Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36352e302f32342d3234203d3e20313337343039.roa
File: 3231332e3133392e36352e302f32342d3234203d3e20313337343039.roa (raw, json)
Hash identifier: 98cTJAfKgRxXy+8me2IlHy/9WFu3NTMiKJWvj2EAs8U=
Subject key identifier: 32:CC:A8:4E:14:41:66:D7:89:7F:A4:75:36:2C:A6:C3:F4:EE:5E:6F
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 7DDBD5BB5B6B4DE83D7A1DC3CD3170861B6FF129
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36352e302f32342d3234203d3e20313337343039.roa
Signing time: Tue 22 Sep 2026 05:10:16 +0000
ROA not before: Tue 22 Sep 2026 05:05:16 +0000
ROA not after: Tue 21 Sep 2027 05:10:16 +0000
asID: 137409
IP address blocks: 213.139.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:db:d5:bb:5b:6b:4d:e8:3d:7a:1d:c3:cd:31:70:86:1b:6f:f1:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Sep 22 05:05:16 2026 GMT
Not After : Sep 21 05:10:16 2027 GMT
Subject: CN=32CCA84E144166D7897FA475362CA6C3F4EE5E6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d0:02:c3:21:d0:da:6d:74:0b:95:8d:d7:36:
c5:49:04:3c:93:3c:41:f7:c8:94:22:3f:d3:e6:dd:
86:49:a4:48:2f:be:6f:d5:25:eb:40:e6:68:8b:54:
d5:e9:ce:f7:e9:df:a1:8b:11:8d:64:4d:6c:9f:97:
e4:b0:e6:4a:f6:f7:6b:e5:54:c6:3c:f5:bd:4f:4b:
51:a7:fa:56:ec:4f:b2:11:04:5f:c8:4a:37:dd:f1:
d6:e7:12:6f:79:c6:eb:a7:58:bb:9a:96:b3:6b:98:
01:4c:43:68:20:05:fd:90:3e:89:0d:86:d0:82:25:
5f:33:05:6b:67:19:57:0e:bf:eb:02:e9:64:a2:ee:
4e:ac:31:1a:2e:29:29:12:12:6a:3b:42:9d:17:16:
bc:6c:48:99:31:d8:ab:c8:7f:67:2e:3c:ca:1d:59:
f6:f9:69:4f:d8:99:87:40:91:a0:81:e4:61:80:79:
68:2e:c0:66:b4:14:72:62:b0:e5:a4:ff:6e:ac:09:
ab:c5:ee:ff:22:23:58:47:90:2a:35:02:f7:68:d9:
f6:77:64:2a:40:39:4c:61:ad:99:7b:68:1a:3b:af:
33:6d:d4:a4:07:08:f9:04:1c:df:91:7f:c6:30:0f:
cb:1c:ff:c6:31:4b:7d:f8:15:fa:e9:5b:87:a4:3c:
03:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:CC:A8:4E:14:41:66:D7:89:7F:A4:75:36:2C:A6:C3:F4:EE:5E:6F
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36352e302f32342d3234203d3e20313337343039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.65.0/24
Signature Algorithm: sha256WithRSAEncryption
91:83:20:d1:0c:87:44:22:82:f1:26:5d:f3:cb:0e:1e:26:33:
79:fe:73:fc:e2:32:6b:3d:70:38:2f:88:3d:e6:3d:ae:e0:1f:
00:78:1d:91:63:7c:fe:5f:60:59:bc:59:c8:c7:7a:f1:52:de:
44:93:48:6b:82:b2:dc:3c:2a:11:40:18:8c:be:09:ab:57:ce:
6c:5b:59:b5:3d:eb:6e:fd:fb:fa:b0:1e:0a:61:58:7a:c4:37:
6c:4d:f1:45:d5:62:9e:b1:3c:80:66:fb:db:70:f6:fa:f8:77:
ff:0f:5c:1f:2c:10:8e:a4:ad:f6:f6:78:74:95:0d:e2:d2:e8:
46:22:0a:2f:60:8b:40:a8:99:05:7a:80:2c:50:7b:30:a5:3d:
83:d8:0e:be:d2:0d:48:ce:79:ef:15:c5:8e:89:e2:35:87:7e:
3e:3a:46:98:0d:04:0a:85:c8:65:7f:db:c2:cb:42:bd:88:dc:
6f:b1:e3:38:a4:8e:f6:45:b0:35:88:cb:80:24:26:8f:34:63:
b7:c3:37:60:a5:fc:31:4a:df:c5:61:7b:d1:48:4f:b6:49:bd:
4e:69:b0:e5:9f:c6:a2:11:64:09:f6:a3:64:15:82:66:27:05:
2a:48:8f:66:0a:20:17:05:db:8b:7e:5a:49:bd:23:b3:53:9c:
b7:5b:59:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:16:57 2026 by rpki-client