Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36362e302f32332d3234203d3e20383334.roa
File: 3231332e3133392e36362e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: gmWH6xBqv6iHkSUEaOI6mVn4z54Nuz/S3PczBQJukcU=
Subject key identifier: 29:30:CF:EC:66:72:28:19:2E:99:A3:22:E9:85:F1:34:3C:16:04:64
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 61A7020AFCAB4D7D8A842BE206A31FD8F3B9FB13
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36362e302f32332d3234203d3e20383334.roa
Signing time: Wed 03 Jun 2026 02:09:50 +0000
ROA not before: Wed 03 Jun 2026 02:04:50 +0000
ROA not after: Wed 02 Jun 2027 02:09:50 +0000
asID: 834
IP address blocks: 213.139.66.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:a7:02:0a:fc:ab:4d:7d:8a:84:2b:e2:06:a3:1f:d8:f3:b9:fb:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Jun 3 02:04:50 2026 GMT
Not After : Jun 2 02:09:50 2027 GMT
Subject: CN=2930CFEC667228192E99A322E985F1343C160464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:70:50:f0:32:ba:48:4f:41:15:37:3e:44:de:
30:7b:a0:cc:3b:20:28:9c:7a:04:d7:a6:e2:37:4b:
82:ca:e2:37:00:f1:d7:c2:79:33:f4:65:a5:02:a3:
4e:14:73:5d:88:f4:3e:ad:f4:99:cd:0e:72:a4:aa:
d4:b3:57:b2:85:97:9c:7c:6b:51:11:6e:9e:cb:9f:
3f:e6:49:b9:d0:2a:da:0a:5e:a6:84:2f:32:78:13:
16:3b:5d:55:98:f9:1a:81:c5:81:5e:f0:59:9a:05:
6b:ec:eb:ba:3c:0d:92:6c:38:50:92:de:21:bf:b9:
dc:41:9c:b3:90:5c:4a:6c:63:4d:8b:81:79:7d:eb:
9c:2e:72:f3:75:e6:dc:53:28:ac:39:52:53:e6:81:
14:de:d2:64:39:61:14:db:aa:d9:08:9b:c1:91:e0:
58:9e:8f:f7:b4:93:80:b6:99:42:86:eb:51:4e:f3:
52:b1:d2:fb:11:c7:d2:58:f3:09:54:93:10:17:7e:
26:73:04:3a:2c:e4:6d:4f:5d:fc:e9:0c:91:a9:84:
a8:b3:3d:64:60:89:64:68:53:49:3d:85:4b:94:56:
58:ea:2d:9e:d2:11:a9:c3:e4:0b:fb:c3:f7:7e:99:
ed:6c:2a:f2:85:9d:0c:1d:32:5c:4b:86:2f:55:c8:
67:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:30:CF:EC:66:72:28:19:2E:99:A3:22:E9:85:F1:34:3C:16:04:64
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36362e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.66.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:4c:0a:67:74:99:f6:cb:35:1f:c6:31:6e:88:fc:30:c2:15:
22:d2:9d:6a:28:3d:08:f1:b0:74:76:ae:23:e1:bf:34:dd:b6:
23:94:94:55:7f:ad:1c:91:c7:00:56:f8:a1:9b:d9:dd:04:b3:
59:3a:17:94:58:88:fe:c1:bf:c8:06:66:30:d3:68:4d:9c:25:
4d:66:68:be:f9:96:8e:95:c9:04:e9:90:eb:0a:1a:8e:51:8b:
0b:a4:24:40:44:0f:7b:b5:d1:55:a6:c8:3d:b6:0e:b6:d6:b1:
ac:68:e8:bc:85:76:d4:cf:24:09:c9:c1:ad:74:6d:44:c2:ad:
9d:a3:62:6b:f6:58:13:25:9f:8c:1f:e8:aa:28:a8:21:bb:a8:
9d:df:00:46:e6:0a:d0:d5:36:c2:0a:f3:31:30:18:9a:c9:2f:
7f:f9:7c:52:24:17:f1:09:8a:8f:a4:d5:e2:16:9d:67:8f:84:
e8:54:57:90:25:ca:47:df:5b:e4:46:8f:d2:aa:76:00:9d:9f:
49:7c:94:11:30:56:32:69:22:9a:18:6a:ed:9d:25:d9:fc:af:
c8:26:e1:b5:2b:54:2c:d8:aa:bb:87:6d:0d:71:05:ef:b9:23:
e2:cd:25:34:28:0d:c5:a7:e7:d0:cb:52:11:02:d8:74:f5:89:
7d:67:26:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:03:49 2026 by rpki-client