Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3135322e38392e3132362e302f32342d3234203d3e20383334.roa
File: 3135322e38392e3132362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: t6b8CZ0rNbRr1Bh86PThjyxnNpHH49zcLNUqMchGmaE=
Subject key identifier: 1A:A9:DA:B8:03:36:DF:59:49:70:15:D5:E8:BA:1B:3D:8B:AC:6A:2C
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 614880D337FA4E51E6FC5E31A38A427361768B29
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3135322e38392e3132362e302f32342d3234203d3e20383334.roa
Signing time: Wed 18 Mar 2026 07:39:03 +0000
ROA not before: Wed 18 Mar 2026 07:34:03 +0000
ROA not after: Wed 17 Mar 2027 07:39:03 +0000
asID: 834
IP address blocks: 152.89.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:48:80:d3:37:fa:4e:51:e6:fc:5e:31:a3:8a:42:73:61:76:8b:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Mar 18 07:34:03 2026 GMT
Not After : Mar 17 07:39:03 2027 GMT
Subject: CN=1AA9DAB80336DF59497015D5E8BA1B3D8BAC6A2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9f:cb:46:04:36:02:11:22:18:23:d7:71:1f:
9d:29:b6:bb:17:66:67:98:db:19:c2:8d:e3:0b:61:
ae:e4:55:2f:1e:4d:42:50:de:9b:ab:ab:d7:40:88:
dd:eb:20:5f:25:a6:02:5e:18:17:dc:b9:1a:5b:c8:
da:d6:fa:29:36:ad:3a:87:77:b8:cb:1c:24:dd:f8:
b3:41:aa:5f:37:21:21:12:ad:96:3f:7a:85:98:0c:
aa:e7:0f:e3:32:73:e5:a1:0c:87:86:12:bb:e3:b2:
a4:9f:4c:8e:7a:62:b1:8d:31:b4:a8:cb:2b:22:a9:
99:54:b0:ea:2e:2f:76:92:9e:c4:3a:d3:cc:e0:87:
dd:54:cf:95:c1:84:df:95:b0:92:17:8d:d6:ad:d3:
65:ff:66:8d:af:39:5d:10:fa:da:a8:10:c0:bc:20:
39:69:b7:ae:46:b2:f2:38:28:d7:27:9d:48:08:ae:
6b:3f:cb:33:50:48:49:36:31:ac:78:55:c8:bb:25:
9a:aa:86:ad:2c:99:ab:1a:dc:89:23:01:d8:a0:17:
24:d0:e9:f6:a1:09:d8:aa:8a:0d:05:b3:91:3d:a9:
99:24:e9:65:a3:d1:fc:70:f5:97:7b:0b:e5:23:62:
db:7b:c2:36:cb:d6:30:15:e9:fc:c7:f9:21:65:ff:
37:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A9:DA:B8:03:36:DF:59:49:70:15:D5:E8:BA:1B:3D:8B:AC:6A:2C
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3135322e38392e3132362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.126.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:bf:b5:99:d2:1f:db:cc:3d:55:45:bc:13:ed:bc:c1:1c:f8:
58:b2:99:88:cd:1a:9e:06:ea:ed:a9:b1:52:71:63:3f:b5:4d:
71:18:b2:d9:c9:49:81:b9:93:0a:d0:37:b3:10:2d:fe:49:37:
54:67:76:41:60:a5:4d:85:7c:86:a2:bf:20:9e:76:38:02:a3:
fb:67:7d:01:ac:f4:c6:a9:4e:ec:58:ee:3e:73:18:7e:99:a9:
47:b9:44:fd:df:0e:e5:88:e3:23:99:24:06:7e:72:e1:12:3c:
29:a8:88:95:ea:19:2d:de:d6:1f:f6:b1:7b:31:0a:3b:64:f9:
84:31:6d:12:e0:f1:07:be:ae:3f:30:cb:d9:57:62:58:4b:d1:
f4:e0:3b:b0:3c:1a:db:56:a3:10:ed:02:81:33:b7:6a:84:86:
cc:be:4c:09:0d:8c:7c:83:6e:fc:68:60:1b:41:c0:55:bc:5d:
84:08:66:11:d9:1a:71:43:c9:dd:25:5e:e1:d0:ea:ac:e0:81:
a0:14:77:e2:c4:a0:b5:28:4d:5c:e1:11:12:f4:e3:27:a8:0f:
0a:be:bb:24:ba:35:6d:16:0b:46:26:4c:6e:3a:cb:52:08:db:
de:37:01:2d:30:9b:1f:3c:73:a4:61:10:1a:4b:6c:cf:45:c7:
00:ab:7c:c6
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUYUiA0zf6TlHm/F4xo4pCc2F2iykwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj
MjMxM2EzYTAeFw0yNjAzMTgwNzM0MDNaFw0yNzAzMTcwNzM5MDNaMDMxMTAvBgNV
BAMTKDFBQTlEQUI4MDMzNkRGNTk0OTcwMTVENUU4QkExQjNEOEJBQzZBMkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNn8tGBDYCESIYI9dxH50ptrsX
ZmeY2xnCjeMLYa7kVS8eTUJQ3purq9dAiN3rIF8lpgJeGBfcuRpbyNrW+ik2rTqH
d7jLHCTd+LNBql83ISESrZY/eoWYDKrnD+Myc+WhDIeGErvjsqSfTI56YrGNMbSo
yysiqZlUsOouL3aSnsQ608zgh91Uz5XBhN+VsJIXjdat02X/Zo2vOV0Q+tqoEMC8
IDlpt65GsvI4KNcnnUgIrms/yzNQSEk2Max4Vci7JZqqhq0smasa3IkjAdigFyTQ
6fahCdiqig0Fs5E9qZkk6WWj0fxw9Zd7C+UjYtt7wjbL1jAV6fzH+SFl/zdLAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUGqnauAM231lJcBXV6LobPYusaiwwHwYDVR0j
BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J
eE9qby5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzEzNTMyMmUzODM5MmUzMTMy
MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACYWX4w
DQYJKoZIhvcNAQELBQADggEBAH+/tZnSH9vMPVVFvBPtvMEc+FiymYjNGp4G6u2p
sVJxYz+1TXEYstnJSYG5kwrQN7MQLf5JN1RndkFgpU2FfIaivyCedjgCo/tnfQGs
9MapTuxY7j5zGH6ZqUe5RP3fDuWI4yOZJAZ+cuESPCmoiJXqGS3e1h/2sXsxCjtk
+YQxbRLg8Qe+rj8wy9lXYlhL0fTgO7A8GttWoxDtAoEzt2qEhsy+TAkNjHyDbvxo
YBtBwFW8XYQIZhHZGnFDyd0lXuHQ6qzggaAUd+LEoLUoTVzhERL04yeoDwq+uyS6
NW0WC0YmTG46y1II2943AS0wmx88c6RhEBpLbM9FxwCrfMY=
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:50:42 2026 by rpki-client