Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e34302e302f32342d3234203d3e20323138383632.roa
File: 3231322e37342e34302e302f32342d3234203d3e20323138383632.roa (raw, json)
Hash identifier: s/SKwm+oPQGQATwpYUjWICcIXood2Sr1ksJDA+499Pw=
Subject key identifier: AE:CA:42:08:B7:F5:B8:76:78:BC:C9:CE:5C:D1:84:22:0A:05:63:94
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 56224E5CBBC0C0CA7C63B593BAA400DE69E8797E
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e34302e302f32342d3234203d3e20323138383632.roa
Signing time: Mon 07 Sep 2026 06:21:29 +0000
ROA not before: Mon 07 Sep 2026 06:16:29 +0000
ROA not after: Mon 06 Sep 2027 06:21:29 +0000
asID: 218862
IP address blocks: 212.74.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 14:52:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:22:4e:5c:bb:c0:c0:ca:7c:63:b5:93:ba:a4:00:de:69:e8:79:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Sep 7 06:16:29 2026 GMT
Not After : Sep 6 06:21:29 2027 GMT
Subject: CN=AECA4208B7F5B87678BCC9CE5CD184220A056394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a6:e8:85:06:58:7f:7b:02:ca:57:1a:05:89:
ab:6c:ac:6f:96:f2:ea:2e:07:56:b0:9d:94:f6:f8:
ca:fe:30:77:5c:01:8c:b3:77:5a:70:6d:f0:a7:9c:
4f:2a:52:f7:77:3e:04:d8:e9:60:a1:2c:1b:11:1f:
5d:c1:43:9c:db:2b:4a:e6:a9:bb:29:52:48:ba:57:
02:17:b3:a3:31:64:19:9a:85:d5:02:70:d8:92:3a:
dc:64:d3:46:ca:a4:ea:d3:3c:13:74:1b:53:50:39:
8e:26:07:ee:b7:10:29:36:7c:d6:f5:a3:2d:02:e5:
91:81:59:70:f4:f9:39:2c:38:7d:81:47:6c:b3:d2:
29:f9:cd:7a:56:c2:a9:6d:03:03:0d:bc:b3:cb:fd:
6f:e6:07:5b:9b:01:e1:e3:d9:2d:42:c9:1a:3a:7b:
13:2f:14:5d:03:a1:70:64:09:9b:aa:8b:de:a4:cc:
c6:44:da:a4:75:2e:63:4b:c1:c6:2b:57:5b:4e:0d:
e7:96:7c:81:60:ff:7c:23:78:16:c1:61:ea:c1:46:
06:7c:4d:96:b1:ec:a7:38:90:e8:d6:e0:be:ed:0e:
8e:5f:ba:f0:ae:7f:d0:4e:6c:b5:50:24:f0:de:81:
50:a7:39:8c:b4:8b:12:5f:b2:c2:3a:2f:ae:a1:6c:
54:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:CA:42:08:B7:F5:B8:76:78:BC:C9:CE:5C:D1:84:22:0A:05:63:94
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e34302e302f32342d3234203d3e20323138383632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.74.40.0/24
Signature Algorithm: sha256WithRSAEncryption
05:1e:23:6e:9f:d0:5a:ef:9f:86:09:86:e3:a5:b3:61:07:12:
00:28:cd:bf:e3:42:68:f8:05:b0:5d:43:2f:ec:f1:d9:56:00:
37:fc:c8:ef:7a:70:27:11:45:7f:3f:d4:91:04:fe:d8:1e:b2:
92:74:d5:3d:1b:49:94:64:e9:78:6f:f9:35:5f:bb:e0:a6:bd:
66:ff:72:8d:52:c6:c8:e1:e8:fb:bf:a5:c2:85:29:53:7c:02:
f2:9d:1b:b9:b5:3b:43:5c:64:0f:70:dd:f2:d7:d3:8b:8e:26:
4c:cf:c2:fb:0e:7b:37:ba:39:3c:81:56:c6:cf:dd:c3:aa:30:
5a:2f:1a:c8:08:16:c2:a5:6c:8c:a0:7f:c9:1e:1f:20:e3:c0:
37:46:88:34:84:a9:e1:0f:c1:91:a4:cc:ca:54:91:ab:05:a2:
bc:67:a6:a1:83:9b:2e:fa:af:ef:ec:86:40:37:99:9b:79:dc:
6f:a3:d0:09:9c:1e:9f:22:12:9d:37:89:a2:0a:8b:91:5e:8a:
a0:f0:24:08:2c:91:42:5e:6c:76:ac:86:1e:d5:90:bb:f5:ca:
2d:f9:53:3c:9b:f1:0f:4e:c0:6c:71:ef:70:45:ba:3d:eb:e4:
11:b0:e3:e0:24:4d:b9:e7:f2:1d:cb:82:97:cb:e7:ae:5d:90:
e0:aa:ee:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 19:47:21 2026 by rpki-client