Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36342e302f32342d3234203d3e2039303039.roa
File: 3231332e3133392e36342e302f32342d3234203d3e2039303039.roa (raw, json)
Hash identifier: r1pjD687zCx4FmCuXlGB5h73ScKoFYopGKhXlE6KUfY=
Subject key identifier: 30:EC:47:EF:34:87:9B:C4:65:3E:68:B8:3D:7E:80:B7:26:8A:EF:A1
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 4FB557145B46903841453A9FF8DFB101F613065B
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36342e302f32342d3234203d3e2039303039.roa
Signing time: Thu 25 Sep 2025 11:55:07 +0000
ROA not before: Thu 25 Sep 2025 11:50:07 +0000
ROA not after: Thu 24 Sep 2026 11:55:07 +0000
asID: 9009
IP address blocks: 213.139.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:b5:57:14:5b:46:90:38:41:45:3a:9f:f8:df:b1:01:f6:13:06:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Sep 25 11:50:07 2025 GMT
Not After : Sep 24 11:55:07 2026 GMT
Subject: CN=30EC47EF34879BC4653E68B83D7E80B7268AEFA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:06:88:6a:20:35:ea:ee:4c:01:6a:99:e0:c8:
3c:ba:6b:7e:69:e6:27:ab:98:65:1e:51:32:29:63:
65:5b:32:4f:71:1a:0b:96:5b:9c:5c:59:5d:9e:30:
c0:f2:bd:e5:64:68:93:10:71:f7:d6:35:e6:26:67:
32:53:8c:e6:24:04:a8:82:af:50:f8:82:58:d2:03:
fe:df:7c:f8:1c:50:be:39:f8:e9:cc:f1:73:24:4e:
fc:16:c9:53:d3:2b:a1:22:e3:05:39:5b:c1:b6:c7:
1e:ab:9e:9b:ef:1b:54:fa:d8:11:79:51:57:8c:8d:
1d:c2:37:8c:9c:66:d7:04:ed:e9:ee:a5:be:f5:42:
43:02:0a:21:23:b3:95:af:8e:be:92:7a:38:f3:5f:
4b:ab:68:1f:4b:14:a9:01:24:71:05:6f:7c:b3:62:
94:36:65:ed:7a:06:c4:5b:aa:44:96:cf:26:94:ac:
16:61:7f:0b:ba:e6:ad:3e:15:06:c2:a4:f2:6c:f2:
7c:a3:0e:01:89:53:e4:f3:e9:3d:0b:e5:b1:40:68:
0f:20:5a:37:5e:b6:3f:0a:e2:39:25:3f:f6:8e:c1:
09:a0:2d:9d:6b:ca:1d:f8:b6:11:ba:80:b2:4e:ec:
37:62:a7:eb:f4:b4:17:8d:69:97:16:68:db:c8:bc:
4a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:EC:47:EF:34:87:9B:C4:65:3E:68:B8:3D:7E:80:B7:26:8A:EF:A1
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36342e302f32342d3234203d3e2039303039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.64.0/24
Signature Algorithm: sha256WithRSAEncryption
05:6f:c9:52:3e:19:e4:16:e0:e6:a7:a7:22:c2:ac:dc:a6:67:
ea:20:e8:3f:84:9c:b1:d2:1a:13:0a:6f:d6:7b:48:e8:3e:2a:
55:0d:f1:46:59:44:5e:6d:9d:42:cb:d4:a4:f5:ac:0e:d0:af:
58:d3:a8:d2:54:24:80:6e:8b:15:0a:8b:f8:2f:db:39:b7:0b:
b4:72:f1:61:e0:a2:5c:93:a6:cb:72:2f:22:20:fb:c8:15:48:
b7:37:22:db:c7:0c:3e:af:97:1b:8d:43:0b:51:33:c8:35:f7:
97:7c:a7:8f:eb:90:8e:0e:be:66:97:a3:e9:7b:ba:af:bc:59:
d0:d3:86:e2:e4:1b:58:ba:9f:da:5a:8b:46:92:fc:15:f0:8d:
3f:17:20:ac:3e:85:c3:da:8b:c7:6d:73:6f:e9:7d:b5:64:bd:
1e:d9:48:52:83:33:db:58:f7:02:45:d1:f8:d1:47:05:9c:c1:
c1:cf:8c:b6:33:f8:b0:a3:5b:ca:38:40:d9:e6:80:54:bb:95:
d8:9a:11:fa:b9:b8:8d:c2:86:e9:f4:4f:c9:a0:7a:dc:b6:01:
2e:61:6b:7e:e2:85:07:20:1c:e0:d5:16:35:a2:cf:a3:03:4c:
ad:af:45:e5:cc:c6:5f:ae:5f:ad:28:b1:4f:de:31:43:09:82:
4d:f8:1b:2b
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUT7VXFFtGkDhBRTqf+N+xAfYTBlswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjY4M2YyZWI1MGM1OTk5YTc3NDU2ZTg4MjY4MzE2MDlk
NDhjN2QzZTAeFw0yNTA5MjUxMTUwMDdaFw0yNjA5MjQxMTU1MDdaMDMxMTAvBgNV
BAMTKDMwRUM0N0VGMzQ4NzlCQzQ2NTNFNjhCODNEN0U4MEI3MjY4QUVGQTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0BohqIDXq7kwBapngyDy6a35p
5iermGUeUTIpY2VbMk9xGguWW5xcWV2eMMDyveVkaJMQcffWNeYmZzJTjOYkBKiC
r1D4gljSA/7ffPgcUL45+OnM8XMkTvwWyVPTK6Ei4wU5W8G2xx6rnpvvG1T62BF5
UVeMjR3CN4ycZtcE7enupb71QkMCCiEjs5Wvjr6SejjzX0uraB9LFKkBJHEFb3yz
YpQ2Ze16BsRbqkSWzyaUrBZhfwu65q0+FQbCpPJs8nyjDgGJU+Tz6T0L5bFAaA8g
Wjdetj8K4jklP/aOwQmgLZ1ryh34thG6gLJO7Ddip+v0tBeNaZcWaNvIvEo3AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUMOxH7zSHm8RlPmi4PX6AtyaK76EwHwYDVR0j
BBgwFoAUtoPy61DFmZp3RW6IJoMWCdSMfT4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTAxYzE0ZmItYjY2MC00ODlkLTllOWYtOTQwMmU5ZTJj
MmUyLzAvQjY4M0YyRUI1MEM1OTk5QTc3NDU2RTg4MjY4MzE2MDlENDhDN0QzRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3RvUHk2MURGbVpwM1JXNklKb01XQ2RT
TWZUNC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTAxYzE0ZmIt
YjY2MC00ODlkLTllOWYtOTQwMmU5ZTJjMmUyLzAvMzIzMTMzMmUzMTMzMzkyZTM2
MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzOTMwMzAzOS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANWL
QDANBgkqhkiG9w0BAQsFAAOCAQEABW/JUj4Z5Bbg5qenIsKs3KZn6iDoP4ScsdIa
Ewpv1ntI6D4qVQ3xRllEXm2dQsvUpPWsDtCvWNOo0lQkgG6LFQqL+C/bObcLtHLx
YeCiXJOmy3IvIiD7yBVItzci28cMPq+XG41DC1EzyDX3l3ynj+uQjg6+Zpej6Xu6
r7xZ0NOG4uQbWLqf2lqLRpL8FfCNPxcgrD6Fw9qLx21zb+l9tWS9HtlIUoMz21j3
AkXR+NFHBZzBwc+MtjP4sKNbyjhA2eaAVLuV2JoR+rm4jcKG6fRPyaB63LYBLmFr
fuKFByAc4NUWNaLPowNMra9F5czGX65frSixT94xQwmCTfgbKw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:26:41 2025 by rpki-client