Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e35322e302f32332d3234203d3e20383334.roa
File: 3231322e37342e35322e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: t4pH1bof8BYYSAfPz5vgycJ8phk4Fge+b2RmRYdlbG8=
Subject key identifier: 99:2F:BD:78:3D:9E:D8:3D:27:D7:07:A8:BF:08:2E:B9:74:E6:8F:75
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 088213555CFF5216AB28A79E3C7B250C6D5E9E8D
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e35322e302f32332d3234203d3e20383334.roa
Signing time: Fri 19 Jun 2026 05:15:38 +0000
ROA not before: Fri 19 Jun 2026 05:10:38 +0000
ROA not after: Fri 18 Jun 2027 05:15:38 +0000
asID: 834
IP address blocks: 212.74.52.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:82:13:55:5c:ff:52:16:ab:28:a7:9e:3c:7b:25:0c:6d:5e:9e:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Jun 19 05:10:38 2026 GMT
Not After : Jun 18 05:15:38 2027 GMT
Subject: CN=992FBD783D9ED83D27D707A8BF082EB974E68F75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8d:36:d2:ac:40:82:4b:d8:b8:36:6a:9a:7a:
08:1f:1c:11:d9:c5:39:58:df:01:9c:47:cb:0a:6a:
57:28:a2:bd:89:ce:47:aa:d7:84:17:fe:86:e3:ae:
d3:36:3b:fd:68:bf:b7:c4:6f:45:94:5f:77:e5:c4:
a1:90:e0:b0:c3:2f:88:80:52:94:e4:31:d3:df:10:
9a:b6:1a:87:05:3b:b8:d0:9d:a3:fa:e7:82:22:4c:
3d:08:09:49:db:9b:0d:a0:c7:e0:69:f5:87:e1:4c:
16:d2:34:d4:90:b6:3a:d6:b9:be:9a:39:91:7b:8b:
62:e5:75:b4:3a:73:c9:97:a6:60:8d:30:56:98:ff:
1d:60:d2:2d:65:40:7e:5c:11:85:7f:61:c0:e1:d5:
95:41:26:5c:a6:d9:85:ac:0a:58:63:6d:9c:7e:20:
95:03:4c:23:46:3e:81:b4:5e:81:fa:0f:13:63:7f:
1c:77:17:e4:0d:46:5c:63:11:31:fd:fb:e6:4d:fb:
39:0d:ae:24:5e:aa:8d:34:8e:78:e3:43:5f:f1:8c:
5b:8f:de:ce:a9:c1:ae:e3:4d:f8:c5:37:f2:be:7b:
9f:9c:f5:07:7c:e4:5e:e9:24:ab:b0:00:62:93:bf:
a1:c6:fa:a4:21:cb:61:d2:e7:f1:96:ba:fc:13:59:
a0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:2F:BD:78:3D:9E:D8:3D:27:D7:07:A8:BF:08:2E:B9:74:E6:8F:75
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e35322e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.74.52.0/23
Signature Algorithm: sha256WithRSAEncryption
af:fe:9d:0c:84:83:b0:bb:46:50:43:42:70:61:9f:c8:ef:e3:
7f:98:c0:bd:26:58:56:f3:69:80:2e:9f:da:ba:1d:41:00:c1:
ed:65:4f:28:51:61:8e:f0:9b:2e:42:a9:2d:4e:67:75:68:8c:
2f:7e:72:3f:46:cc:98:ed:c0:1c:e8:9d:3b:9e:c2:8a:bf:ae:
91:0a:94:0b:64:06:62:e3:2f:96:e8:52:c5:54:0f:e0:23:c7:
bc:45:a7:25:e4:80:36:e1:5c:a1:ad:20:d3:21:d4:96:44:4e:
7b:e6:8d:ac:a7:20:fe:8f:79:66:a5:22:41:55:d5:15:7f:84:
96:b5:e4:c2:56:d4:a7:1e:28:47:45:94:33:be:9e:96:e3:08:
74:1d:61:e2:ff:96:61:60:9e:c4:b3:47:6f:66:e1:5f:9e:ae:
d7:9a:7d:b6:f1:19:65:e0:bf:1e:de:98:e7:e8:61:b8:bc:aa:
69:6a:dd:0e:57:47:b6:10:e9:bd:1e:45:a6:93:df:76:27:72:
ea:3a:ba:3b:ec:2c:5e:da:c9:99:da:c5:ff:01:a9:e8:fe:c5:
46:09:80:bb:85:1d:a9:63:b2:5a:15:60:b1:93:a6:38:b9:4e:
4e:a8:12:12:00:82:02:fe:fe:ee:49:15:5c:6e:74:d8:40:a3:
9b:f0:be:92
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUCIITVVz/UharKKeePHslDG1eno0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1
NGFmZGU3NjAeFw0yNjA2MTkwNTEwMzhaFw0yNzA2MTgwNTE1MzhaMDMxMTAvBgNV
BAMTKDk5MkZCRDc4M0Q5RUQ4M0QyN0Q3MDdBOEJGMDgyRUI5NzRFNjhGNzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbjTbSrECCS9i4NmqaeggfHBHZ
xTlY3wGcR8sKalcoor2Jzkeq14QX/objrtM2O/1ov7fEb0WUX3flxKGQ4LDDL4iA
UpTkMdPfEJq2GocFO7jQnaP654IiTD0ICUnbmw2gx+Bp9YfhTBbSNNSQtjrWub6a
OZF7i2LldbQ6c8mXpmCNMFaY/x1g0i1lQH5cEYV/YcDh1ZVBJlym2YWsClhjbZx+
IJUDTCNGPoG0XoH6DxNjfxx3F+QNRlxjETH9++ZN+zkNriReqo00jnjjQ1/xjFuP
3s6pwa7jTfjFN/K+e5+c9Qd85F7pJKuwAGKTv6HG+qQhy2HS5/GWuvwTWaApAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUmS+9eD2e2D0n1weovwguuXTmj3UwHwYDVR0j
BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh
NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT
djNuWS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct
ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzIzMTMyMmUzNzM0MmUzNTMy
MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1Eo0MA0G
CSqGSIb3DQEBCwUAA4IBAQCv/p0MhIOwu0ZQQ0JwYZ/I7+N/mMC9JlhW82mALp/a
uh1BAMHtZU8oUWGO8JsuQqktTmd1aIwvfnI/RsyY7cAc6J07nsKKv66RCpQLZAZi
4y+W6FLFVA/gI8e8Racl5IA24VyhrSDTIdSWRE575o2spyD+j3lmpSJBVdUVf4SW
teTCVtSnHihHRZQzvp6W4wh0HWHi/5ZhYJ7Es0dvZuFfnq7Xmn228Rll4L8e3pjn
6GG4vKppat0OV0e2EOm9HkWmk992J3LqOro77Cxe2smZ2sX/Aano/sVGCYC7hR2p
Y7JaFWCxk6Y4uU5OqBISAIIC/v7uSRVcbnTYQKOb8L6S
-----END CERTIFICATE-----
Generated at Mon Jun 29 09:59:59 2026 by rpki-client