Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139352e35382e3134362e302f32342d3234203d3e20323030363531.roa
File: 3139352e35382e3134362e302f32342d3234203d3e20323030363531.roa (raw, json)
Hash identifier: QX2HsAQ+V/zHW2FFlc9Bj/caHNvb19HdNE8LLNWbEWM=
Subject key identifier: D1:F8:CA:9A:4C:5A:99:4D:CD:69:BC:29:DF:7D:B7:C4:9D:63:F4:A0
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 597BA0F060B2ADF5AFA6EBEEF6410C0292843F8D
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139352e35382e3134362e302f32342d3234203d3e20323030363531.roa
Signing time: Wed 06 May 2026 12:18:18 +0000
ROA not before: Wed 06 May 2026 12:13:18 +0000
ROA not after: Wed 05 May 2027 12:18:18 +0000
asID: 200651
IP address blocks: 195.58.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:7b:a0:f0:60:b2:ad:f5:af:a6:eb:ee:f6:41:0c:02:92:84:3f:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: May 6 12:13:18 2026 GMT
Not After : May 5 12:18:18 2027 GMT
Subject: CN=D1F8CA9A4C5A994DCD69BC29DF7DB7C49D63F4A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9b:c2:54:67:bf:7c:9a:d4:67:e9:e1:49:53:
bc:e6:d3:d4:d9:14:2c:a4:53:9e:55:f2:e8:ae:47:
48:5d:8c:1b:e4:c3:c3:54:11:e0:03:45:af:8a:42:
0f:e5:a1:ed:8e:23:6e:38:8f:67:b7:62:32:f0:df:
ca:a7:1e:0f:9a:9a:a5:8d:76:08:3c:05:bb:ac:5a:
b3:db:c2:fb:78:60:eb:74:71:42:68:30:0c:75:67:
f8:dc:ac:83:52:e9:f1:c4:4a:a7:bd:b4:e0:7f:cd:
5e:43:7f:72:ae:50:d4:91:77:48:ec:a4:fe:e4:e5:
0d:34:a1:0f:6d:30:b0:e1:82:af:60:58:46:c8:2f:
66:b3:5d:65:9e:89:42:b0:38:8c:25:81:0b:1f:7d:
ce:ca:ac:fc:4b:4c:db:16:52:0f:5b:4a:0d:c3:65:
8e:3d:6c:47:1b:a7:ff:ee:a6:b3:87:7d:8f:51:02:
0f:d9:21:54:ef:0f:12:58:7b:64:fe:4b:34:73:83:
4e:ad:14:a2:99:24:24:b5:6a:97:a5:a6:b1:6f:a6:
f8:89:69:80:97:b4:45:de:f6:a7:6e:7d:3d:0e:60:
4b:de:c0:95:56:5b:d6:39:45:80:78:e1:9e:44:af:
8c:6a:a9:13:8f:bf:ce:64:fe:2b:a3:13:04:1b:c3:
80:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F8:CA:9A:4C:5A:99:4D:CD:69:BC:29:DF:7D:B7:C4:9D:63:F4:A0
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139352e35382e3134362e302f32342d3234203d3e20323030363531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.58.146.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:ee:d5:b0:2f:8e:09:88:37:71:aa:44:ef:4a:68:aa:b6:5e:
22:c5:1e:d6:5f:15:8a:2e:a4:b8:f3:fb:b3:18:04:45:c8:2d:
a8:28:67:2c:ad:b4:ee:32:d5:52:c1:fd:f3:7a:d8:2c:21:73:
fb:50:41:52:60:65:29:04:c6:63:59:4d:1e:8d:f1:55:48:aa:
49:73:91:e7:a1:63:b7:f0:86:4b:53:1e:4d:30:76:60:b7:53:
1c:48:31:f1:6c:74:dc:d9:80:44:fe:29:3a:35:1c:e8:2e:ce:
30:57:fb:fb:cb:48:02:6e:b3:8b:9b:cc:ce:9a:d3:1e:5a:f3:
3a:b9:90:12:cc:61:55:4c:9c:7c:6c:99:50:c7:f4:7d:ba:af:
20:e8:be:72:ba:d2:88:9c:94:27:2d:60:0d:f6:f5:f0:83:4d:
70:80:46:a2:f5:7f:d0:51:23:ec:bb:c3:1d:e9:9c:d2:51:9f:
36:b6:f3:c4:a9:6d:24:74:7c:f2:dd:eb:19:49:a3:07:ef:a4:
b8:96:3f:ab:6c:78:e8:dd:0e:57:26:a7:a9:f3:9e:62:1c:9d:
18:6c:fa:b1:55:a3:43:67:08:0e:df:3c:79:79:7c:4a:1f:53:
1c:37:37:f9:30:9f:0f:e4:0b:ea:16:49:08:7d:f5:73:d8:55:
7f:60:1e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:35:59 2026 by rpki-client