Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e33342e302f32342d3234203d3e20383334.roa
File: 3231322e37342e33342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: lqTa5cw8M2J6hJ3015IkMfwhyMXaDBNhS98smDqVTgk=
Subject key identifier: E4:8F:25:FD:C7:62:F8:4D:10:85:7F:B4:42:61:03:9E:6D:A9:C6:34
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 4396C79FE251CE616A8CF2D3D1117831FA740380
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e33342e302f32342d3234203d3e20383334.roa
Signing time: Tue 03 Mar 2026 04:51:14 +0000
ROA not before: Tue 03 Mar 2026 04:46:14 +0000
ROA not after: Tue 02 Mar 2027 04:51:14 +0000
asID: 834
IP address blocks: 212.74.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 05:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:96:c7:9f:e2:51:ce:61:6a:8c:f2:d3:d1:11:78:31:fa:74:03:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Mar 3 04:46:14 2026 GMT
Not After : Mar 2 04:51:14 2027 GMT
Subject: CN=E48F25FDC762F84D10857FB44261039E6DA9C634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5b:e0:c7:8d:11:55:bc:2d:08:19:e0:3f:0b:
c7:b2:39:f9:13:73:79:95:b8:5b:42:11:2b:74:eb:
ef:bd:e9:14:d3:8b:ff:7e:0c:b5:0e:ca:3e:60:b7:
34:78:0d:72:aa:c2:be:a9:b2:40:86:49:e4:0e:cc:
99:a6:8c:86:a8:2c:d3:24:d6:3a:10:d1:1b:75:68:
47:24:ff:70:ff:37:ea:05:48:9e:3d:e5:f9:99:2f:
61:57:4a:9e:57:4a:7b:83:e2:b7:33:8d:f0:47:27:
e8:b2:d3:9c:de:8f:6b:d5:c7:6b:d3:fc:1e:e9:4d:
62:0e:b2:5a:0b:de:b3:9c:fd:3f:71:1a:c6:de:09:
f6:aa:91:9f:a4:5c:2c:32:86:d6:40:3a:db:f3:b8:
d7:fc:a0:94:98:d2:8e:77:0e:53:fd:62:6a:6d:74:
a9:08:c7:f9:64:0b:d3:ef:9c:4e:3c:b0:2b:a7:fd:
ab:e3:5d:3d:d0:30:bb:5a:c9:69:aa:d7:9c:68:d8:
86:88:41:c4:4a:85:e7:c0:28:42:e3:4e:fc:0e:a9:
77:81:07:17:32:cc:a6:70:33:a0:2e:3a:ac:98:2e:
13:fb:75:41:d8:d3:7d:c7:bc:88:3e:25:24:aa:b9:
f1:01:da:aa:25:59:e3:b5:64:f1:b5:7e:3b:e9:c5:
c7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:8F:25:FD:C7:62:F8:4D:10:85:7F:B4:42:61:03:9E:6D:A9:C6:34
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e33342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.74.34.0/24
Signature Algorithm: sha256WithRSAEncryption
23:37:9b:97:eb:96:db:75:0f:d2:8f:1f:82:d9:40:04:00:1d:
0b:1b:50:4a:d5:a5:41:dd:ce:53:00:9a:7e:47:f7:a6:33:a9:
09:48:15:63:e9:4f:f0:9a:db:be:a8:72:c8:af:64:09:21:1e:
70:29:4a:2f:71:7a:9a:13:5b:f1:ab:b5:34:8c:52:69:ce:be:
c7:86:29:37:5e:5a:40:0d:30:d9:78:2a:52:15:2c:ff:b1:c1:
7a:7e:d1:9b:ee:7b:49:c7:72:1c:e1:f7:18:71:c5:62:5d:2e:
9d:66:e2:e6:d3:e2:4e:4a:b2:29:65:0d:ad:8b:89:4c:f7:22:
b0:3e:ff:3d:9c:2b:47:ab:2a:36:29:ab:24:bb:81:02:5c:c7:
59:05:c2:fe:2c:42:98:a7:4a:59:75:9a:77:56:81:d4:4e:f4:
13:78:26:98:76:59:af:fc:fb:24:a4:43:2b:2c:e3:b2:e4:46:
56:84:4a:45:12:b3:63:6d:ae:02:c4:1d:3c:d7:3a:d8:c8:2d:
09:ed:f4:50:56:96:26:d5:13:88:61:87:40:78:9a:11:22:49:
33:7f:5f:4c:54:13:04:45:77:fa:dc:88:90:e8:dd:7f:5a:56:
14:4e:63:dd:24:84:e7:38:84:77:8a:8d:d2:cf:69:3e:01:4d:
a3:c8:44:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 17:26:22 2026 by rpki-client