Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3135302e3235312e3233302e302f32342d3234203d3e20313534313332.roa
File: 3135302e3235312e3233302e302f32342d3234203d3e20313534313332.roa (raw, json)
Hash identifier: CNqSsi3S99uzFpnsXJMbKqRDJfbOBRxYooSl4UfOx2c=
Subject key identifier: 4D:C3:B7:08:D7:EB:E6:CD:C5:4F:75:A3:1F:EB:2C:01:A6:4D:D0:87
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 7A33F7AF13534F6F5228B1EC87F01E83E2FC087A
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3135302e3235312e3233302e302f32342d3234203d3e20313534313332.roa
Signing time: Sun 19 Jul 2026 10:29:33 +0000
ROA not before: Sun 19 Jul 2026 10:24:33 +0000
ROA not after: Sun 18 Jul 2027 10:29:33 +0000
asID: 154132
IP address blocks: 150.251.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:33:f7:af:13:53:4f:6f:52:28:b1:ec:87:f0:1e:83:e2:fc:08:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: Jul 19 10:24:33 2026 GMT
Not After : Jul 18 10:29:33 2027 GMT
Subject: CN=4DC3B708D7EBE6CDC54F75A31FEB2C01A64DD087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:32:b6:4d:dc:f4:aa:27:cc:3b:38:87:28:1d:
14:6e:75:13:a1:6f:dc:a9:3e:90:ff:01:37:38:69:
d8:66:82:bf:44:66:32:43:3a:cf:8b:5c:a8:e2:26:
7c:99:b8:63:bd:63:56:2d:94:79:a0:30:a1:6c:68:
5d:f6:54:91:20:a6:30:02:d8:c8:28:10:62:8d:c7:
16:1f:fb:87:8e:38:ff:1e:3b:3d:15:2a:3b:96:c1:
73:43:68:87:a6:3b:08:02:08:6e:f0:69:77:1c:17:
29:e6:60:95:db:a3:0f:42:7c:7c:14:5d:1f:2c:1c:
ae:69:f3:35:ba:02:e5:33:11:21:b2:f0:92:4a:83:
a4:e0:27:7f:6b:3f:ee:5c:6a:c4:db:d0:8d:5e:70:
d1:6a:e8:04:9b:18:c8:ee:82:4f:99:cd:b2:e4:b5:
36:e5:97:06:75:32:0b:d5:ff:1c:0f:6a:33:ae:98:
2f:de:69:ee:cc:ea:1a:f7:98:e6:55:e8:18:31:2c:
16:60:85:5d:34:79:38:0a:a9:fc:c5:42:98:9c:c4:
d4:6f:a4:4a:ff:c7:de:33:f8:31:50:c9:e0:ab:ef:
78:07:4e:0d:0f:c6:12:79:5c:7c:25:51:ac:c3:10:
b0:d1:dd:eb:c4:d0:3a:c4:14:23:68:35:9a:8f:c5:
c1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:C3:B7:08:D7:EB:E6:CD:C5:4F:75:A3:1F:EB:2C:01:A6:4D:D0:87
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3135302e3235312e3233302e302f32342d3234203d3e20313534313332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.251.230.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:93:83:1c:a2:d2:65:3e:2d:63:e9:8a:b1:77:6f:01:2c:06:
b3:42:42:46:9a:1b:2f:08:67:0e:fd:4f:25:a9:3d:c5:5b:b0:
c2:1f:5d:c6:a2:d1:1c:87:55:22:b5:f4:d6:8d:d9:87:3f:26:
9e:f9:0e:51:c6:75:13:fd:d1:f4:38:9d:c8:a7:41:0d:15:da:
f7:43:6c:ff:72:17:20:c7:68:6d:95:8f:45:9f:4e:33:7c:a2:
7e:07:5e:a9:b0:12:b7:52:99:28:ee:24:97:dd:ff:7e:bc:48:
a4:6c:df:82:97:34:37:ae:06:90:f7:48:50:72:a3:ca:a9:3f:
8b:76:a5:47:7e:6b:98:3f:2b:1f:26:3d:97:17:48:1a:a5:a8:
77:cf:49:4e:42:ec:b1:c9:6d:50:da:04:1f:09:64:d9:95:48:
e7:40:b6:c8:75:d6:56:b9:cb:62:8b:ca:bf:3a:00:82:bf:03:
72:e5:51:6d:45:93:9f:6b:83:ab:fe:89:10:f2:24:44:5f:f9:
ed:7a:b5:6a:cd:c8:2f:e1:8c:26:0c:20:65:15:aa:1d:ae:85:
ab:11:cf:ea:a5:20:a3:08:83:61:a9:14:b2:6e:f5:f8:3a:69:
a2:dd:f1:8e:5e:06:ec:24:44:4d:cc:cc:c8:d6:5b:80:11:a0:
aa:ef:3e:1e
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUejP3rxNTT29SKLHsh/Aeg+L8CHowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGQ3ZmZhZTMwMGRlZjA4NzZiZjg0ODkwZmI2ZWExN2Jl
ODQxYTRkMzAeFw0yNjA3MTkxMDI0MzNaFw0yNzA3MTgxMDI5MzNaMDMxMTAvBgNV
BAMTKDREQzNCNzA4RDdFQkU2Q0RDNTRGNzVBMzFGRUIyQzAxQTY0REQwODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOMrZN3PSqJ8w7OIcoHRRudROh
b9ypPpD/ATc4adhmgr9EZjJDOs+LXKjiJnyZuGO9Y1YtlHmgMKFsaF32VJEgpjAC
2MgoEGKNxxYf+4eOOP8eOz0VKjuWwXNDaIemOwgCCG7waXccFynmYJXbow9CfHwU
XR8sHK5p8zW6AuUzESGy8JJKg6TgJ39rP+5casTb0I1ecNFq6ASbGMjugk+ZzbLk
tTbllwZ1MgvV/xwPajOumC/eae7M6hr3mOZV6BgxLBZghV00eTgKqfzFQpicxNRv
pEr/x94z+DFQyeCr73gHTg0PxhJ5XHwlUazDELDR3evE0DrEFCNoNZqPxcE9AgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUTcO3CNfr5s3FT3WjH+ssAaZN0IcwHwYDVR0j
BBgwFoAUDX/64wDe8Idr+EiQ+26he+hBpNMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODExM2RkYTYtN2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4
Y2ExLzEvMEQ3RkZBRTMwMERFRjA4NzZCRjg0ODkwRkI2RUExN0JFODQxQTREMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RYXzY0d0RlOElkci1FaVEtMjZoZS1o
QnBOTS5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODExM2RkYTYt
N2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4Y2ExLzEvMzEzNTMwMmUzMjM1MzEyZTMy
MzMzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzNDMxMzMzMi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAJb75jANBgkqhkiG9w0BAQsFAAOCAQEAPpODHKLSZT4tY+mKsXdvASwGs0JC
RpobLwhnDv1PJak9xVuwwh9dxqLRHIdVIrX01o3Zhz8mnvkOUcZ1E/3R9DidyKdB
DRXa90Ns/3IXIMdobZWPRZ9OM3yifgdeqbASt1KZKO4kl93/frxIpGzfgpc0N64G
kPdIUHKjyqk/i3alR35rmD8rHyY9lxdIGqWod89JTkLsscltUNoEHwlk2ZVI50C2
yHXWVrnLYovKvzoAgr8DcuVRbUWTn2uDq/6JEPIkRF/57Xq1as3IL+GMJgwgZRWq
Ha6FqxHP6qUgowiDYakUsm71+Dppot3xjl4G7CRETczMyNZbgBGgqu8+Hg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:48:18 2026 by rpki-client