Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3231332e3232352e3233372e302f32342d3234203d3e20313436383133.roa
File: 3231332e3232352e3233372e302f32342d3234203d3e20313436383133.roa (raw, json)
Hash identifier: DRJtjVwPiySu9t6me4WQ1vdKo6aNEDdd8gJ1QJzgaC4=
Subject key identifier: F9:89:9D:64:28:5F:9C:30:D9:2A:FC:9F:C2:D6:7B:11:22:74:BB:0E
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 292AA711683995B7F1ACB078CCC85242DE516D18
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3231332e3232352e3233372e302f32342d3234203d3e20313436383133.roa
Signing time: Fri 25 Sep 2026 09:17:08 +0000
ROA not before: Fri 25 Sep 2026 09:12:08 +0000
ROA not after: Fri 24 Sep 2027 09:17:08 +0000
asID: 146813
IP address blocks: 213.225.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 17:32:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:2a:a7:11:68:39:95:b7:f1:ac:b0:78:cc:c8:52:42:de:51:6d:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Sep 25 09:12:08 2026 GMT
Not After : Sep 24 09:17:08 2027 GMT
Subject: CN=F9899D64285F9C30D92AFC9FC2D67B112274BB0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:dc:0c:05:4f:41:7b:50:36:6a:c6:66:00:1e:
4d:3f:b5:4b:90:17:d2:51:3e:d7:48:04:36:d8:f5:
33:01:62:e4:61:1a:77:5d:d1:9c:10:f0:1f:e3:4b:
29:70:07:1b:54:81:7b:dc:c4:5d:1e:69:3b:ee:bf:
ab:3d:b3:69:41:87:4a:83:69:f5:ec:58:2f:1b:29:
56:fd:53:68:b1:7e:98:4f:85:db:f8:7c:de:01:22:
59:9f:63:f4:35:cc:80:e6:04:d1:a1:d9:63:26:4c:
8a:d6:81:dc:a2:0f:c8:5a:1c:96:23:d1:e5:24:fe:
a5:93:ae:0b:b7:50:3f:05:5d:98:fd:3b:ff:ae:1e:
1d:a0:1f:00:6f:35:68:f0:93:ab:86:f7:4c:38:d8:
5b:8b:3d:38:ea:33:9c:a0:68:a5:6d:3d:0a:b4:c5:
c0:81:d0:b8:d4:5d:c8:39:c9:48:8e:e5:0f:20:33:
41:28:a1:1e:6d:87:85:18:93:d3:0d:31:af:f5:00:
57:ac:7a:5a:6e:6e:b2:04:f9:fd:5c:87:86:79:b6:
0e:00:e5:90:90:b3:8a:87:92:08:e4:6e:ab:94:c1:
05:68:07:d4:4b:a0:af:97:d9:a5:cb:a6:48:34:bf:
b3:22:50:50:e3:c6:77:41:6d:f9:8d:28:f0:b9:a8:
73:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:89:9D:64:28:5F:9C:30:D9:2A:FC:9F:C2:D6:7B:11:22:74:BB:0E
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3231332e3232352e3233372e302f32342d3234203d3e20313436383133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.225.237.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:93:24:c3:6d:5b:1f:60:2b:0d:7a:ee:ef:7c:17:80:be:ca:
bb:5d:a7:10:69:6a:50:2b:25:d9:fe:98:84:40:12:29:fa:97:
a6:30:e5:b6:b4:df:f6:fb:4c:c9:ab:dc:2f:5f:a6:47:ce:43:
35:47:ed:01:9c:66:70:ab:99:a5:9d:ac:c4:64:0f:fc:f2:33:
cd:76:59:50:19:8e:6c:c5:7a:03:e3:eb:54:d6:15:40:e9:a5:
7b:66:a8:6a:17:9e:55:1c:d4:5a:d8:fb:dd:2d:30:54:13:1d:
f8:20:0d:93:3d:43:e6:77:c2:9c:4e:e3:d2:11:dc:6b:f8:01:
ec:06:1e:65:6f:e7:e3:ea:77:2e:b1:1e:bf:1f:4b:a3:2c:f9:
e4:c0:ca:50:56:8f:89:24:3b:77:30:ed:c8:e5:ca:39:25:c8:
d8:89:e1:c0:c0:6d:12:8c:76:8b:c3:ab:eb:08:5b:e4:03:5f:
99:a6:bc:7f:de:35:f0:8d:74:c6:ed:1c:f8:8e:b5:47:b8:95:
d7:ef:0f:23:35:7a:b5:23:5d:d3:3d:c2:eb:90:9d:97:bd:a2:
c1:88:2a:40:33:4d:81:0d:91:9a:dc:93:4e:6a:5c:9e:90:86:
a1:a3:61:2a:b0:57:b7:b1:49:b3:e4:2c:e4:f6:1d:f9:8a:f7:
db:ff:ac:9d
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUKSqnEWg5lbfxrLB4zMhSQt5RbRgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGQwNTlmMTBkMThkMDAwNTJjODA4ZWI4MDY5ZjkwZDQ3
ZTMwNTY0YTAeFw0yNjA5MjUwOTEyMDhaFw0yNzA5MjQwOTE3MDhaMDMxMTAvBgNV
BAMTKEY5ODk5RDY0Mjg1RjlDMzBEOTJBRkM5RkMyRDY3QjExMjI3NEJCMEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx3AwFT0F7UDZqxmYAHk0/tUuQ
F9JRPtdIBDbY9TMBYuRhGndd0ZwQ8B/jSylwBxtUgXvcxF0eaTvuv6s9s2lBh0qD
afXsWC8bKVb9U2ixfphPhdv4fN4BIlmfY/Q1zIDmBNGh2WMmTIrWgdyiD8haHJYj
0eUk/qWTrgu3UD8FXZj9O/+uHh2gHwBvNWjwk6uG90w42FuLPTjqM5ygaKVtPQq0
xcCB0LjUXcg5yUiO5Q8gM0EooR5th4UYk9MNMa/1AFeselpubrIE+f1ch4Z5tg4A
5ZCQs4qHkgjkbquUwQVoB9RLoK+X2aXLpkg0v7MiUFDjxndBbfmNKPC5qHPnAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQU+YmdZChfnDDZKvyfwtZ7ESJ0uw4wHwYDVR0j
BBgwFoAUDQWfENGNAAUsgI64Bp+Q1H4wVkowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQtMjg1NC00MDgwLTlhMDktNzI2MjMyNmM5
ZTIyLzEvMEQwNTlGMTBEMThEMDAwNTJDODA4RUI4MDY5RjkwRDQ3RTMwNTY0QS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RRV2ZFTkdOQUFVc2dJNjRCcC1RMUg0
d1Zrby5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQt
Mjg1NC00MDgwLTlhMDktNzI2MjMyNmM5ZTIyLzEvMzIzMTMzMmUzMjMyMzUyZTMy
MzMzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzNjM4MzEzMy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEANXh7TANBgkqhkiG9w0BAQsFAAOCAQEAtZMkw21bH2ArDXru73wXgL7Ku12n
EGlqUCsl2f6YhEASKfqXpjDltrTf9vtMyavcL1+mR85DNUftAZxmcKuZpZ2sxGQP
/PIzzXZZUBmObMV6A+PrVNYVQOmle2aoaheeVRzUWtj73S0wVBMd+CANkz1D5nfC
nE7j0hHca/gB7AYeZW/n4+p3LrEevx9Loyz55MDKUFaPiSQ7dzDtyOXKOSXI2Inh
wMBtEox2i8Or6whb5ANfmaa8f9418I10xu0c+I61R7iV1+8PIzV6tSNd0z3C65Cd
l72iwYgqQDNNgQ2RmtyTTmpcnpCGoaNhKrBXt7FJs+Qs5PYd+Yr32/+snQ==
-----END CERTIFICATE-----
Generated at Mon Sep 28 10:06:46 2026 by rpki-client