Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3135322e38392e3132342e302f32342d3234203d3e20323133373834.roa
File: 3135322e38392e3132342e302f32342d3234203d3e20323133373834.roa (raw, json)
Hash identifier: PHnIyT9cMpVL1nwOa2d4WNibSOsi6x/HYA6po+l59SI=
Subject key identifier: 3E:3A:D6:FE:AF:1A:A6:63:3E:47:9C:BB:C2:2A:DC:E3:B1:2C:B8:A9
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 0A48F6118794A6091C2EB225228ED1BAB5B1DB6E
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3135322e38392e3132342e302f32342d3234203d3e20323133373834.roa
Signing time: Thu 29 Oct 2026 15:05:49 +0000
ROA not before: Thu 29 Oct 2026 15:00:49 +0000
ROA not after: Thu 28 Oct 2027 15:05:49 +0000
asID: 213784
IP address blocks: 152.89.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 22:05:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:48:f6:11:87:94:a6:09:1c:2e:b2:25:22:8e:d1:ba:b5:b1:db:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Oct 29 15:00:49 2026 GMT
Not After : Oct 28 15:05:49 2027 GMT
Subject: CN=3E3AD6FEAF1AA6633E479CBBC22ADCE3B12CB8A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ae:1d:ec:2e:24:e1:20:37:63:0e:b8:16:a9:
e7:d5:7c:b9:70:c6:13:5b:75:f0:37:3b:f4:b6:cb:
c6:4a:d0:e4:82:4d:3f:f0:f1:97:b8:17:a0:2f:dc:
bb:b9:06:d9:d5:3e:2c:99:a0:7a:1d:bf:8a:43:57:
4b:d8:ca:21:73:a2:e4:27:79:22:d5:78:67:3e:f8:
f5:4d:c1:d4:6a:5b:16:f5:5f:96:e7:f1:27:d0:7f:
d4:70:c0:ce:7d:6d:00:77:2e:4e:e0:83:87:d9:2b:
4c:35:d6:04:c8:5e:47:b7:f2:ac:f6:1d:17:16:89:
33:48:2a:5b:78:fb:70:33:d5:34:ce:b1:0e:fa:74:
d0:94:88:41:84:db:c7:bf:87:fc:64:bc:98:d0:c8:
c1:ba:6e:70:bd:13:71:b8:2b:1d:01:d7:58:02:04:
be:6f:93:62:74:f3:56:9b:db:04:55:70:3f:73:62:
5e:cf:f2:cf:90:ce:96:64:7d:87:50:17:14:79:a4:
e2:74:19:db:43:df:93:99:d1:4f:53:84:51:f1:fb:
1f:75:e3:33:31:9d:c3:8b:a0:f7:67:be:a9:8f:b2:
56:ec:75:e1:72:56:13:41:8b:0f:ea:a2:fc:9b:3a:
13:61:35:d1:31:7d:67:1a:9d:92:27:d5:05:e2:93:
5d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:3A:D6:FE:AF:1A:A6:63:3E:47:9C:BB:C2:2A:DC:E3:B1:2C:B8:A9
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3135322e38392e3132342e302f32342d3234203d3e20323133373834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.124.0/24
Signature Algorithm: sha256WithRSAEncryption
44:44:3f:72:0f:eb:6f:c4:3e:4f:f4:59:b8:8b:6a:d4:89:56:
b0:36:9a:c1:1b:3c:e6:ef:23:c2:d0:d2:c2:ea:2e:f7:30:87:
e5:63:8e:78:97:b0:75:46:87:21:99:cf:4a:54:d1:1d:53:26:
ef:be:3f:ec:66:b9:09:c9:2e:ee:37:9d:c1:b9:35:52:57:88:
7e:f1:47:5e:f9:7f:ce:bb:af:32:3f:94:d4:b5:ee:a9:eb:98:
34:89:4f:f4:18:41:0e:89:34:af:d9:54:40:01:a4:8d:10:07:
be:99:08:cb:48:29:6e:27:cf:de:40:d5:fc:0d:49:7d:f0:af:
3e:50:8a:bb:45:9c:7c:98:34:46:fe:27:6d:f1:94:cf:95:59:
2b:0f:55:50:58:57:50:58:39:8c:1d:37:c0:f0:f5:a7:b5:f7:
b9:f3:a1:d4:a1:18:52:e8:19:bd:01:72:4f:b2:91:79:5c:4c:
36:c1:f8:96:97:3b:6e:bc:df:54:bb:11:6d:d5:f0:b1:a6:79:
d9:af:4b:0d:98:eb:99:00:63:86:c2:d8:46:27:2f:96:1d:66:
37:c1:12:c0:2d:f4:37:e1:28:15:27:8d:13:3e:93:df:db:8c:
a3:61:37:49:7d:27:53:28:82:21:1d:d8:f4:c7:23:39:0f:53:
8e:6c:5f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:34:50 2026 by rpki-client