Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS0.roa
File: AS0.roa (raw, json)
Hash identifier: d/8IhyBUcAdmwE4xQTedU52RHAaaGOIbk3CRKwaBcP0=
Subject key identifier: FC:9D:D5:EA:6F:6D:A2:05:C4:31:BC:1A:01:D6:E7:9F:42:77:C4:DE
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 4476566D15CEFD75D31F7C81F70014270975911B
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS0.roa
Signing time: Wed 23 Sep 2026 07:00:14 +0000
ROA not before: Wed 23 Sep 2026 06:55:14 +0000
ROA not after: Wed 22 Sep 2027 07:00:14 +0000
asID: 0
IP address blocks: 193.150.40.0/24 maxlen: 24
2a14:7580:50::/44 maxlen: 44
2a14:7580:100::/40 maxlen: 48
2a14:7580:3000::/36 maxlen: 48
2a14:7580:4000::/36 maxlen: 48
2a14:7580:5000::/36 maxlen: 48
2a14:7580:9000::/36 maxlen: 48
2a14:7580:ff80::/44 maxlen: 48
2a14:7580:ffef::/48 maxlen: 48
2a14:7580:fff3::/48 maxlen: 48
2a14:7580:fff4::/48 maxlen: 48
2a14:7580:fff5::/48 maxlen: 48
2a14:7580:fff8::/48 maxlen: 48
2a14:7580:fff9::/48 maxlen: 48
2a14:7580:fffa::/48 maxlen: 48
2a14:7581:f10::/44 maxlen: 48
2a14:7581:fe0::/48 maxlen: 48
2a14:7581:fe1::/48 maxlen: 48
2a14:7581:fe6::/48 maxlen: 48
2a14:7581:fe8::/48 maxlen: 48
2a14:7581:fea::/48 maxlen: 48
2a14:7581:fec::/48 maxlen: 48
2a14:7581:fed::/48 maxlen: 48
2a14:7581:fef::/48 maxlen: 48
2a14:7581:ff2::/48 maxlen: 48
2a14:7581:ff5::/48 maxlen: 48
2a14:7581:ff6::/48 maxlen: 48
2a14:7581:ff7::/48 maxlen: 48
2a14:7581:ffa::/48 maxlen: 48
2a14:7581:ffc::/48 maxlen: 48
2a14:7581:ffe::/48 maxlen: 48
2a14:7581:3e00::/40 maxlen: 48
2a14:7581:3f00::/40 maxlen: 48
2a14:7581:9000::/40 maxlen: 48
2a14:7581:9100::/40 maxlen: 48
2a14:7581:9200::/40 maxlen: 48
2a14:7581:9300::/40 maxlen: 48
2a14:7581:9700::/40 maxlen: 48
2a14:7581:9f00::/44 maxlen: 48
2a14:7581:9ff0::/44 maxlen: 48
2a14:7581:a000::/36 maxlen: 48
2a14:7581:e000::/36 maxlen: 48
2a14:7582::/36 maxlen: 48
2a14:7582:1000::/36 maxlen: 48
2a14:7582:2000::/36 maxlen: 48
2a14:7583:2000::/36 maxlen: 48
2a14:7583:8000::/36 maxlen: 48
2a14:7583:e300::/40 maxlen: 48
2a14:7583:f600::/40 maxlen: 48
2a14:7583:f800::/40 maxlen: 48
2a14:7584:3000::/36 maxlen: 48
2a14:7584:a000::/36 maxlen: 48
2a14:7584:b000::/36 maxlen: 48
2a14:7586:a000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:76:56:6d:15:ce:fd:75:d3:1f:7c:81:f7:00:14:27:09:75:91:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Sep 23 06:55:14 2026 GMT
Not After : Sep 22 07:00:14 2027 GMT
Subject: CN=FC9DD5EA6F6DA205C431BC1A01D6E79F4277C4DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0d:0d:ff:ca:ce:25:71:e1:da:77:bd:8a:1b:
3b:c8:e2:3e:1c:23:f0:1a:98:61:e3:07:31:52:df:
54:95:e5:07:58:3c:39:cc:04:b9:ec:22:7d:87:71:
0e:a2:79:c7:dc:64:3e:2d:61:69:20:88:21:8f:10:
9d:11:f9:73:79:a9:ed:64:fa:2b:09:09:d2:3d:7c:
d7:cc:09:9f:e9:59:ab:00:0b:e5:14:d3:e7:6f:e1:
38:a4:92:8a:95:8c:a3:d9:47:08:f1:c7:5e:c8:45:
da:62:38:f5:b3:cc:4a:4d:c1:54:64:5a:1e:d9:30:
dd:4a:0c:7b:e7:0b:3c:bd:f9:8e:fb:ba:83:48:49:
aa:5a:a1:51:ce:82:f2:42:e4:44:44:99:ff:b9:6e:
ad:10:fb:51:db:8a:93:0f:9b:08:98:04:93:81:ef:
c9:d4:82:7b:a6:85:f4:6f:60:32:ee:30:73:5b:69:
3b:43:7e:ad:e1:9b:9e:3c:58:32:29:75:26:70:3f:
c5:aa:18:45:3d:33:e5:ae:a0:fa:c0:94:cd:73:43:
61:99:e7:3e:16:18:13:19:4a:f3:0b:77:d3:9d:51:
dc:dd:b7:0e:30:4d:7c:4f:08:e6:6f:ad:e4:e0:98:
2f:8d:56:fb:d9:d4:08:e5:66:f9:e0:46:a0:e6:8c:
e5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:9D:D5:EA:6F:6D:A2:05:C4:31:BC:1A:01:D6:E7:9F:42:77:C4:DE
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS0.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.150.40.0/24
IPv6:
2a14:7580:50::/44
2a14:7580:100::/40
2a14:7580:3000::-2a14:7580:5fff:ffff:ffff:ffff:ffff:ffff
2a14:7580:9000::/36
2a14:7580:ff80::/44
2a14:7580:ffef::/48
2a14:7580:fff3::-2a14:7580:fff5:ffff:ffff:ffff:ffff:ffff
2a14:7580:fff8::-2a14:7580:fffa:ffff:ffff:ffff:ffff:ffff
2a14:7581:f10::/44
2a14:7581:fe0::/47
2a14:7581:fe6::/48
2a14:7581:fe8::/48
2a14:7581:fea::/48
2a14:7581:fec::/47
2a14:7581:fef::/48
2a14:7581:ff2::/48
2a14:7581:ff5::-2a14:7581:ff7:ffff:ffff:ffff:ffff:ffff
2a14:7581:ffa::/48
2a14:7581:ffc::/48
2a14:7581:ffe::/48
2a14:7581:3e00::/39
2a14:7581:9000::/38
2a14:7581:9700::/40
2a14:7581:9f00::/44
2a14:7581:9ff0::-2a14:7581:afff:ffff:ffff:ffff:ffff:ffff
2a14:7581:e000::/36
2a14:7582::-2a14:7582:2fff:ffff:ffff:ffff:ffff:ffff
2a14:7583:2000::/36
2a14:7583:8000::/36
2a14:7583:e300::/40
2a14:7583:f600::/40
2a14:7583:f800::/40
2a14:7584:3000::/36
2a14:7584:a000::/35
2a14:7586:a000::/36
Signature Algorithm: sha256WithRSAEncryption
76:c5:42:02:44:48:5c:47:ae:67:1c:8d:14:08:15:aa:a3:a9:
0d:9b:2e:82:f6:91:05:98:7d:38:5d:c6:8f:ba:68:52:d6:de:
a0:96:e5:a5:9f:61:99:a2:00:91:12:d3:3e:5b:14:06:09:90:
e7:45:7e:30:07:4d:40:79:83:74:86:65:e2:59:d1:fe:55:02:
84:94:04:02:5e:25:cc:1c:03:19:90:3f:89:27:72:3b:6e:f9:
9c:1b:82:a0:8e:7b:4a:8e:67:a8:3e:3b:1c:23:38:4c:7f:01:
eb:6c:e0:d7:d9:e7:f8:4b:fb:c3:16:ae:92:93:8d:89:60:89:
b6:c7:5a:60:47:05:c3:c2:a2:27:ac:54:43:d5:51:cd:db:53:
a7:5f:8b:7c:34:1e:ba:43:50:85:76:0e:e1:20:04:36:34:c9:
41:b4:f9:ce:75:22:e5:bb:17:7f:76:1c:75:b0:2a:9a:41:a4:
40:2e:3f:07:9a:30:fe:35:87:b2:69:f5:01:39:f4:39:6a:e7:
4c:c9:8c:ef:d7:aa:ef:b4:a8:37:4a:37:2c:44:fd:f3:76:41:
75:e5:2e:7e:ba:87:8b:63:51:3f:af:05:21:4a:7d:ef:b1:7d:
e5:ef:1b:6a:8a:48:2f:4e:b1:e0:f4:94:92:af:05:b8:04:4e:
f8:16:86:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 18:57:37 2026 by rpki-client