Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139352e35382e3132382e302f32342d3234203d3e20323134343833.roa
File: 3139352e35382e3132382e302f32342d3234203d3e20323134343833.roa (raw, json)
Hash identifier: o+8ninmvlC+dukIS/K8Lc7XABpjARzkzIFvUt8DaBlM=
Subject key identifier: 57:41:E9:1B:60:D9:A6:0B:AF:D7:F0:F7:55:59:70:CC:41:1D:2E:12
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 28A2D5329AC34C590F5C86727ABE1B411C5F87D7
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139352e35382e3132382e302f32342d3234203d3e20323134343833.roa
Signing time: Tue 14 Jul 2026 14:27:50 +0000
ROA not before: Tue 14 Jul 2026 14:22:50 +0000
ROA not after: Tue 13 Jul 2027 14:27:50 +0000
asID: 214483
IP address blocks: 195.58.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:a2:d5:32:9a:c3:4c:59:0f:5c:86:72:7a:be:1b:41:1c:5f:87:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: Jul 14 14:22:50 2026 GMT
Not After : Jul 13 14:27:50 2027 GMT
Subject: CN=5741E91B60D9A60BAFD7F0F7555970CC411D2E12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6b:5d:b2:dd:16:fa:a3:e5:39:01:70:73:94:
0f:9b:08:6a:47:26:8e:73:03:80:a5:01:5d:37:27:
48:4a:5f:86:f9:7f:ca:e6:3c:aa:a6:75:76:e4:1b:
60:e1:80:5f:7d:4a:0f:6a:ad:31:9e:5f:1a:4a:4e:
c0:93:c9:a6:d5:57:74:99:18:a5:9e:97:6f:ba:5a:
54:e0:39:1c:7a:a8:05:95:ca:fd:fa:f4:18:e1:0a:
cb:37:a8:75:e0:1b:e5:29:93:3e:e2:73:5d:6c:3a:
8e:96:0e:f6:24:5f:00:41:92:b0:96:89:01:48:8c:
7f:f0:c2:62:f4:30:1e:c7:a3:65:0a:a9:c7:a0:5c:
68:1d:d9:d6:25:d4:34:31:87:1a:59:8a:93:ac:d4:
9d:04:95:7f:e4:7e:67:e0:28:23:e6:11:a2:0e:3f:
70:2f:73:8e:a3:37:d3:b0:df:db:8b:80:cd:16:5e:
0f:1e:04:bf:9a:72:c7:c2:fb:4e:b5:8a:b1:11:26:
2d:5d:87:10:1c:cb:91:d8:ff:a1:e9:8f:be:a5:88:
90:cd:c2:e5:30:b4:97:c1:04:cd:51:98:3c:64:58:
b7:80:d6:d9:b2:b1:4a:20:4a:b8:3a:ba:2f:f2:51:
99:e4:dc:79:f9:cd:32:ab:9f:f0:85:83:9c:f9:79:
78:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:41:E9:1B:60:D9:A6:0B:AF:D7:F0:F7:55:59:70:CC:41:1D:2E:12
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139352e35382e3132382e302f32342d3234203d3e20323134343833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.58.128.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:91:cc:10:da:80:6f:64:ad:0e:33:a9:ed:21:3c:a3:77:c4:
4a:92:eb:f0:47:a8:a0:32:34:ee:ed:14:f9:1c:21:07:f4:78:
74:4b:21:bf:8e:d7:71:90:8b:1e:40:7c:16:19:69:b0:00:8b:
3c:36:58:f3:73:14:3c:a6:07:65:d5:ce:2e:88:53:0f:28:d6:
1a:25:90:49:3b:a3:98:10:83:2b:2e:ed:02:4c:da:6f:05:0f:
27:5d:da:7c:99:f1:e0:ab:e9:3d:18:0f:4f:1f:4e:dd:a5:1a:
8a:84:e6:27:74:d1:1e:c0:ba:f5:e7:8a:e0:35:9d:bc:ba:5f:
39:81:23:14:c5:20:6c:73:30:d3:75:5f:c1:6f:01:57:42:a0:
24:4c:c2:21:c7:50:52:fe:20:73:d0:fb:21:a0:ef:57:f8:17:
c1:2f:53:c6:6c:ed:fb:70:3b:64:bf:17:7f:4e:e0:7a:c0:a4:
00:6d:f3:9c:ba:dc:cd:42:88:d6:0f:17:35:70:fe:84:e2:69:
32:87:cf:d8:1d:a2:27:97:bb:8d:6b:6d:37:97:b4:9f:58:bf:
2f:d6:75:9a:c1:fd:6b:9c:57:af:84:a1:f2:df:89:87:3c:57:
6c:1a:6b:49:64:ff:b8:57:6e:57:e5:34:d4:44:35:f4:7b:b0:
f2:b1:3b:dc
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUKKLVMprDTFkPXIZyer4bQRxfh9cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGQ3ZmZhZTMwMGRlZjA4NzZiZjg0ODkwZmI2ZWExN2Jl
ODQxYTRkMzAeFw0yNjA3MTQxNDIyNTBaFw0yNzA3MTMxNDI3NTBaMDMxMTAvBgNV
BAMTKDU3NDFFOTFCNjBEOUE2MEJBRkQ3RjBGNzU1NTk3MENDNDExRDJFMTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCha12y3Rb6o+U5AXBzlA+bCGpH
Jo5zA4ClAV03J0hKX4b5f8rmPKqmdXbkG2DhgF99Sg9qrTGeXxpKTsCTyabVV3SZ
GKWel2+6WlTgORx6qAWVyv369BjhCss3qHXgG+Upkz7ic11sOo6WDvYkXwBBkrCW
iQFIjH/wwmL0MB7Ho2UKqcegXGgd2dYl1DQxhxpZipOs1J0ElX/kfmfgKCPmEaIO
P3Avc46jN9Ow39uLgM0WXg8eBL+acsfC+061irERJi1dhxAcy5HY/6Hpj76liJDN
wuUwtJfBBM1RmDxkWLeA1tmysUogSrg6ui/yUZnk3Hn5zTKrn/CFg5z5eXhVAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUV0HpG2DZpguv1/D3VVlwzEEdLhIwHwYDVR0j
BBgwFoAUDX/64wDe8Idr+EiQ+26he+hBpNMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODExM2RkYTYtN2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4
Y2ExLzEvMEQ3RkZBRTMwMERFRjA4NzZCRjg0ODkwRkI2RUExN0JFODQxQTREMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RYXzY0d0RlOElkci1FaVEtMjZoZS1o
QnBOTS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODExM2RkYTYt
N2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4Y2ExLzEvMzEzOTM1MmUzNTM4MmUzMTMy
MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzQzNDM4MzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADDOoAwDQYJKoZIhvcNAQELBQADggEBAE2RzBDagG9krQ4zqe0hPKN3xEqS6/BH
qKAyNO7tFPkcIQf0eHRLIb+O13GQix5AfBYZabAAizw2WPNzFDymB2XVzi6IUw8o
1holkEk7o5gQgysu7QJM2m8FDydd2nyZ8eCr6T0YD08fTt2lGoqE5id00R7AuvXn
iuA1nby6XzmBIxTFIGxzMNN1X8FvAVdCoCRMwiHHUFL+IHPQ+yGg71f4F8EvU8Zs
7ftwO2S/F39O4HrApABt85y63M1CiNYPFzVw/oTiaTKHz9gdoieXu41rbTeXtJ9Y
vy/WdZrB/WucV6+EofLfiYc8V2waa0lk/7hXblflNNRENfR7sPKxO9w=
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:02:10 2026 by rpki-client