Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/3231322e362e34382e302f32342d3234203d3e20343031373833.roa
File: 3231322e362e34382e302f32342d3234203d3e20343031373833.roa (raw, json)
Hash identifier: ZxxwePdbiW78fNSOv1bBP11xPv9WTPgkb7eypMWI7iQ=
Subject key identifier: F5:11:86:FF:A2:18:D0:1D:9B:D4:0E:E2:21:7C:AD:DE:18:0D:E4:84
Certificate issuer: /CN=0dd4cfa21d83abd8b565498180680d141a81960f
Certificate serial: 319188B43A4512C305452B8C1EDEEFFB1F778247
Authority key identifier: 0D:D4:CF:A2:1D:83:AB:D8:B5:65:49:81:80:68:0D:14:1A:81:96:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/3231322e362e34382e302f32342d3234203d3e20343031373833.roa
Signing time: Mon 31 Aug 2026 07:49:30 +0000
ROA not before: Mon 31 Aug 2026 07:44:30 +0000
ROA not after: Mon 30 Aug 2027 07:49:30 +0000
asID: 401783
IP address blocks: 212.6.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.crl
rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 19:43:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:91:88:b4:3a:45:12:c3:05:45:2b:8c:1e:de:ef:fb:1f:77:82:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd4cfa21d83abd8b565498180680d141a81960f
Validity
Not Before: Aug 31 07:44:30 2026 GMT
Not After : Aug 30 07:49:30 2027 GMT
Subject: CN=F51186FFA218D01D9BD40EE2217CADDE180DE484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a1:5a:88:79:03:ed:ed:72:2b:03:f7:a0:2d:
7b:db:51:34:14:7d:c1:73:4c:46:a5:19:44:bb:31:
a0:db:96:8a:46:1c:cb:5c:dc:20:91:d8:f6:d0:17:
ec:12:8a:15:a5:96:27:36:3b:cb:02:57:8f:55:68:
4c:a8:f4:a6:30:ae:09:64:3b:99:29:47:b3:9f:20:
29:0a:3a:49:bc:67:52:67:16:42:74:57:ee:1a:3a:
23:73:7d:28:9c:e2:38:00:34:88:8e:00:d3:57:d1:
d0:e7:a2:d3:5e:48:78:77:c7:94:42:b6:f0:e3:9d:
4c:95:e2:a3:dc:bd:d5:ef:e8:b1:96:77:11:a4:c7:
49:54:e6:71:e1:35:8b:54:10:76:a2:9d:80:0f:ab:
05:a5:b0:8b:aa:5d:e2:92:26:8b:8d:b4:78:43:aa:
04:78:25:4b:49:62:99:de:2a:6c:b4:77:23:e3:29:
70:8c:b5:e5:41:28:20:03:09:cd:4a:a7:c9:50:45:
93:6d:fb:ba:bf:83:1e:11:93:32:94:e4:b1:fc:99:
87:37:c7:2d:f6:a2:fa:9b:48:84:30:ec:4e:a7:3a:
ac:fc:f2:d6:92:d2:9a:68:73:aa:3e:b5:86:4f:21:
95:8c:56:3c:08:23:8c:fb:35:9e:b2:a3:77:59:57:
dc:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:11:86:FF:A2:18:D0:1D:9B:D4:0E:E2:21:7C:AD:DE:18:0D:E4:84
X509v3 Authority Key Identifier:
keyid:0D:D4:CF:A2:1D:83:AB:D8:B5:65:49:81:80:68:0D:14:1A:81:96:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/3231322e362e34382e302f32342d3234203d3e20343031373833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.6.48.0/24
Signature Algorithm: sha256WithRSAEncryption
61:6c:97:99:c1:93:17:ff:12:94:5c:06:97:0e:00:a0:cd:3a:
72:7a:84:72:27:2b:1c:f8:24:1e:cb:d1:53:23:10:a8:83:a7:
24:6b:91:f9:b7:8b:57:50:c1:57:2d:d9:65:1e:8c:df:3d:c0:
03:cb:53:e6:0a:18:e9:72:0a:79:89:c5:7a:f0:50:78:69:b9:
69:1c:7f:84:1e:09:86:4f:14:d6:93:bf:c5:73:c8:cd:1e:4c:
d5:1c:05:d1:5d:9c:ff:d9:76:53:7c:46:2b:04:c5:31:68:47:
c9:64:67:65:e0:b0:ff:15:f8:fe:9c:ec:b3:07:0c:47:2b:d3:
f5:bc:e2:08:bc:f4:70:08:64:de:f9:d8:f8:c2:cf:b1:bb:5e:
34:46:28:58:d0:1e:86:f2:01:d9:bb:33:d4:b8:08:cc:65:a8:
a1:90:2c:ae:97:03:cf:7c:6b:17:29:45:fb:d0:fa:40:99:7a:
c7:8c:91:f7:22:fe:f8:4c:e2:e7:a2:3f:6b:7d:be:46:55:92:
c2:88:06:48:65:4e:1c:b4:02:79:bd:8b:85:7c:66:7b:e4:c9:
7a:c0:0b:50:3b:fc:a8:39:bd:2f:4b:4b:8f:83:9c:29:5b:6f:
bf:6a:e3:5c:9b:30:22:cd:03:85:ae:82:10:31:7f:2c:18:8b:
d3:a3:b6:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:44:53 2026 by rpki-client