Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e3135302e3133362e302f32342d3234203d3e20343032303437.roa
File: 3138352e3135302e3133362e302f32342d3234203d3e20343032303437.roa (raw, json)
Hash identifier: ySeWVzyNd8QVTps10rMm4TCwDeT1SHfPHrbusKZDbOA=
Subject key identifier: ED:FB:0E:2C:E2:69:89:53:82:F7:BA:F5:03:15:3E:E8:EF:29:44:5D
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 501EA8B37DEFEA6B2D520A3050F28AE30450330A
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e3135302e3133362e302f32342d3234203d3e20343032303437.roa
Signing time: Mon 16 Mar 2026 09:47:55 +0000
ROA not before: Mon 16 Mar 2026 09:42:55 +0000
ROA not after: Mon 15 Mar 2027 09:47:55 +0000
asID: 402047
IP address blocks: 185.150.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:30:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:1e:a8:b3:7d:ef:ea:6b:2d:52:0a:30:50:f2:8a:e3:04:50:33:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Mar 16 09:42:55 2026 GMT
Not After : Mar 15 09:47:55 2027 GMT
Subject: CN=EDFB0E2CE269895382F7BAF503153EE8EF29445D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:37:cf:f2:f6:6a:52:e9:68:ad:66:78:2e:3d:
ea:6e:0e:30:d6:3f:c1:53:a3:6e:87:71:82:b8:e7:
d9:8d:2f:37:c1:4a:85:47:75:1c:48:59:e3:47:ca:
c2:c3:54:d4:e5:a1:8e:09:75:ca:4f:17:e9:d6:5f:
a1:07:e4:7b:b7:0f:71:d5:d5:06:13:11:92:87:52:
77:e6:cd:d6:60:a0:09:23:ae:dd:ee:a3:06:ab:84:
c9:ca:4c:b7:31:a7:85:75:82:98:83:a8:9d:14:f0:
94:0c:78:cf:57:4d:4b:f9:85:0c:a9:b9:a8:fd:9c:
00:2d:10:34:20:e3:54:5c:e8:ea:f4:5b:e7:d3:b3:
e8:cd:7e:f6:db:94:80:69:87:c2:2f:49:29:65:8f:
ae:53:7e:a9:64:8f:22:f4:e2:4c:1b:2f:56:8d:4f:
bf:5f:70:26:dc:14:f9:3a:01:73:37:d9:b5:fd:7d:
bc:55:48:b9:ce:5e:14:e7:38:29:08:3c:9f:ef:d5:
e1:f4:e6:23:fd:d6:c4:4f:2e:0c:78:ca:71:50:ec:
6b:19:6c:4d:ba:8b:8c:65:60:aa:ba:7c:70:b6:78:
b3:4f:17:c9:74:2c:51:1a:da:98:b8:81:b7:c5:45:
c9:65:4c:db:eb:b4:76:d3:a2:1e:d5:bd:17:fa:fe:
cf:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:FB:0E:2C:E2:69:89:53:82:F7:BA:F5:03:15:3E:E8:EF:29:44:5D
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e3135302e3133362e302f32342d3234203d3e20343032303437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.136.0/24
Signature Algorithm: sha256WithRSAEncryption
61:7d:bb:f3:21:fb:8b:b9:06:a1:5a:25:3b:2d:41:41:54:4a:
3c:f5:5c:a6:97:f4:c5:23:46:2a:35:20:66:8a:c9:dd:4b:89:
fa:58:77:8b:d4:89:12:0e:b9:13:19:67:92:e8:c7:28:18:3c:
e8:97:29:b5:a8:22:5c:1e:78:6f:03:14:d1:49:ad:56:bf:55:
41:fe:72:cd:2e:b0:da:23:07:eb:d8:ab:f8:90:90:b0:94:e3:
21:a0:d9:72:46:4d:1e:d6:61:cf:56:42:1c:6b:fe:a3:6d:25:
f3:b5:78:4f:60:33:64:af:40:91:71:38:19:9e:53:20:5e:3b:
af:19:7d:14:e2:b0:b7:d8:36:91:c5:7e:68:0c:52:84:fe:91:
2d:b6:e1:39:ac:af:8b:9d:23:b7:56:63:a1:bb:1e:16:14:c2:
9a:f2:98:3c:58:b0:fe:96:48:64:1b:c7:52:77:c3:05:24:6b:
5f:a0:8a:bf:64:27:c0:91:46:36:3f:15:70:58:00:d7:c6:56:
41:ea:5b:71:0d:f0:93:ed:20:63:c7:ad:45:d4:d1:7b:e2:1b:
e0:b9:5f:a1:be:2e:35:96:88:ab:99:8a:23:09:f8:a4:04:fc:
44:58:b3:df:c6:67:3b:82:8d:20:ee:d5:dd:0b:90:c5:87:70:
48:70:59:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:09:08 2026 by rpki-client