Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3231332e352e3132382e302f32342d3234203d3e20313939303538.roa
File: 3231332e352e3132382e302f32342d3234203d3e20313939303538.roa (raw, json)
Hash identifier: M/VDbD6X7IWmHx3gMi6h9miP6a1jez1ttIkf8txe0i8=
Subject key identifier: 1A:3D:61:9B:55:6F:EC:3B:C0:BE:60:2B:61:85:73:8E:9F:21:5F:0D
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 3B0F9828272C615DBAF72A5EAA7E5D102AC06C02
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3231332e352e3132382e302f32342d3234203d3e20313939303538.roa
Signing time: Thu 09 Jul 2026 08:49:06 +0000
ROA not before: Thu 09 Jul 2026 08:44:06 +0000
ROA not after: Thu 08 Jul 2027 08:49:06 +0000
asID: 199058
IP address blocks: 213.5.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:52:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:0f:98:28:27:2c:61:5d:ba:f7:2a:5e:aa:7e:5d:10:2a:c0:6c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Jul 9 08:44:06 2026 GMT
Not After : Jul 8 08:49:06 2027 GMT
Subject: CN=1A3D619B556FEC3BC0BE602B6185738E9F215F0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:3d:47:90:43:4e:41:4e:ab:e9:4b:26:60:c8:
22:b5:9d:a0:58:e8:ac:29:36:af:b3:f3:25:d8:0d:
5f:9a:b9:a1:a4:f9:80:af:87:c9:e3:0c:d8:a0:47:
7e:4f:da:3d:b3:c5:00:83:3b:ff:a6:72:fd:97:dd:
78:18:2a:76:dd:e6:d4:2c:ec:37:a3:17:0e:e9:f2:
5b:ce:f6:b6:ea:a3:3e:dd:94:ab:9b:b3:7b:0c:a3:
05:05:72:d9:52:76:f4:d9:46:1c:8d:38:e1:a0:b1:
9b:c6:d7:ee:9d:d5:df:db:a1:5d:0b:10:a4:db:25:
ed:18:14:98:35:9b:b7:ef:54:f1:04:f1:36:8a:d0:
b4:3b:c2:56:b5:71:cb:89:11:99:93:38:ae:99:a4:
32:11:af:07:43:f4:ec:bb:70:62:95:b5:00:ad:08:
4b:54:76:c1:ae:fd:ec:61:97:ef:aa:94:42:fa:e4:
9d:78:8e:fb:79:95:6c:0f:18:ae:97:ed:10:17:a6:
e9:02:6a:a3:c7:8c:f9:6b:9b:1d:0e:cc:61:55:7c:
99:0c:02:be:cc:f9:3b:66:73:0a:b4:96:69:a0:d8:
80:90:30:20:68:b3:43:06:a3:55:af:80:13:11:83:
e1:8b:3c:83:0f:f1:e9:e7:6f:a8:20:40:c6:09:71:
22:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:3D:61:9B:55:6F:EC:3B:C0:BE:60:2B:61:85:73:8E:9F:21:5F:0D
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3231332e352e3132382e302f32342d3234203d3e20313939303538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.5.128.0/24
Signature Algorithm: sha256WithRSAEncryption
60:db:6a:9c:8a:d2:96:29:ec:8e:9b:97:ac:97:d6:de:7d:f2:
87:77:f5:d4:d9:2b:49:35:6e:9c:b2:72:09:22:22:fc:33:06:
b5:c2:2d:eb:3c:51:54:65:c4:db:73:34:06:7e:1b:26:52:5b:
ae:ca:6a:cf:ec:24:11:12:5c:f0:60:91:67:6f:cc:65:76:be:
37:20:c0:76:a5:a4:2a:16:8d:57:cb:84:0e:aa:c3:d1:a2:a0:
b6:39:ab:d6:4b:37:c1:d0:1f:4b:d3:00:76:de:88:9b:98:d6:
4e:7d:6d:e4:cc:81:01:75:2d:a2:0b:0e:9a:c3:de:d0:1d:90:
c4:3b:65:92:7d:a3:f3:88:df:c7:01:d8:60:f0:2a:f2:a8:ca:
f1:7d:01:b7:04:e4:11:c5:3c:36:70:4e:96:99:60:9c:2d:54:
e4:cc:75:84:b4:0e:98:8f:0b:ed:be:12:2c:db:e5:03:8a:67:
7a:9b:fd:20:1c:9a:bc:cd:31:fd:56:de:f6:f2:51:77:49:2a:
b3:2e:89:33:14:4b:03:a6:68:33:4f:35:26:68:dd:0a:a5:7e:
f1:bc:71:dc:96:b5:8f:a6:08:e1:d1:9a:ba:b3:7b:68:36:82:
54:b5:c5:57:5e:63:5a:1e:fd:71:c3:25:2d:bb:a5:c8:cd:85:
6a:83:d4:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:47:40 2026 by rpki-client