Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e35362e302f32342d3234203d3e20323138383837.roa
File: 3231322e37342e35362e302f32342d3234203d3e20323138383837.roa (raw, json)
Hash identifier: v/vECf/sBjMPnrXjXdUcYw4sO4BWYqnWIWSyJ/68Wm8=
Subject key identifier: C2:43:32:E4:11:2A:D9:D7:65:12:AB:67:D8:7E:36:73:83:EA:89:87
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 261249CF19B4C551900C986759D49A03105BC9EF
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e35362e302f32342d3234203d3e20323138383837.roa
Signing time: Mon 07 Sep 2026 09:32:51 +0000
ROA not before: Mon 07 Sep 2026 09:27:51 +0000
ROA not after: Mon 06 Sep 2027 09:32:51 +0000
asID: 218887
IP address blocks: 212.74.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:12:49:cf:19:b4:c5:51:90:0c:98:67:59:d4:9a:03:10:5b:c9:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Sep 7 09:27:51 2026 GMT
Not After : Sep 6 09:32:51 2027 GMT
Subject: CN=C24332E4112AD9D76512AB67D87E367383EA8987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:04:9b:c7:12:89:25:6d:44:96:e1:88:15:da:
25:f1:53:3d:dc:ae:15:82:1b:0b:51:6f:ff:62:4f:
7d:1e:2c:9f:4d:89:b6:18:b3:45:76:21:bd:e5:1d:
22:50:c8:a3:fb:5f:38:c5:e1:f8:f5:c2:1e:96:ba:
27:25:da:6e:47:08:06:a5:6a:08:78:84:c7:4e:db:
ee:34:09:75:0c:2d:0f:96:a6:f2:9b:05:87:a6:35:
15:90:f5:b5:b5:72:13:0b:26:41:49:3e:bf:93:7f:
fe:e4:97:ba:2a:81:f3:53:d9:ee:c9:db:7d:4d:cc:
e7:f8:42:8e:26:f3:b0:f3:1f:c0:82:b5:08:c6:07:
23:7c:92:ee:43:e4:cf:f1:42:66:8b:45:72:85:0b:
ec:27:86:f6:43:b0:d4:c8:21:a2:7b:3f:0e:5f:07:
26:58:40:c0:05:aa:b6:0e:60:9c:25:3a:82:1b:52:
54:cb:ce:f8:c6:94:d0:c0:16:7f:c0:90:88:39:4b:
de:09:5d:5a:1b:d4:47:b5:46:fd:31:e6:37:47:a3:
0e:38:5b:31:19:c9:e6:1b:b9:64:07:bb:40:57:0c:
e0:85:b4:e6:32:47:9f:92:9d:f6:f8:36:01:73:7b:
61:4c:78:c1:ca:b7:a7:2e:a2:08:29:f8:d3:cb:cb:
26:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:43:32:E4:11:2A:D9:D7:65:12:AB:67:D8:7E:36:73:83:EA:89:87
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e35362e302f32342d3234203d3e20323138383837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.74.56.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:dd:76:87:ea:14:69:84:80:ab:d2:ec:48:76:57:d9:06:37:
69:7a:6f:44:05:40:2a:16:e8:84:d8:a0:59:88:80:fb:c7:20:
c4:77:ee:fe:6e:98:30:79:c6:83:d4:ea:b9:50:b8:1d:29:9d:
a1:f3:bc:96:33:c8:88:2e:32:52:5d:45:44:27:1c:54:59:9f:
38:50:cd:67:1e:a9:90:d4:fc:ea:f6:be:d6:79:c8:96:33:c9:
8c:e0:a5:76:51:62:41:51:22:cb:e6:b2:ca:ae:1d:2b:ca:50:
3a:40:54:bb:d1:a9:bf:b8:2d:93:39:0b:63:8b:28:7c:1c:29:
db:3a:ae:3d:c2:5a:9a:21:e6:d9:68:b8:07:10:dc:99:65:bf:
ee:0c:6c:be:de:2f:c1:2e:52:e4:5c:66:1e:0e:c0:b3:73:b4:
29:76:fd:df:86:b0:10:5f:67:9a:3a:f3:3a:1d:5a:63:ea:28:
a4:99:38:0e:80:57:fc:25:33:62:f2:de:11:7c:2b:b9:35:72:
9f:95:19:4e:2c:5c:b7:65:20:32:15:f5:f8:63:d7:eb:84:15:
d9:3b:7d:3c:80:55:73:8f:21:c6:f4:c8:71:d8:68:88:85:61:
71:d9:01:5a:2a:e2:fc:f3:a7:06:89:2b:3f:c7:2c:89:d3:9d:
24:e5:fb:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 16 07:32:54 2026 by rpki-client