Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38322e302f32342d3234203d3e2039303039.roa
File: 3231332e3133392e38322e302f32342d3234203d3e2039303039.roa (raw, json)
Hash identifier: OH/dvNiYWhw/SVHGvLSGkBdK+Kv4T+yJzETwI0tfRWM=
Subject key identifier: 40:F5:8A:55:AF:34:2A:15:DA:DA:11:21:F4:46:33:4A:0D:9B:EF:DE
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 3F7F30EEA0A48BFFBE575BCDA02A876050A852E4
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38322e302f32342d3234203d3e2039303039.roa
Signing time: Fri 20 Mar 2026 16:46:50 +0000
ROA not before: Fri 20 Mar 2026 16:41:50 +0000
ROA not after: Fri 19 Mar 2027 16:46:50 +0000
asID: 9009
IP address blocks: 213.139.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:7f:30:ee:a0:a4:8b:ff:be:57:5b:cd:a0:2a:87:60:50:a8:52:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Mar 20 16:41:50 2026 GMT
Not After : Mar 19 16:46:50 2027 GMT
Subject: CN=40F58A55AF342A15DADA1121F446334A0D9BEFDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f0:cb:ae:db:a4:c4:b6:82:dc:b7:12:ec:6c:
d5:f3:66:84:0f:39:64:b0:9a:db:ce:c3:6c:32:d5:
f4:68:5d:d2:fe:5f:4c:04:ef:9a:c0:0b:0c:65:7a:
75:12:21:31:ea:6e:44:76:74:c5:9d:e6:a9:0b:9a:
09:57:fc:40:4d:5d:e9:44:a4:78:79:ad:63:2c:46:
35:16:99:4e:86:47:c1:4e:cb:13:a8:6d:76:a5:f4:
b6:3e:c6:36:24:5c:ee:64:1e:00:7d:91:f5:6f:c3:
9a:fa:44:3c:ab:b6:90:9d:7e:fc:9c:9a:8a:94:b5:
b2:b6:0a:fe:2e:3f:52:17:39:97:81:32:d0:19:0a:
17:69:ee:49:c5:5a:b6:ae:8f:8c:70:50:39:a3:89:
1b:43:43:ba:ee:96:8b:de:62:30:cc:93:bb:63:00:
42:e5:ab:33:68:7f:18:44:e6:74:1f:fd:09:6a:f7:
1a:aa:12:b0:39:2c:c7:cc:be:1d:be:4a:4e:0b:15:
c1:ea:77:80:19:c5:0c:93:46:ac:53:98:13:1a:b4:
f9:1c:10:c1:3a:45:c7:33:2d:af:a3:15:5f:b0:3e:
37:cc:d0:05:ef:3f:a1:00:5b:d7:8f:5b:04:bb:f0:
4f:60:4c:c9:91:5e:96:23:54:56:52:d9:1a:15:a9:
db:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F5:8A:55:AF:34:2A:15:DA:DA:11:21:F4:46:33:4A:0D:9B:EF:DE
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38322e302f32342d3234203d3e2039303039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.82.0/24
Signature Algorithm: sha256WithRSAEncryption
85:97:10:40:e6:a5:5e:6d:1c:64:16:f3:a3:fa:33:bb:7f:58:
03:88:98:af:08:a9:b5:58:34:5f:49:1a:e2:ba:4a:35:e3:af:
52:dd:f9:2b:38:d1:1f:fc:1e:53:96:d6:ad:7d:56:e7:62:39:
ac:b7:a3:d3:5c:b1:1d:05:23:ff:18:9a:7d:4b:db:82:6d:59:
01:78:bb:92:2f:45:e8:1b:a2:bf:17:63:52:f1:9a:ce:f7:23:
7d:b5:62:20:de:42:bf:aa:c6:0d:ee:1f:d2:d0:cc:1b:dd:26:
b2:5a:0c:18:52:13:1a:56:00:6a:66:56:3e:20:95:b2:8e:9b:
04:3c:9b:2f:aa:c9:24:52:29:58:3e:a8:80:42:c1:c9:6e:9b:
14:98:6d:fe:ec:6c:fb:8c:d3:bb:6d:33:06:59:cd:ec:e4:de:
c8:27:69:39:2c:c0:e0:f9:1e:f2:b3:f1:31:cd:e7:21:da:91:
64:2d:43:c4:11:82:df:ca:45:57:d1:7a:a5:76:fd:0f:a3:20:
39:49:ea:56:d5:42:35:80:67:df:9e:db:9a:6f:91:09:2c:76:
47:f6:64:cb:3d:88:1d:fd:56:24:34:01:cc:37:d9:56:45:5c:
e9:60:3f:1c:d6:3f:e8:c8:25:3f:b6:28:b5:e3:8a:37:50:52:
17:b4:cb:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:11 2026 by rpki-client