Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e34392e302f32342d3234203d3e20323138393138.roa
File: 3231322e37342e34392e302f32342d3234203d3e20323138393138.roa (raw, json)
Hash identifier: FFtjBa2+uFWqHpdhSs6VUwXzcELCvTygfeUUk+fts34=
Subject key identifier: 6A:33:62:5F:5A:93:95:E3:FF:9B:04:CF:D6:D8:E7:03:73:E2:FD:84
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 7D5911B6F2218C821CFA7F59349770B2189AC4A2
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e34392e302f32342d3234203d3e20323138393138.roa
Signing time: Mon 24 Aug 2026 06:38:13 +0000
ROA not before: Mon 24 Aug 2026 06:33:13 +0000
ROA not after: Mon 23 Aug 2027 06:38:13 +0000
asID: 218918
IP address blocks: 212.74.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:59:11:b6:f2:21:8c:82:1c:fa:7f:59:34:97:70:b2:18:9a:c4:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Aug 24 06:33:13 2026 GMT
Not After : Aug 23 06:38:13 2027 GMT
Subject: CN=6A33625F5A9395E3FF9B04CFD6D8E70373E2FD84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f5:42:7e:92:03:5d:69:2c:32:8f:89:4a:c9:
1a:48:8a:4e:6f:f7:91:8b:9e:99:03:61:84:7a:e5:
4f:8b:8e:02:fe:ae:62:25:8e:c3:e2:90:d8:86:a1:
59:03:73:a4:0b:16:25:4f:11:a1:5d:74:42:1a:a7:
66:b6:41:2e:ed:a2:c0:86:42:3f:01:e1:f6:5f:19:
62:5b:e8:40:65:bc:42:80:27:f7:68:77:77:1e:5b:
b8:7a:27:f6:93:82:14:32:0e:ef:d0:bb:b2:94:7d:
8e:f7:08:ab:43:4f:9b:e2:1e:84:48:1a:63:1c:e6:
ee:cd:b0:bb:49:5b:9f:4b:6e:56:2b:02:95:7a:48:
e0:19:9a:01:48:fb:3d:f8:1d:61:97:e9:19:96:67:
fe:9a:d8:4f:3f:ee:c7:e3:d3:bf:d3:e3:a9:99:58:
92:b4:08:91:ac:88:18:68:88:f1:fc:37:41:9e:4c:
a4:58:c2:3e:27:02:fa:d5:36:9a:66:a5:1a:0a:c2:
49:6b:63:4b:c3:d1:a3:01:ea:c6:58:d1:60:cd:b3:
85:a3:1a:fa:b5:a3:36:df:37:d9:c8:2a:3c:d6:4f:
da:d9:e9:2e:ad:51:19:7a:f7:6b:4f:f1:51:b0:ef:
ec:2b:bc:3f:2d:89:63:ef:3e:23:69:2c:18:8f:59:
c1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:33:62:5F:5A:93:95:E3:FF:9B:04:CF:D6:D8:E7:03:73:E2:FD:84
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e34392e302f32342d3234203d3e20323138393138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.74.49.0/24
Signature Algorithm: sha256WithRSAEncryption
81:40:34:70:76:c3:8b:52:e9:df:45:80:6b:76:07:1e:32:68:
92:bd:3a:a9:3b:73:3b:a0:b7:bd:53:be:f7:ce:f9:a0:70:ea:
76:ca:5a:5e:46:06:a7:73:75:01:4b:66:a0:ff:f6:16:9f:b8:
d8:61:5e:b8:9f:6f:45:64:f5:3d:7d:73:86:d4:0e:49:13:21:
29:a8:48:be:a0:05:18:81:61:90:db:36:56:6d:31:4d:44:2f:
90:17:ea:d6:54:6a:9b:ae:85:5f:ce:12:ae:a7:93:ea:ea:40:
3d:6f:3f:ec:6d:a5:90:80:3d:af:dc:ea:6a:8e:cd:ae:fd:3e:
8e:38:2c:57:f0:39:8d:4c:f6:40:21:cb:13:de:75:04:90:7a:
70:86:88:60:0c:f0:5d:a6:d4:04:9d:e2:3c:13:03:77:db:cf:
f7:c2:de:33:5d:09:df:a2:2e:59:05:98:52:fe:05:1e:f1:f1:
a9:14:b6:c7:9b:81:1d:05:c9:c0:48:8e:ab:28:0c:1b:f5:2a:
4f:f6:cf:a6:a1:49:7b:5c:4d:27:14:17:92:e7:1a:44:83:29:
ef:b0:b5:a4:95:1a:08:f0:cd:7d:eb:c6:71:a0:c7:1b:60:e2:
33:bb:af:8a:da:f6:9c:d2:dc:24:05:37:83:04:a8:f2:31:14:
9e:5b:ea:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 16:29:10 2026 by rpki-client