Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38352e302f32342d3234203d3e2039303039.roa
File: 3231332e3133392e38352e302f32342d3234203d3e2039303039.roa (raw, json)
Hash identifier: hksR2RFjNh00D4GQuid5Bvdsyv72DQ8eShLKWLWJ500=
Subject key identifier: A7:AF:C0:41:C4:DE:F7:37:E2:A1:CF:4E:02:F1:8F:89:EE:09:C5:29
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 08676DA7CE949FF85A649DC0A9FF27D9C5B3C1E2
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38352e302f32342d3234203d3e2039303039.roa
Signing time: Mon 23 Mar 2026 11:46:51 +0000
ROA not before: Mon 23 Mar 2026 11:41:51 +0000
ROA not after: Mon 22 Mar 2027 11:46:51 +0000
asID: 9009
IP address blocks: 213.139.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:67:6d:a7:ce:94:9f:f8:5a:64:9d:c0:a9:ff:27:d9:c5:b3:c1:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Mar 23 11:41:51 2026 GMT
Not After : Mar 22 11:46:51 2027 GMT
Subject: CN=A7AFC041C4DEF737E2A1CF4E02F18F89EE09C529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ae:ee:af:5e:21:39:ea:f6:fe:ae:a0:d1:fe:
c4:07:e6:42:b3:ef:6c:56:44:a3:5e:d4:2c:21:c9:
84:da:55:ff:5b:ad:f3:d2:12:58:50:27:92:aa:fb:
74:1f:9b:02:e0:05:ba:68:81:4b:a2:95:67:48:89:
04:f3:bf:2a:5d:7a:32:50:89:7d:ca:f9:33:4d:4c:
38:a3:69:89:7a:93:ca:e6:f8:5d:dd:f2:a6:1d:6b:
61:11:72:a1:9d:6f:0e:30:ed:cb:a4:2d:86:43:1d:
6b:ed:11:55:47:f3:e5:98:6c:45:e0:ca:48:02:db:
fe:5b:90:89:23:95:d1:8b:09:9c:86:83:fe:8c:60:
32:51:a2:bf:73:65:ac:68:98:c2:b0:ff:27:37:20:
54:b9:cd:b6:3d:d0:bb:36:1d:e3:9e:6d:5e:0c:68:
90:2c:0f:f2:b6:3f:9e:e1:3e:72:ec:15:27:d7:ac:
32:ed:7e:cd:34:2c:b7:6d:f9:44:60:ae:e6:bc:ab:
d5:d9:56:98:59:13:a8:e0:d9:80:21:11:d3:25:85:
cf:34:23:4d:e7:87:78:39:d7:80:0c:1a:9c:fa:8f:
cc:8f:a5:26:3d:50:c4:ae:e7:51:07:2f:a2:ba:38:
e2:95:0b:7a:f7:6a:46:8e:db:0e:f5:88:3b:e0:2b:
6e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:AF:C0:41:C4:DE:F7:37:E2:A1:CF:4E:02:F1:8F:89:EE:09:C5:29
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38352e302f32342d3234203d3e2039303039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.85.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:6e:2d:38:40:dd:0d:21:cf:d2:6c:65:61:b4:32:4b:7b:99:
de:af:de:de:df:65:bc:b3:3e:e3:96:c7:18:c5:23:25:a1:1d:
73:f7:1e:99:6b:32:29:b5:e6:0a:c0:1a:74:8d:3b:bd:b0:03:
91:34:94:68:5e:80:0d:dc:4e:1d:df:3b:fb:dd:f7:a6:2a:5e:
8b:3e:38:b3:c2:73:d4:2a:8c:42:da:12:d8:b6:c5:49:6f:bc:
cd:0d:9f:c4:6e:53:c8:d9:67:9a:e3:2b:21:04:4c:ee:be:2b:
18:0b:12:93:34:32:54:74:38:64:3b:ec:28:e3:c1:55:af:96:
89:83:69:9a:39:82:e3:a5:77:7e:a3:4d:c3:45:32:ae:1e:e9:
d1:1c:21:cb:9d:64:dc:99:90:63:3d:a2:5f:54:5d:d4:34:7a:
e9:c4:66:af:70:23:be:e6:50:35:db:65:e0:50:7d:65:2e:9c:
94:95:79:74:3c:31:b5:84:63:7c:b2:d2:6e:63:62:f8:3d:ad:
6c:38:e6:2f:ff:b3:83:cb:df:dc:92:f2:d2:b3:e9:0b:8b:d8:
e7:31:be:63:44:18:40:9d:15:e4:f4:74:54:05:15:ac:f1:d9:
31:51:11:6e:c1:de:af:6d:d1:04:4f:da:48:da:d0:5e:7e:21:
36:a4:14:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:59:37 2026 by rpki-client