Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/3231332e3135372e3132312e302f32342d3234203d3e2039333034.roa
File: 3231332e3135372e3132312e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier: ZHfI2bxkV7hnGY31X0QEko4MmgUYJCvh7a/XuZiRsPg=
Subject key identifier: 12:6D:C5:FA:71:F9:A7:87:D8:F5:39:05:5F:DC:D0:44:AD:8E:B3:F8
Certificate issuer: /CN=8184669b0189b7fabe05e700325a0d74957beb27
Certificate serial: 0C8F4A5A6B6A1C104C3C2283321B54950B4087AD
Authority key identifier: 81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/3231332e3135372e3132312e302f32342d3234203d3e2039333034.roa
Signing time: Tue 08 Jul 2025 14:13:16 +0000
ROA not before: Tue 08 Jul 2025 14:08:16 +0000
ROA not after: Tue 07 Jul 2026 14:13:16 +0000
asID: 9304
IP address blocks: 213.157.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl
rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft
rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 06:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:8f:4a:5a:6b:6a:1c:10:4c:3c:22:83:32:1b:54:95:0b:40:87:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8184669b0189b7fabe05e700325a0d74957beb27
Validity
Not Before: Jul 8 14:08:16 2025 GMT
Not After : Jul 7 14:13:16 2026 GMT
Subject: CN=126DC5FA71F9A787D8F539055FDCD044AD8EB3F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:88:bf:aa:67:70:19:af:e0:78:e8:f7:8b:e5:
8e:60:e5:20:3c:18:56:e5:61:8d:dd:11:f7:f5:fb:
1b:b1:60:82:b2:91:e4:ae:03:ef:8c:01:6f:72:7e:
11:83:aa:ff:a6:6f:70:63:38:7b:31:6c:b1:f4:48:
4b:3a:30:f9:14:0a:85:18:e3:dd:c4:62:57:52:0f:
a2:6a:a0:41:e2:c3:52:6c:d5:e0:c3:13:60:f5:91:
41:a8:e9:49:52:49:62:f2:52:c7:be:9c:4e:35:fd:
a4:7a:df:17:0e:67:48:77:8d:c8:9c:43:6e:59:24:
5c:3c:72:53:e8:47:a9:c2:11:32:55:c8:25:1b:db:
ea:c2:47:36:4c:eb:c8:9f:d0:88:22:a4:94:c4:d1:
9c:48:a1:31:84:76:c4:d6:08:c4:e6:9d:f8:ff:09:
fc:73:30:47:57:7e:d0:75:00:18:7e:9e:07:2e:10:
bb:e1:94:55:c7:16:2b:93:ec:a0:72:71:d6:14:64:
c2:19:40:fe:9b:aa:59:32:ad:5b:3b:8c:e7:ee:2d:
cc:6e:95:11:72:12:24:87:0e:f2:a1:71:00:4e:0e:
85:fe:67:57:a5:b9:e2:53:0c:7c:94:26:cc:be:f8:
d6:9e:71:37:8e:4d:cf:d2:74:f6:a3:3e:b7:e4:12:
28:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:6D:C5:FA:71:F9:A7:87:D8:F5:39:05:5F:DC:D0:44:AD:8E:B3:F8
X509v3 Authority Key Identifier:
keyid:81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/3231332e3135372e3132312e302f32342d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.157.121.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:f8:c6:7c:9d:47:43:94:b0:75:6b:cf:13:3d:a7:01:e2:3e:
44:16:39:91:dc:38:51:92:4a:ef:5a:4c:d7:aa:e5:06:57:70:
a3:54:3e:45:9b:86:af:c7:66:67:3f:8c:45:64:46:6c:a1:88:
98:49:0a:a7:9e:2b:4d:99:72:e4:20:0b:04:cb:e8:8c:97:25:
ab:c0:10:89:fa:b9:50:06:b5:8a:40:d9:22:77:25:dd:4a:b3:
d0:fe:f2:04:af:ee:ff:86:54:21:90:0b:f2:ef:7b:5e:ea:57:
ca:90:85:8f:5b:0d:b3:ce:ac:d5:6b:a3:70:c3:d9:c4:f4:3a:
4c:94:f4:cf:b4:bb:0b:b5:81:d9:cd:e2:ca:0d:65:e5:62:e1:
53:bf:b2:c3:08:68:e5:8b:0e:e8:4b:37:bd:a1:4a:f4:3e:b8:
d2:d8:5a:f3:1f:3b:ee:bc:5d:34:a8:d8:64:7b:91:f7:9b:72:
dd:91:78:43:f6:10:cd:d9:fb:bb:68:a3:e8:93:f9:9e:c7:4d:
4a:70:9e:85:87:e8:8d:49:f2:2c:5a:77:2a:41:bc:2e:2b:c7:
fd:76:3d:5a:32:d6:82:e5:a9:88:86:7e:5a:ae:95:db:8b:25:
a3:a8:c0:c3:cf:ec:77:f8:af:3d:59:99:d5:73:48:71:4b:2a:
87:06:5a:80
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUDI9KWmtqHBBMPCKDMhtUlQtAh60wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODE4NDY2OWIwMTg5YjdmYWJlMDVlNzAwMzI1YTBkNzQ5
NTdiZWIyNzAeFw0yNTA3MDgxNDA4MTZaFw0yNjA3MDcxNDEzMTZaMDMxMTAvBgNV
BAMTKDEyNkRDNUZBNzFGOUE3ODdEOEY1MzkwNTVGRENEMDQ0QUQ4RUIzRjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCViL+qZ3AZr+B46PeL5Y5g5SA8
GFblYY3dEff1+xuxYIKykeSuA++MAW9yfhGDqv+mb3BjOHsxbLH0SEs6MPkUCoUY
493EYldSD6JqoEHiw1Js1eDDE2D1kUGo6UlSSWLyUse+nE41/aR63xcOZ0h3jcic
Q25ZJFw8clPoR6nCETJVyCUb2+rCRzZM68if0IgipJTE0ZxIoTGEdsTWCMTmnfj/
CfxzMEdXftB1ABh+ngcuELvhlFXHFiuT7KBycdYUZMIZQP6bqlkyrVs7jOfuLcxu
lRFyEiSHDvKhcQBODoX+Z1elueJTDHyUJsy++NaecTeOTc/SdPajPrfkEihxAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUEm3F+nH5p4fY9TkFX9zQRK2Os/gwHwYDVR0j
BBgwFoAUgYRmmwGJt/q+BecAMloNdJV76ycwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTQzMWU0MmUtMGQ3Zi00NGQwLTgxM2YtYjVlM2EyYWJi
ZTI1LzAvODE4NDY2OUIwMTg5QjdGQUJFMDVFNzAwMzI1QTBENzQ5NTdCRUIyNy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2dZUm1td0dKdF9xLUJlY0FNbG9OZEpW
NzZ5Yy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTQzMWU0MmUt
MGQ3Zi00NGQwLTgxM2YtYjVlM2EyYWJiZTI1LzAvMzIzMTMzMmUzMTM1MzcyZTMx
MzIzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM5MzMzMDM0LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
1Z15MA0GCSqGSIb3DQEBCwUAA4IBAQCu+MZ8nUdDlLB1a88TPacB4j5EFjmR3DhR
kkrvWkzXquUGV3CjVD5Fm4avx2ZnP4xFZEZsoYiYSQqnnitNmXLkIAsEy+iMlyWr
wBCJ+rlQBrWKQNkidyXdSrPQ/vIEr+7/hlQhkAvy73te6lfKkIWPWw2zzqzVa6Nw
w9nE9DpMlPTPtLsLtYHZzeLKDWXlYuFTv7LDCGjliw7oSze9oUr0PrjS2FrzHzvu
vF00qNhke5H3m3LdkXhD9hDN2fu7aKPok/mex01KcJ6Fh+iNSfIsWncqQbwuK8f9
dj1aMtaC5amIhn5arpXbiyWjqMDDz+x3+K89WZnVc0hxSyqHBlqA
-----END CERTIFICATE-----
Generated at Sun Jul 20 14:10:03 2025 by rpki-client