Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e39342e302f32342d3234203d3e2039303039.roa
File: 3231332e3133392e39342e302f32342d3234203d3e2039303039.roa (raw, json)
Hash identifier: jYd4q98qoULIjdslO4Xk9d5wPUuNksXv3RR74JoHySc=
Subject key identifier: 79:78:1D:5D:69:3D:DC:6A:06:B8:EE:26:6E:97:45:0D:EC:16:0D:36
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 6E0FFDDB296FA530D2182416008A10DA934BBC54
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e39342e302f32342d3234203d3e2039303039.roa
Signing time: Tue 24 Mar 2026 09:46:53 +0000
ROA not before: Tue 24 Mar 2026 09:41:53 +0000
ROA not after: Tue 23 Mar 2027 09:46:53 +0000
asID: 9009
IP address blocks: 213.139.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:0f:fd:db:29:6f:a5:30:d2:18:24:16:00:8a:10:da:93:4b:bc:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Mar 24 09:41:53 2026 GMT
Not After : Mar 23 09:46:53 2027 GMT
Subject: CN=79781D5D693DDC6A06B8EE266E97450DEC160D36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c5:c8:08:93:80:d0:b0:8d:ca:77:ef:d3:71:
ed:6b:c4:e2:8d:07:32:cb:fd:76:1c:5c:fd:cd:62:
ab:3b:af:2b:64:b3:49:0b:50:f6:8e:7d:81:3d:ca:
07:c4:2a:ae:c8:50:be:5d:08:9e:93:ca:80:6f:46:
7d:b4:e8:99:91:bd:b7:88:7f:f9:b1:d0:b5:49:c8:
4c:de:69:e8:48:74:20:9c:e9:86:0a:f0:d7:15:c4:
99:3c:64:65:a3:76:79:78:15:0c:ba:11:8a:2d:eb:
a6:a2:ec:a2:5e:60:c6:6d:bf:c8:0c:3a:aa:1d:83:
b9:6f:3f:e1:ae:a0:ef:f6:60:92:20:d5:b6:dc:22:
8b:f1:26:b7:e5:db:7c:34:ea:b5:92:eb:17:93:99:
94:cc:0f:c0:41:10:33:f0:8c:48:f6:e3:66:b5:c5:
44:1c:4c:ff:c7:1f:9b:7b:3d:01:ce:20:2c:ae:75:
a1:ad:7c:8d:fd:b7:1c:75:eb:a4:50:34:3a:19:7e:
1b:cf:eb:e3:0c:15:c0:8d:d8:4a:4a:46:6c:d3:67:
68:24:75:4c:67:10:f7:30:5c:42:b2:38:15:6e:f4:
f7:76:a1:fa:76:2b:3b:be:ee:2f:6e:27:81:9a:8f:
e6:d7:d0:de:c7:4d:78:7d:00:fd:13:d6:08:16:ac:
38:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:78:1D:5D:69:3D:DC:6A:06:B8:EE:26:6E:97:45:0D:EC:16:0D:36
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e39342e302f32342d3234203d3e2039303039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.94.0/24
Signature Algorithm: sha256WithRSAEncryption
73:41:7a:5c:12:e7:93:b1:04:11:08:10:ab:98:d7:a3:11:97:
b7:18:4a:51:bc:bc:d8:14:86:06:04:50:4e:3e:4b:03:6f:f0:
f1:41:c2:6a:8b:9c:c4:4f:b7:90:0c:ea:17:86:e1:6e:aa:06:
25:95:61:ea:6e:68:fb:9f:27:c2:9d:7a:14:0d:58:ec:d5:09:
62:39:be:f3:2d:7a:4e:fd:3e:2e:03:a3:2e:65:1f:ca:51:b8:
9c:e7:08:6d:fe:23:3d:aa:97:cb:5f:2b:e1:87:6d:49:01:7e:
1b:d7:05:bd:78:41:6b:e2:40:68:ca:32:c0:40:45:47:d0:05:
7b:12:9f:25:69:a8:c2:e5:04:af:b6:ec:07:62:03:67:f2:f1:
67:6f:30:84:58:ff:a2:31:dc:0e:da:f7:57:d4:80:67:7e:2f:
34:7d:e9:77:4a:5a:7e:a6:4d:a4:c4:ba:2f:00:57:5e:59:91:
4d:f1:0c:02:79:08:eb:45:ab:ad:66:f4:3d:88:52:26:2b:cf:
65:50:b4:50:9d:a4:e3:c4:a6:0d:5d:b2:18:aa:91:1e:66:57:
ea:c6:60:c7:73:e6:44:a6:20:0c:95:1b:b6:8e:86:e2:b1:41:
86:ac:1a:c9:bc:e8:37:01:d7:1b:a1:bb:0e:00:4d:51:89:d7:
eb:8c:53:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:17 2026 by rpki-client