Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36342e302f32342d3234203d3e2039303039.roa
File: 3231332e3133392e36342e302f32342d3234203d3e2039303039.roa (raw, json)
Hash identifier: lCZOT7CUw//G2wSUIRSPoEnVhHBxs955MQWzeQPvQMk=
Subject key identifier: 30:2C:9D:42:7B:E1:3E:C8:4E:26:D4:7A:C3:CF:79:CE:FB:D0:9E:73
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 0C55738D42791CCBF324887345769FBC2AB35FF7
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36342e302f32342d3234203d3e2039303039.roa
Signing time: Thu 27 Aug 2026 12:49:30 +0000
ROA not before: Thu 27 Aug 2026 12:44:30 +0000
ROA not after: Thu 26 Aug 2027 12:49:30 +0000
asID: 9009
IP address blocks: 213.139.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 04:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:55:73:8d:42:79:1c:cb:f3:24:88:73:45:76:9f:bc:2a:b3:5f:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Aug 27 12:44:30 2026 GMT
Not After : Aug 26 12:49:30 2027 GMT
Subject: CN=302C9D427BE13EC84E26D47AC3CF79CEFBD09E73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:de:cf:d8:c8:76:06:24:ce:70:6a:b0:80:67:
4d:22:3e:fe:22:d8:a1:20:23:d1:2d:15:39:74:9f:
07:34:d9:dd:17:ac:65:5c:2a:a6:fa:27:ab:bb:f4:
5c:c3:3d:4e:1e:1f:1a:6f:21:eb:4b:01:b8:56:4b:
4b:4d:98:25:8a:49:b3:96:e6:fc:68:08:44:7c:ae:
0c:2a:70:6d:85:75:c8:25:ab:38:93:92:16:41:35:
8f:ea:2c:bb:86:a6:3c:6a:aa:e4:42:10:c7:c8:18:
41:05:c0:2d:1a:10:3f:bd:93:e3:fe:38:b8:45:3f:
c3:37:c1:b0:0f:a8:c9:9a:5c:4d:14:e7:4b:ac:fc:
7a:54:ff:1a:11:c7:42:6c:3a:aa:27:75:43:24:c4:
cf:14:c4:1c:ec:cc:64:45:91:3f:5b:51:41:74:a0:
d9:2e:c6:89:cb:dd:ad:1e:d0:13:7c:16:9b:3d:ad:
b5:5e:fc:14:20:88:bd:fd:c4:d6:23:59:ca:ef:3b:
31:48:4a:73:d1:66:c4:d1:dd:2f:49:74:3d:db:1b:
38:b7:90:03:7f:99:6b:1a:66:82:97:3f:2b:23:9d:
6f:be:0a:52:0d:7f:62:16:b9:c7:ef:57:67:cd:a0:
cc:40:99:d6:d4:95:5d:d8:ac:ea:6b:42:31:2d:86:
1a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:2C:9D:42:7B:E1:3E:C8:4E:26:D4:7A:C3:CF:79:CE:FB:D0:9E:73
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36342e302f32342d3234203d3e2039303039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.64.0/24
Signature Algorithm: sha256WithRSAEncryption
70:e2:4f:92:6a:47:f2:8f:30:83:7e:54:12:6c:00:f3:7e:b7:
49:a4:62:8a:8f:1f:6b:a5:8d:ab:80:df:34:99:61:9b:b3:ad:
02:cd:30:10:a7:01:a2:d1:ef:78:dc:a7:2c:e5:00:e7:2f:da:
cb:cf:7b:ac:65:ff:7b:9e:0e:c5:73:c8:7c:e9:0c:a8:36:5e:
22:30:9b:c5:74:65:44:cb:a8:a9:0e:62:fa:8b:68:bd:6d:96:
38:ae:da:17:c0:a2:95:dd:5b:d5:33:1c:b7:36:76:08:1b:03:
63:be:5e:32:1a:75:98:cc:a8:73:30:cd:6e:2f:1c:48:4e:85:
12:8e:c4:87:79:09:1f:39:fe:fd:b8:1d:7e:75:0b:56:a4:8d:
cb:6e:2e:87:f9:f2:1f:b9:63:49:bd:d3:dc:c2:07:0f:55:a6:
a7:b3:d9:f5:9e:6a:be:2b:0b:8b:3c:97:08:dd:f6:7e:09:53:
d5:68:07:8d:9d:d2:39:16:d2:06:38:2f:aa:2e:1a:1b:e4:08:
91:61:d5:15:32:0c:01:4f:3f:b8:a5:79:a8:a6:83:0d:7e:05:
07:6f:e1:0c:6e:2b:85:5d:78:b4:75:0e:48:de:81:a7:be:c3:
bc:52:f2:6c:66:e7:24:34:53:f1:8f:dd:de:40:cb:29:bb:a9:
fe:80:ff:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:32:10 2026 by rpki-client