Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36362e302f32332d3234203d3e20383334.roa
File: 3231332e3133392e36362e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: /fEFWqqLrd+Ts0CFxmSPtqlc3u0CZ4xk9QWgLc2rXd0=
Subject key identifier: 6F:0D:D7:5C:9D:9F:08:3E:EC:23:C3:2D:5A:3E:60:A9:F3:3E:5E:1F
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 4AA889CD5900B5781B586D4EE3FAECFD86D46168
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36362e302f32332d3234203d3e20383334.roa
Signing time: Sun 25 Oct 2026 13:48:44 +0000
ROA not before: Sun 25 Oct 2026 13:43:44 +0000
ROA not after: Sun 24 Oct 2027 13:48:44 +0000
asID: 834
IP address blocks: 213.139.66.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 13:08:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:a8:89:cd:59:00:b5:78:1b:58:6d:4e:e3:fa:ec:fd:86:d4:61:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Oct 25 13:43:44 2026 GMT
Not After : Oct 24 13:48:44 2027 GMT
Subject: CN=6F0DD75C9D9F083EEC23C32D5A3E60A9F33E5E1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d6:61:63:97:8c:71:f8:3b:84:05:05:a7:b4:
7f:08:83:3b:bb:df:e2:64:b3:39:a8:54:47:db:d1:
7f:64:74:48:07:f0:e7:d4:31:9c:75:cb:c7:fe:50:
65:53:96:42:09:8c:56:3f:73:88:41:65:62:d6:03:
fa:95:5c:79:80:83:18:da:89:48:fc:47:b6:3b:ec:
73:6e:14:50:03:62:08:9f:1b:74:1d:ab:e0:3b:77:
50:f2:ef:b6:2f:25:72:0b:e6:77:68:86:55:7f:33:
e9:56:f8:80:fa:d1:e2:64:ca:97:f3:8b:86:1e:01:
30:72:8c:bd:35:b7:12:12:e2:f2:d3:65:13:b6:a4:
67:92:af:74:9a:f0:b6:3c:cc:0a:f4:a7:51:5d:e8:
c1:a2:3f:b0:0e:4a:81:72:92:9d:4b:a3:85:d6:62:
86:01:eb:fe:a8:ed:fe:9e:3f:43:61:66:f7:fc:52:
31:62:79:ee:d5:da:58:2b:2f:05:c6:92:8e:be:37:
e7:e4:9d:6f:d3:5f:b5:5b:f3:19:b9:48:a4:f1:99:
93:d8:4b:54:e6:c3:1e:cf:90:01:a8:a8:4e:e7:a9:
f1:6b:76:ba:2b:1f:07:da:10:13:fa:2c:22:0f:ae:
fe:63:60:64:c9:71:2f:d3:a2:3f:1e:c0:83:7d:6a:
7c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:0D:D7:5C:9D:9F:08:3E:EC:23:C3:2D:5A:3E:60:A9:F3:3E:5E:1F
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36362e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.66.0/23
Signature Algorithm: sha256WithRSAEncryption
98:8f:9b:c4:de:05:42:6a:c9:13:f1:78:fe:1d:4b:75:ac:f1:
e9:aa:92:98:b1:af:be:61:b2:7c:48:d5:7e:85:ff:ed:2e:4a:
d9:46:ca:80:87:df:43:31:0a:0c:13:1b:bc:97:b1:c2:67:ab:
ed:51:f3:d2:9e:f3:94:02:47:5e:7f:53:5f:76:13:5c:36:56:
49:ba:59:4e:bc:3f:be:18:96:57:af:de:74:2b:dc:5d:6d:4e:
9c:6a:19:3f:9c:d3:91:50:fc:31:51:80:7b:dc:64:8f:e1:d7:
c8:de:be:fc:78:03:41:65:f1:4e:62:8f:77:ed:fa:30:31:3b:
31:85:d4:36:f7:04:83:ad:bc:78:84:f3:4d:b2:57:b2:18:81:
58:b6:50:f2:33:9f:48:97:69:af:5e:c9:39:7f:c9:e4:9e:7d:
f2:0c:1f:81:ee:b1:1a:34:e2:2c:77:77:2f:5d:fc:54:2d:ff:
5b:a8:fe:9c:5c:19:f7:7f:c6:72:81:44:86:3d:18:dc:7a:4c:
ac:59:99:5a:81:9c:2d:11:a9:a4:c4:c8:c2:13:a4:b5:61:8b:
67:27:26:10:b3:7d:46:8d:16:c1:34:c2:9d:f6:0f:c1:ee:79:
f0:16:77:43:98:0a:c8:4a:5c:b4:cf:1f:73:3f:13:da:d9:c7:
f3:e0:11:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 04:22:01 2026 by rpki-client