Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS0.roa
File: AS0.roa (raw, json)
Hash identifier: NAQP/OqfzkVUoq9Gnxtp1YyrtsV2BIhB/dCKsVqqVD0=
Subject key identifier: 7D:B8:FA:ED:FB:8D:CA:A4:A9:4D:C6:92:19:C7:DD:3A:27:1E:50:23
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 7860278F264B193C58D99799AFEFE59486FBB220
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS0.roa
Signing time: Sat 14 Nov 2026 08:00:17 +0000
ROA not before: Sat 14 Nov 2026 07:55:17 +0000
ROA not after: Sat 13 Nov 2027 08:00:17 +0000
asID: 0
IP address blocks: 193.150.40.0/24 maxlen: 24
2a14:7580:50::/44 maxlen: 44
2a14:7580:3000::/36 maxlen: 48
2a14:7580:4000::/36 maxlen: 48
2a14:7580:5000::/36 maxlen: 48
2a14:7580:8000::/36 maxlen: 48
2a14:7580:9000::/36 maxlen: 48
2a14:7580:e300::/40 maxlen: 48
2a14:7580:ffb0::/44 maxlen: 48
2a14:7580:ffe1::/48 maxlen: 48
2a14:7580:ffe2::/48 maxlen: 48
2a14:7580:ffe3::/48 maxlen: 48
2a14:7580:ffef::/48 maxlen: 48
2a14:7580:fff3::/48 maxlen: 48
2a14:7580:fff4::/48 maxlen: 48
2a14:7580:fff5::/48 maxlen: 48
2a14:7580:fff8::/48 maxlen: 48
2a14:7580:fff9::/48 maxlen: 48
2a14:7580:fffa::/48 maxlen: 48
2a14:7581:10::/44 maxlen: 48
2a14:7581:20::/44 maxlen: 48
2a14:7581:30::/48 maxlen: 48
2a14:7581:fe0::/48 maxlen: 48
2a14:7581:fe1::/48 maxlen: 48
2a14:7581:fe5::/48 maxlen: 48
2a14:7581:fe6::/48 maxlen: 48
2a14:7581:fe8::/48 maxlen: 48
2a14:7581:fea::/48 maxlen: 48
2a14:7581:fec::/48 maxlen: 48
2a14:7581:fed::/48 maxlen: 48
2a14:7581:fef::/48 maxlen: 48
2a14:7581:ff2::/48 maxlen: 48
2a14:7581:ff5::/48 maxlen: 48
2a14:7581:ff6::/48 maxlen: 48
2a14:7581:ff7::/48 maxlen: 48
2a14:7581:ffa::/48 maxlen: 48
2a14:7581:ffc::/48 maxlen: 48
2a14:7581:ffe::/48 maxlen: 48
2a14:7581:9000::/40 maxlen: 48
2a14:7581:9100::/40 maxlen: 48
2a14:7581:9200::/40 maxlen: 48
2a14:7581:9300::/40 maxlen: 48
2a14:7581:9ff0::/44 maxlen: 48
2a14:7581:a000::/36 maxlen: 48
2a14:7581:e000::/36 maxlen: 48
2a14:7582::/36 maxlen: 48
2a14:7582:1000::/36 maxlen: 48
2a14:7582:2000::/36 maxlen: 48
2a14:7582:3000::/36 maxlen: 48
2a14:7582:4000::/36 maxlen: 48
2a14:7582:5000::/36 maxlen: 48
2a14:7582:6000::/36 maxlen: 48
2a14:7582:7000::/36 maxlen: 48
2a14:7582:b000::/36 maxlen: 48
2a14:7583:2000::/36 maxlen: 48
2a14:7583:4000::/36 maxlen: 48
2a14:7583:8000::/36 maxlen: 48
2a14:7583:b000::/36 maxlen: 48
2a14:7583:c000::/36 maxlen: 48
2a14:7583:f600::/40 maxlen: 48
2a14:7583:f800::/40 maxlen: 48
2a14:7583:fc00::/40 maxlen: 48
2a14:7584::/36 maxlen: 48
2a14:7584:1000::/36 maxlen: 48
2a14:7584:3000::/36 maxlen: 48
2a14:7584:a000::/36 maxlen: 48
2a14:7584:b000::/36 maxlen: 48
2a14:7584:e000::/36 maxlen: 48
2a14:7586:a000::/36 maxlen: 48
2a14:7586:b000::/36 maxlen: 48
2a14:7586:c000::/36 maxlen: 48
2a14:7586:d000::/36 maxlen: 48
2a14:7586:e000::/36 maxlen: 48
2a14:7587::/32 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:60:27:8f:26:4b:19:3c:58:d9:97:99:af:ef:e5:94:86:fb:b2:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Nov 14 07:55:17 2026 GMT
Not After : Nov 13 08:00:17 2027 GMT
Subject: CN=7DB8FAEDFB8DCAA4A94DC69219C7DD3A271E5023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:84:cd:dd:36:b3:16:5c:25:56:14:1f:9e:fd:
b7:de:09:2f:3d:a5:3f:64:65:15:3e:07:4d:c1:f0:
d3:e5:ff:72:a1:55:ba:c9:20:93:73:4a:92:50:3c:
c0:1a:35:4b:d7:78:ff:d9:ab:fd:f7:06:b3:07:f5:
e9:88:3c:0f:6f:a3:2e:f5:ba:8b:09:bd:71:37:19:
27:be:ae:d1:9a:11:50:ae:a7:80:77:f6:91:bd:b0:
cd:65:42:72:3b:c2:9f:ee:f2:ad:08:56:c2:34:8c:
bd:8b:6a:9c:83:38:26:66:c5:ba:cc:16:eb:3c:32:
54:63:f2:e0:60:73:67:02:80:90:4d:40:c7:03:52:
fa:6e:02:46:7f:ee:81:65:8d:f2:eb:23:38:2a:2e:
a9:65:0f:da:45:1e:3d:87:b5:16:91:4a:17:18:50:
89:0e:00:20:cd:da:90:1f:ac:f5:b6:f1:de:9f:db:
9e:bf:09:90:1f:7a:33:b0:5a:65:31:9c:a8:ea:4e:
4b:10:40:c1:61:84:b9:be:89:f2:31:08:cb:ac:fd:
8e:ae:9d:0b:c8:d0:a9:64:ed:38:0a:4f:53:00:9a:
20:e0:23:38:ed:61:1f:58:d8:b3:3b:61:e5:41:28:
ad:d9:6d:ed:8b:28:a6:ae:07:19:f6:9c:90:74:b7:
1a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:B8:FA:ED:FB:8D:CA:A4:A9:4D:C6:92:19:C7:DD:3A:27:1E:50:23
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS0.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.150.40.0/24
IPv6:
2a14:7580:50::/44
2a14:7580:3000::-2a14:7580:5fff:ffff:ffff:ffff:ffff:ffff
2a14:7580:8000::/35
2a14:7580:e300::/40
2a14:7580:ffb0::/44
2a14:7580:ffe1::-2a14:7580:ffe3:ffff:ffff:ffff:ffff:ffff
2a14:7580:ffef::/48
2a14:7580:fff3::-2a14:7580:fff5:ffff:ffff:ffff:ffff:ffff
2a14:7580:fff8::-2a14:7580:fffa:ffff:ffff:ffff:ffff:ffff
2a14:7581:10::-2a14:7581:30:ffff:ffff:ffff:ffff:ffff
2a14:7581:fe0::/47
2a14:7581:fe5::-2a14:7581:fe6:ffff:ffff:ffff:ffff:ffff
2a14:7581:fe8::/48
2a14:7581:fea::/48
2a14:7581:fec::/47
2a14:7581:fef::/48
2a14:7581:ff2::/48
2a14:7581:ff5::-2a14:7581:ff7:ffff:ffff:ffff:ffff:ffff
2a14:7581:ffa::/48
2a14:7581:ffc::/48
2a14:7581:ffe::/48
2a14:7581:9000::/38
2a14:7581:9ff0::-2a14:7581:afff:ffff:ffff:ffff:ffff:ffff
2a14:7581:e000::/36
2a14:7582::/33
2a14:7582:b000::/36
2a14:7583:2000::/36
2a14:7583:4000::/36
2a14:7583:8000::/36
2a14:7583:b000::-2a14:7583:cfff:ffff:ffff:ffff:ffff:ffff
2a14:7583:f600::/40
2a14:7583:f800::/40
2a14:7583:fc00::/40
2a14:7584::/35
2a14:7584:3000::/36
2a14:7584:a000::/35
2a14:7584:e000::/36
2a14:7586:a000::-2a14:7586:efff:ffff:ffff:ffff:ffff:ffff
2a14:7587::/32
Signature Algorithm: sha256WithRSAEncryption
5d:34:8d:71:1c:f0:cc:fe:ac:92:e7:9c:60:12:bb:85:7f:16:
96:e7:28:55:1e:00:4a:71:94:84:e1:4d:f1:06:30:4c:c8:e7:
af:05:03:18:ed:75:97:44:7b:b9:38:cc:2b:68:80:07:04:92:
1c:79:83:58:44:bf:3d:2a:1e:39:b8:6b:c0:b3:a0:0c:ac:f2:
01:c6:94:66:98:08:6c:a1:e3:a7:32:a6:87:da:ca:7b:77:ce:
5f:4c:79:23:da:37:ba:1f:b6:2a:6e:b8:73:6b:37:27:25:ee:
67:46:6b:82:c6:e8:90:95:1b:1e:58:05:4b:74:f3:97:2e:78:
ea:1b:9a:cd:be:ba:8f:4c:4f:7a:a3:0c:00:d0:fb:1e:cf:81:
27:94:2e:8b:0e:3a:c8:e4:2e:c5:67:18:91:fc:b0:e6:74:b9:
26:5b:bf:e3:e5:67:69:21:ab:12:29:3e:49:31:58:3d:87:5b:
d0:81:18:b4:36:7d:8f:3e:a4:f3:eb:e3:87:70:0a:0c:9c:79:
01:3a:54:2a:57:3f:4f:8f:38:d7:90:42:5c:e9:62:37:d9:b1:
86:ac:7a:fa:13:94:7b:65:24:1a:55:d0:ed:49:0b:22:70:eb:
27:15:68:3f:67:b0:cd:0a:5b:f7:bd:cc:9c:1a:1d:db:14:ad:
e0:62:8c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:42:51 2026 by rpki-client