Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e39352e302f32342d3234203d3e2039303039.roa
File: 3231332e3133392e39352e302f32342d3234203d3e2039303039.roa (raw, json)
Hash identifier: mu6JkT3fZoMbVctkEBjnrLNPWmpvwLKVK+IulCwBuzU=
Subject key identifier: 85:A3:42:B8:45:C4:D0:36:D1:EE:67:B0:D5:C2:9C:08:8F:E9:26:E2
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 70E85BA05664A519363DDCDD929D4FD09F3763E8
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e39352e302f32342d3234203d3e2039303039.roa
Signing time: Tue 24 Mar 2026 09:46:53 +0000
ROA not before: Tue 24 Mar 2026 09:41:53 +0000
ROA not after: Tue 23 Mar 2027 09:46:53 +0000
asID: 9009
IP address blocks: 213.139.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:e8:5b:a0:56:64:a5:19:36:3d:dc:dd:92:9d:4f:d0:9f:37:63:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Mar 24 09:41:53 2026 GMT
Not After : Mar 23 09:46:53 2027 GMT
Subject: CN=85A342B845C4D036D1EE67B0D5C29C088FE926E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2d:ab:65:4c:d8:54:49:36:ef:da:08:b0:0e:
aa:61:01:63:db:8b:47:44:df:49:d8:e7:eb:fe:5e:
0b:14:ce:19:d9:47:57:9f:c5:b6:9c:67:a8:0f:3e:
09:5b:50:01:d8:76:15:02:03:43:02:ea:f0:41:72:
23:b3:4d:ad:92:81:a0:1b:2b:2c:5c:a6:84:b9:fd:
70:8d:f7:91:c6:31:09:66:eb:91:e4:11:e7:9d:51:
98:14:72:54:02:41:74:5c:5c:b0:f9:e5:1f:9d:a2:
7c:f4:f9:0a:87:f5:e9:31:bc:3f:7d:4c:40:61:56:
80:73:6a:7d:4a:a0:7a:31:13:cc:62:f2:87:48:3f:
ae:ea:dc:ef:62:dc:35:28:77:ea:8d:78:16:4c:0b:
c9:7f:83:ab:ea:b9:44:83:14:c0:06:c8:a4:57:f3:
78:af:59:74:af:60:2f:b2:ea:72:8f:2a:79:12:74:
fd:6c:33:21:1f:15:d4:63:e2:cd:b5:6b:0c:21:67:
e5:d6:15:59:57:de:f7:18:c9:2d:91:ac:ce:e1:91:
2f:c5:1f:72:90:d6:77:b9:da:af:b2:b9:0a:af:42:
d2:18:11:7c:94:5c:8b:13:e9:cc:40:71:4e:23:91:
27:7e:9f:e5:2e:57:63:e6:ba:54:60:5e:b7:fa:9d:
0a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A3:42:B8:45:C4:D0:36:D1:EE:67:B0:D5:C2:9C:08:8F:E9:26:E2
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e39352e302f32342d3234203d3e2039303039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.95.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:a7:a1:b7:ff:f5:73:04:a1:e5:32:59:8b:5c:31:f1:5c:79:
94:a5:88:84:fa:f4:d5:74:d2:ce:aa:03:73:0a:98:9b:26:13:
5a:c0:50:1e:b4:a3:b1:4a:95:bd:64:d4:8b:e6:cf:58:0b:f4:
aa:62:cb:0b:6f:86:08:26:01:8c:66:8c:fe:56:13:be:34:4d:
0e:69:72:9a:c1:2e:20:fc:19:7b:6a:f2:56:df:29:3d:d4:91:
6b:34:2d:bc:cd:1f:83:2f:60:f2:48:56:fd:e2:9d:cc:b1:c4:
45:4c:2c:0e:cb:a5:96:bb:7e:82:01:b7:fe:e6:11:92:d8:a8:
74:ca:83:b3:01:89:0b:2a:98:22:f8:8b:a1:3d:47:1b:8d:36:
7a:cc:36:fe:37:ae:eb:7d:c7:d0:31:3d:b2:a8:75:07:ca:09:
97:0c:4e:1b:c2:74:a3:64:e8:64:a1:ea:58:78:09:8c:80:9b:
f7:98:95:9c:e0:29:f9:e2:9f:f2:bd:b1:ac:84:c9:fe:42:36:
5a:09:7e:0a:50:5f:28:d5:90:75:51:86:34:2e:b6:23:f6:ab:
22:83:86:87:25:52:f1:cf:eb:04:c9:f8:ca:3a:55:5b:d6:3d:
77:c6:80:f0:b2:56:52:fe:db:2c:b2:75:17:fc:a3:1f:51:bd:
04:8a:cb:a3
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUcOhboFZkpRk2Pdzdkp1P0J83Y+gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjY4M2YyZWI1MGM1OTk5YTc3NDU2ZTg4MjY4MzE2MDlk
NDhjN2QzZTAeFw0yNjAzMjQwOTQxNTNaFw0yNzAzMjMwOTQ2NTNaMDMxMTAvBgNV
BAMTKDg1QTM0MkI4NDVDNEQwMzZEMUVFNjdCMEQ1QzI5QzA4OEZFOTI2RTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0LatlTNhUSTbv2giwDqphAWPb
i0dE30nY5+v+XgsUzhnZR1efxbacZ6gPPglbUAHYdhUCA0MC6vBBciOzTa2SgaAb
KyxcpoS5/XCN95HGMQlm65HkEeedUZgUclQCQXRcXLD55R+donz0+QqH9ekxvD99
TEBhVoBzan1KoHoxE8xi8odIP67q3O9i3DUod+qNeBZMC8l/g6vquUSDFMAGyKRX
83ivWXSvYC+y6nKPKnkSdP1sMyEfFdRj4s21awwhZ+XWFVlX3vcYyS2RrM7hkS/F
H3KQ1ne52q+yuQqvQtIYEXyUXIsT6cxAcU4jkSd+n+UuV2PmulRgXrf6nQrpAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUhaNCuEXE0DbR7mew1cKcCI/pJuIwHwYDVR0j
BBgwFoAUtoPy61DFmZp3RW6IJoMWCdSMfT4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTAxYzE0ZmItYjY2MC00ODlkLTllOWYtOTQwMmU5ZTJj
MmUyLzAvQjY4M0YyRUI1MEM1OTk5QTc3NDU2RTg4MjY4MzE2MDlENDhDN0QzRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3RvUHk2MURGbVpwM1JXNklKb01XQ2RT
TWZUNC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTAxYzE0ZmIt
YjY2MC00ODlkLTllOWYtOTQwMmU5ZTJjMmUyLzAvMzIzMTMzMmUzMTMzMzkyZTM5
MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzOTMwMzAzOS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANWL
XzANBgkqhkiG9w0BAQsFAAOCAQEAsaeht//1cwSh5TJZi1wx8Vx5lKWIhPr01XTS
zqoDcwqYmyYTWsBQHrSjsUqVvWTUi+bPWAv0qmLLC2+GCCYBjGaM/lYTvjRNDmly
msEuIPwZe2ryVt8pPdSRazQtvM0fgy9g8khW/eKdzLHERUwsDsullrt+ggG3/uYR
ktiodMqDswGJCyqYIviLoT1HG402esw2/jeu633H0DE9sqh1B8oJlwxOG8J0o2To
ZKHqWHgJjICb95iVnOAp+eKf8r2xrITJ/kI2Wgl+ClBfKNWQdVGGNC62I/arIoOG
hyVS8c/rBMn4yjpVW9Y9d8aA8LJWUv7bLLJ1F/yjH1G9BIrLow==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:32 2026 by rpki-client