Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3135322e38392e3132352e302f32342d3234203d3e20313734.roa
File: 3135322e38392e3132352e302f32342d3234203d3e20313734.roa (raw, json)
Hash identifier: dnS9ls2I7hJu3iOBUK7tysebTvjYpifco1z9tk0wZaY=
Subject key identifier: DF:5D:65:B3:76:EF:36:F0:31:74:16:5F:64:0D:26:E9:53:19:DC:DD
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 2019C2E00416ADA75F4FE213C7C9E14AC6C96D1A
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3135322e38392e3132352e302f32342d3234203d3e20313734.roa
Signing time: Fri 25 Sep 2026 09:29:25 +0000
ROA not before: Fri 25 Sep 2026 09:24:25 +0000
ROA not after: Fri 24 Sep 2027 09:29:25 +0000
asID: 174
IP address blocks: 152.89.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:50:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:19:c2:e0:04:16:ad:a7:5f:4f:e2:13:c7:c9:e1:4a:c6:c9:6d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Sep 25 09:24:25 2026 GMT
Not After : Sep 24 09:29:25 2027 GMT
Subject: CN=DF5D65B376EF36F03174165F640D26E95319DCDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0f:8b:75:b3:9d:ee:ce:2a:15:54:93:de:59:
78:92:88:46:86:a4:22:cd:fa:99:7c:11:46:45:b4:
b4:9a:af:4e:11:83:b9:b2:a1:28:eb:c3:2d:1e:06:
b5:da:7b:48:8d:24:77:73:dc:65:4c:da:51:50:f4:
91:8c:06:72:c9:23:af:10:a1:53:de:f3:e0:b6:ca:
54:45:00:36:bf:ee:d2:a5:a0:1f:48:c8:cd:15:6e:
4c:b1:ec:b8:4c:14:34:3a:22:b6:8c:7a:de:e7:95:
11:6b:0f:b7:c1:bc:bc:06:4d:c8:ad:10:bf:05:87:
3f:8e:70:60:4e:9a:73:7c:21:00:d4:2a:c2:19:f0:
d8:72:a8:52:4d:bd:7f:f5:2f:e3:a3:d7:75:6d:67:
30:ef:59:c4:9c:7f:32:5d:3f:6a:95:02:a5:2d:0b:
ac:37:d2:b9:21:80:bd:90:f6:2e:50:72:e9:4c:e9:
c6:3e:08:5a:bd:b3:1d:74:11:7d:7b:85:4c:0e:42:
a1:86:f8:84:7e:69:32:4a:20:28:39:dd:f9:33:ce:
3c:f8:48:b8:75:97:7b:72:c5:43:ec:fd:4c:50:9d:
88:89:2d:d6:01:ef:a6:22:23:f0:37:97:90:ed:b3:
8c:ce:4b:98:c6:6f:cd:87:28:e7:f4:3d:15:7f:3e:
5e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:5D:65:B3:76:EF:36:F0:31:74:16:5F:64:0D:26:E9:53:19:DC:DD
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3135322e38392e3132352e302f32342d3234203d3e20313734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.125.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:61:a9:c4:b4:67:de:50:0f:c6:d2:61:de:90:ee:04:8d:c7:
cf:cd:d8:35:22:58:0f:42:e0:10:29:d6:6c:66:0d:8f:75:73:
e8:b2:bc:c6:ad:fb:90:f6:6b:c6:79:63:88:f3:44:05:1b:97:
27:b6:9c:0b:69:33:c6:a8:1a:4a:c0:15:37:2c:34:fe:45:67:
94:52:27:0c:6f:77:0d:5a:c4:9c:2d:a6:2b:eb:29:81:5e:d4:
67:62:b1:88:e6:b6:c2:8a:51:ed:a4:8f:01:96:aa:9c:fe:de:
7e:97:3c:3a:f8:68:0b:50:51:d7:1f:52:7c:4e:c3:b2:51:65:
cf:aa:d9:ea:e1:05:f4:ec:39:b1:ca:20:44:16:bb:5a:1d:50:
c8:7b:9c:f1:c5:96:8e:d8:80:5e:64:6c:70:70:7f:4f:5e:6c:
6a:7a:5f:e8:6e:a0:35:1e:a5:43:f8:8a:59:c4:b7:99:b1:a3:
b0:02:3a:5b:ac:6f:0d:01:91:fa:98:81:e5:90:ca:3e:c3:13:
42:97:cc:d7:4d:22:71:7e:e9:54:31:31:12:88:fc:0f:8e:39:
32:32:96:ce:6c:ce:57:91:ad:51:47:53:47:67:20:32:70:af:
19:ac:52:55:86:b9:ca:fe:89:f3:2a:0c:36:1b:29:48:8b:ad:
e9:16:e9:00
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUIBnC4AQWradfT+ITx8nhSsbJbRowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj
MjMxM2EzYTAeFw0yNjA5MjUwOTI0MjVaFw0yNzA5MjQwOTI5MjVaMDMxMTAvBgNV
BAMTKERGNUQ2NUIzNzZFRjM2RjAzMTc0MTY1RjY0MEQyNkU5NTMxOURDREQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrD4t1s53uzioVVJPeWXiSiEaG
pCLN+pl8EUZFtLSar04Rg7myoSjrwy0eBrXae0iNJHdz3GVM2lFQ9JGMBnLJI68Q
oVPe8+C2ylRFADa/7tKloB9IyM0Vbkyx7LhMFDQ6IraMet7nlRFrD7fBvLwGTcit
EL8Fhz+OcGBOmnN8IQDUKsIZ8NhyqFJNvX/1L+Oj13VtZzDvWcScfzJdP2qVAqUt
C6w30rkhgL2Q9i5QculM6cY+CFq9sx10EX17hUwOQqGG+IR+aTJKICg53fkzzjz4
SLh1l3tyxUPs/UxQnYiJLdYB76YiI/A3l5Dts4zOS5jGb82HKOf0PRV/Pl75AgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQU311ls3bvNvAxdBZfZA0m6VMZ3N0wHwYDVR0j
BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J
eE9qby5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzEzNTMyMmUzODM5MmUzMTMy
MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM3MzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACYWX0w
DQYJKoZIhvcNAQELBQADggEBAAthqcS0Z95QD8bSYd6Q7gSNx8/N2DUiWA9C4BAp
1mxmDY91c+iyvMat+5D2a8Z5Y4jzRAUblye2nAtpM8aoGkrAFTcsNP5FZ5RSJwxv
dw1axJwtpivrKYFe1GdisYjmtsKKUe2kjwGWqpz+3n6XPDr4aAtQUdcfUnxOw7JR
Zc+q2erhBfTsObHKIEQWu1odUMh7nPHFlo7YgF5kbHBwf09ebGp6X+huoDUepUP4
ilnEt5mxo7ACOlusbw0BkfqYgeWQyj7DE0KXzNdNInF+6VQxMRKI/A+OOTIyls5s
zleRrVFHU0dnIDJwrxmsUlWGucr+ifMqDDYbKUiLrekW6QA=
-----END CERTIFICATE-----
Generated at Sat Sep 26 05:03:38 2026 by rpki-client