Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3231332e3232352e3233362e302f32342d3234203d3e20333239303937.roa
File: 3231332e3232352e3233362e302f32342d3234203d3e20333239303937.roa (raw, json)
Hash identifier: zFyfaAeGc+XO9Mu+E75sAGLZwtFhRY8m3MVz5vHV9YA=
Subject key identifier: 13:26:74:F2:C0:ED:74:25:28:32:EC:7B:81:BE:27:5D:03:8B:0E:0E
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 28EB8D01B6CD8EF46E191C429EA24839473D7CBB
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3231332e3232352e3233362e302f32342d3234203d3e20333239303937.roa
Signing time: Thu 10 Sep 2026 12:49:34 +0000
ROA not before: Thu 10 Sep 2026 12:44:34 +0000
ROA not after: Thu 09 Sep 2027 12:49:34 +0000
asID: 329097
IP address blocks: 213.225.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 13:25:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:eb:8d:01:b6:cd:8e:f4:6e:19:1c:42:9e:a2:48:39:47:3d:7c:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Sep 10 12:44:34 2026 GMT
Not After : Sep 9 12:49:34 2027 GMT
Subject: CN=132674F2C0ED74252832EC7B81BE275D038B0E0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c5:2e:68:c1:9a:8f:19:82:c4:9c:d3:e6:11:
f8:7a:a7:05:b0:50:4c:05:3f:f0:d7:5c:ba:0e:1a:
7f:44:6a:f1:32:7d:ca:f9:d6:18:28:32:40:2c:09:
10:82:a7:40:89:df:54:49:c1:95:bb:4d:f8:f2:f7:
21:3e:48:df:63:e9:10:75:da:14:34:cb:4b:0c:78:
94:3d:95:2e:e3:50:49:29:de:1f:a3:c5:bf:6c:51:
8d:02:be:96:05:3c:b2:c8:75:86:ba:17:76:f6:dd:
f3:21:07:65:25:7c:85:89:47:68:38:50:d0:e0:4e:
b1:b6:ea:99:bc:bb:2e:aa:24:73:c4:01:45:c4:41:
9e:2f:d0:64:74:b9:68:5c:8c:90:a8:3f:71:17:01:
83:22:21:30:27:96:e7:ac:aa:02:09:0c:2e:cf:aa:
e6:e5:eb:1d:da:81:d6:9b:9f:5b:96:00:db:48:57:
68:3e:7d:aa:e7:ae:0a:b4:0b:fe:59:61:de:ba:0e:
24:db:99:58:17:97:de:0d:c5:ef:48:1b:a1:66:f7:
41:c6:75:e9:f2:85:a4:f3:3b:43:a7:82:8d:b9:c1:
56:7d:be:52:78:0a:2d:e4:c7:4c:70:de:9c:0e:74:
4a:06:36:b9:79:db:6e:fd:3b:5c:70:54:73:73:7b:
06:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:26:74:F2:C0:ED:74:25:28:32:EC:7B:81:BE:27:5D:03:8B:0E:0E
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3231332e3232352e3233362e302f32342d3234203d3e20333239303937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.225.236.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:a8:dd:ca:f1:9d:ad:61:fd:25:d8:a3:1a:bb:18:64:8c:d0:
92:ce:a5:bd:16:6e:32:96:2b:87:2b:47:7c:59:fd:89:ad:8b:
13:58:0d:0b:14:ff:9d:ac:03:8d:73:0c:fd:4e:f1:63:ab:f1:
d5:10:c0:fa:37:44:62:a2:bc:66:ab:1c:0a:9b:22:13:12:93:
01:95:2c:ac:91:e3:db:5d:f6:eb:7e:3e:b5:81:67:ca:1f:0b:
e7:e7:c7:78:25:d0:30:f1:f8:31:9a:ef:f8:80:75:08:45:0a:
fb:b4:14:73:d4:f6:50:57:75:11:76:22:63:5d:0e:7c:59:6c:
75:2c:41:0b:7f:cf:15:b5:63:75:93:b3:93:2a:ea:c4:86:68:
ed:ab:00:2c:ce:ba:f4:73:17:7f:10:81:c1:fe:51:c5:d4:a1:
5c:98:e8:ae:07:46:29:4b:cf:1f:81:70:9c:9a:f8:69:9a:28:
62:8f:51:24:f2:9c:72:f4:52:bd:61:a6:af:f8:02:c4:a9:d3:
de:23:d0:2f:ff:45:b2:40:dd:80:ca:c9:98:9f:4d:c0:c5:0c:
50:60:02:8d:0d:03:b8:a4:07:f3:43:9d:9a:55:df:85:a4:98:
4a:e6:8b:c7:c8:bd:c3:d6:42:08:30:fe:92:ec:64:4c:2b:70:
90:cd:3a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:33:39 2026 by rpki-client