Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38332e302f32342d3234203d3e2039303039.roa
File: 3231332e3133392e38332e302f32342d3234203d3e2039303039.roa (raw, json)
Hash identifier: ddkCuB2C0zIUJCsHJnqd7PIRz+kBJmKHlIRYHjQdbXM=
Subject key identifier: C9:08:F6:9C:BF:93:C0:10:1B:DA:3D:EE:1C:13:2D:66:F3:5D:B0:F1
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 56E895278F2A5E002A444D1812340BA4262963BD
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38332e302f32342d3234203d3e2039303039.roa
Signing time: Fri 20 Mar 2026 16:46:50 +0000
ROA not before: Fri 20 Mar 2026 16:41:50 +0000
ROA not after: Fri 19 Mar 2027 16:46:50 +0000
asID: 9009
IP address blocks: 213.139.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:e8:95:27:8f:2a:5e:00:2a:44:4d:18:12:34:0b:a4:26:29:63:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Mar 20 16:41:50 2026 GMT
Not After : Mar 19 16:46:50 2027 GMT
Subject: CN=C908F69CBF93C0101BDA3DEE1C132D66F35DB0F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d8:3c:e0:c1:72:83:dd:47:9e:3c:fe:87:03:
86:71:58:ab:12:98:d8:66:fa:2e:ca:c8:18:0f:27:
7d:77:20:b3:a1:a2:61:31:47:b8:b5:fe:33:57:d5:
1c:c1:e4:25:79:86:4e:fc:d3:88:eb:a9:2e:b5:db:
cc:01:46:09:e0:1c:2a:17:b9:eb:4f:aa:9b:7f:ce:
1d:bf:79:8f:9b:ab:d0:47:13:20:23:9d:a9:77:48:
4a:7a:91:13:72:0f:2e:95:83:c0:b8:91:a5:b8:63:
8a:f2:e5:eb:8e:4c:be:d2:2c:e9:d9:ae:71:06:c5:
40:c4:23:21:a3:3d:ea:dd:9c:15:e6:5e:9e:32:40:
c1:ce:2b:7d:10:2d:49:53:59:da:dd:38:33:e0:da:
07:94:0c:2a:5a:68:e7:ab:1b:b6:b9:3d:e8:18:0c:
42:2f:53:c3:73:9e:c6:a8:8c:c6:47:64:a6:8b:35:
16:80:40:d1:82:47:bf:85:24:a7:c1:0b:45:d1:61:
e1:32:e9:75:e7:9e:6d:f6:c0:67:4d:18:ca:a2:b4:
31:04:1d:67:22:dd:df:1b:83:ad:75:c4:f7:48:ec:
2b:09:d7:5c:ed:0a:fa:01:b7:ff:53:bc:23:f2:8a:
98:ce:1e:e0:3d:49:6d:f7:97:44:97:ad:50:64:ca:
76:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:08:F6:9C:BF:93:C0:10:1B:DA:3D:EE:1C:13:2D:66:F3:5D:B0:F1
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38332e302f32342d3234203d3e2039303039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.83.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:9e:fa:6f:1a:fd:a9:ea:53:4c:b3:34:5e:4e:64:79:75:b1:
4b:4e:92:76:cd:cc:54:71:2e:92:df:a3:28:7a:56:2c:da:6a:
dc:ff:2a:8f:11:32:bc:14:60:c3:86:2a:84:b3:90:5e:dd:70:
3b:e9:d8:58:0f:ee:84:ca:42:b0:d5:37:b5:52:a1:8b:25:73:
93:b7:a0:07:0d:67:17:3d:ed:5c:ed:c0:b4:94:82:df:2e:f9:
fb:29:09:18:8c:33:0c:68:f8:5e:e3:29:e6:a0:5b:38:a6:53:
db:7f:d3:0c:6f:5e:47:0c:8f:be:b2:67:62:74:62:c9:cd:04:
06:de:73:3f:6e:a6:29:ff:6c:f3:6d:7d:0f:3e:43:fb:41:22:
5c:cb:6e:de:0d:39:08:c9:9c:6d:bb:5f:33:f5:f1:18:3f:91:
b7:e4:05:56:d9:91:e9:e7:8e:28:28:b8:52:65:8c:e0:b3:85:
72:82:fb:1b:62:f1:ac:83:8b:2c:9e:30:77:92:f1:74:02:1e:
4d:dc:b5:ec:70:9c:e5:f3:a3:b3:95:e1:5e:c6:d0:a6:a2:39:
24:77:c3:b9:25:f6:b6:af:68:32:51:51:73:d7:a9:85:32:ad:
f8:10:ae:17:66:b3:16:f7:49:ee:29:9c:75:8c:0c:33:28:72:
ed:0a:6e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:58:38 2026 by rpki-client