 24 07:44:23 2026 GMT
Not After : Mar 23 07:49:23 2027 GMT
Subject: CN=B54F8B0DD78CD3346628E2E802E6816258E96B64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2d:44:5c:1e:32:28:c2:e7:65:93:a1:72:f8:
ff:34:19:46:14:8f:02:97:fe:6b:60:73:d4:04:6b:
dd:62:e5:6e:73:8c:d9:9e:56:70:83:07:ef:97:cd:
87:94:9c:56:4c:3c:3e:09:4c:80:d4:08:24:14:e5:
f1:6d:fc:16:4d:1a:92:c7:ac:a2:80:e7:e6:e4:6c:
df:10:76:cf:3a:c7:95:98:20:ea:8b:f6:35:1b:84:
fc:d8:5d:4c:ba:b4:c1:b1:1f:32:ca:73:18:b0:9f:
2e:96:cf:d6:62:c9:48:ef:65:40:ed:12:17:c6:7e:
d3:84:ec:3d:10:be:cc:b0:e7:4a:0b:72:d1:21:c0:
8e:ec:8a:d7:9e:3f:93:1f:6b:49:5b:18:3d:3c:fb:
7b:6d:9e:a4:4c:d1:fa:7f:06:eb:4b:f5:62:1c:02:
b0:57:93:7c:8b:c3:0a:7b:89:4d:ca:a0:81:d7:a5:
89:b4:42:cd:63:34:28:10:17:a2:51:40:b0:9d:2f:
32:3e:fd:3c:c3:fc:e0:2e:90:a3:b9:24:ba:61:6b:
dd:cd:dc:56:8b:46:39:4a:15:ac:c6:2c:97:b9:1b:
7b:ca:76:82:5b:a7:d6:24:ee:15:12:c7:20:e1:fd:
7a:91:75:65:71:68:50:32:f1:7a:f3:49:ae:13:c8:
27:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:4F:8B:0D:D7:8C:D3:34:66:28:E2:E8:02:E6:81:62:58:E9:6B:64
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3135302e3235312e3232382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.251.228.0/24
Signature Algorithm: sha256WithRSAEncryption
94:22:62:93:6b:33:ed:83:f7:fb:a1:b2:88:6a:6e:a4:4a:d0:
0d:71:fe:86:20:7f:4b:35:fd:3a:94:39:b0:fa:b3:39:fb:f6:
d2:f3:e5:bc:6f:d3:58:8b:b5:c4:7d:aa:70:90:bf:5b:62:9f:
3f:7a:75:ce:09:00:6d:5a:9a:ce:6e:c4:7e:90:de:06:1d:09:
48:76:b0:21:f1:06:52:bd:9b:b1:e1:46:62:e2:7b:78:bf:c2:
cd:5e:50:5a:68:59:03:8e:8a:a5:b2:b1:70:9b:5a:b3:f1:09:
cf:cb:f7:03:9c:9d:7d:ab:28:d6:c6:12:75:7c:bf:d0:ec:a6:
96:f4:aa:7e:8f:38:76:d1:4c:c6:fc:16:32:2a:46:87:12:88:
fd:f9:15:44:88:f8:1d:b5:83:61:88:f4:09:ed:13:05:c7:69:
ab:ad:4f:45:19:2f:da:44:30:54:5d:b1:5d:91:0b:5d:a2:65:
3c:5a:ed:df:80:fa:d4:31:c1:6c:e7:64:18:23:4e:69:d0:52:
f1:8d:c3:fc:c5:bc:6b:29:17:9f:cf:3f:60:f5:d6:70:b2:70:
cf:09:6e:59:66:56:d6:fd:8e:22:39:15:f4:1b:3a:c9:b7:65:
82:37:30:30:1a:83:ed:e8:f0:5c:91:4f:9d:6a:9c:70:e3:e3:
45:d1:1f:1b
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUDtWNCV6NtUC4Bk8PsUH7D5s7JwwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGQ3ZmZhZTMwMGRlZjA4NzZiZjg0ODkwZmI2ZWExN2Jl
ODQxYTRkMzAeFw0yNjAzMjQwNzQ0MjNaFw0yNzAzMjMwNzQ5MjNaMDMxMTAvBgNV
BAMTKEI1NEY4QjBERDc4Q0QzMzQ2NjI4RTJFODAyRTY4MTYyNThFOTZCNjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXLURcHjIowudlk6Fy+P80GUYU
jwKX/mtgc9QEa91i5W5zjNmeVnCDB++XzYeUnFZMPD4JTIDUCCQU5fFt/BZNGpLH
rKKA5+bkbN8Qds86x5WYIOqL9jUbhPzYXUy6tMGxHzLKcxiwny6Wz9ZiyUjvZUDt
EhfGftOE7D0Qvsyw50oLctEhwI7siteeP5Mfa0lbGD08+3ttnqRM0fp/ButL9WIc
ArBXk3yLwwp7iU3KoIHXpYm0Qs1jNCgQF6JRQLCdLzI+/TzD/OAukKO5JLpha93N
3FaLRjlKFazGLJe5G3vKdoJbp9Yk7hUSxyDh/XqRdWVxaFAy8XrzSa4TyCePAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUtU+LDdeM0zRmKOLoAuaBYljpa2QwHwYDVR0j
BBgwFoAUDX/64wDe8Idr+EiQ+26he+hBpNMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODExM2RkYTYtN2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4
Y2ExLzEvMEQ3RkZBRTMwMERFRjA4NzZCRjg0ODkwRkI2RUExN0JFODQxQTREMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RYXzY0d0RlOElkci1FaVEtMjZoZS1o
QnBOTS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODExM2RkYTYt
N2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4Y2ExLzEvMzEzNTMwMmUzMjM1MzEyZTMy
MzIzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJb7
5DANBgkqhkiG9w0BAQsFAAOCAQEAlCJik2sz7YP3+6GyiGpupErQDXH+hiB/SzX9
OpQ5sPqzOfv20vPlvG/TWIu1xH2qcJC/W2KfP3p1zgkAbVqazm7EfpDeBh0JSHaw
IfEGUr2bseFGYuJ7eL/CzV5QWmhZA46KpbKxcJtas/EJz8v3A5ydfaso1sYSdXy/
0OymlvSqfo84dtFMxvwWMipGhxKI/fkVRIj4HbWDYYj0Ce0TBcdpq61PRRkv2kQw
VF2xXZELXaJlPFrt34D61DHBbOdkGCNOadBS8Y3D/MW8aykXn88/YPXWcLJwzwlu
WWZW1v2OIjkV9Bs6ybdlgjcwMBqD7ejwXJFPnWqccOPjRdEfGw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:33:54 2026 by rpki-client