Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36362e302f32342d3234203d3e20313432323430.roa
File: 3231332e3133392e36362e302f32342d3234203d3e20313432323430.roa (raw, json)
Hash identifier: 5t9JgBLfbSHlr0AtP6HJsmpn/znBmM3oZbMVnSup99Y=
Subject key identifier: 86:88:1E:63:9B:98:A6:56:F6:11:72:0B:6C:1E:C3:90:FA:95:BC:47
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 10A4821C217AE250351C2305490B20B62B7C8A1E
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36362e302f32342d3234203d3e20313432323430.roa
Signing time: Fri 14 Aug 2026 14:47:56 +0000
ROA not before: Fri 14 Aug 2026 14:42:56 +0000
ROA not after: Fri 13 Aug 2027 14:47:56 +0000
asID: 142240
IP address blocks: 213.139.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 04:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:a4:82:1c:21:7a:e2:50:35:1c:23:05:49:0b:20:b6:2b:7c:8a:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Aug 14 14:42:56 2026 GMT
Not After : Aug 13 14:47:56 2027 GMT
Subject: CN=86881E639B98A656F611720B6C1EC390FA95BC47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:59:4d:ac:74:f1:34:78:2b:bb:10:48:28:8c:
8b:bd:e2:64:ed:22:a4:72:83:8c:28:ae:42:2c:2e:
32:76:b9:6d:8f:e8:73:6d:a6:e7:59:01:64:b4:31:
ac:58:5f:bf:93:c9:cb:d0:04:73:d4:4a:0c:28:2e:
34:11:43:97:ff:f8:fc:32:d6:fe:5e:07:f6:79:9c:
4a:f2:a4:12:ad:c6:7c:73:67:18:c8:39:e9:77:36:
5c:cd:33:88:72:31:8e:0f:63:b7:b9:2c:08:28:60:
da:b1:8a:5a:95:51:3d:67:6e:4b:b1:d0:1e:b0:d5:
d1:4f:29:f2:f9:1b:a2:db:44:3f:e6:ed:c6:23:c4:
29:1b:c5:34:f0:c6:b5:07:17:b7:e5:be:20:4f:63:
8e:c3:52:63:ba:49:f2:e2:b7:4b:35:5c:00:f5:2e:
6d:33:d0:93:1a:1f:c5:23:8b:9c:4c:c2:ed:ff:6f:
24:02:02:3f:5c:51:a5:86:6f:bb:62:29:d6:68:a3:
6e:27:60:8e:cb:b8:c9:8c:3b:7b:70:ee:60:eb:cb:
6b:f6:8b:05:3e:54:b2:59:99:e7:77:c4:18:c3:68:
af:a6:0c:c0:47:5a:6a:3a:06:a2:17:9b:d8:a2:c6:
d2:4c:f7:ee:0b:91:2c:33:0c:a4:2c:b4:0e:99:df:
67:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:88:1E:63:9B:98:A6:56:F6:11:72:0B:6C:1E:C3:90:FA:95:BC:47
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36362e302f32342d3234203d3e20313432323430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.66.0/24
Signature Algorithm: sha256WithRSAEncryption
38:bc:bc:92:da:da:ae:ed:4e:2f:41:e4:45:35:4f:26:c5:66:
3e:71:a8:d3:66:49:89:7f:f1:48:4f:2b:3b:06:0e:c4:58:d8:
8e:ae:8b:ac:d1:97:b9:b0:98:a0:fe:64:5f:c5:90:e9:8e:74:
61:56:0a:47:31:b1:31:44:7a:d7:0b:e2:4f:28:0a:4d:8e:1d:
e3:0c:5f:9a:cd:30:5c:71:22:a7:a8:42:b2:84:65:b6:dc:50:
7f:c0:9a:91:08:de:a3:d9:be:f4:dc:b6:4b:14:08:6d:c8:8d:
d6:ef:63:51:06:0c:72:06:03:e0:99:44:99:27:21:0a:1c:bb:
12:43:0c:08:0e:8f:0f:0e:0b:73:3a:ff:0f:b1:8f:ca:c4:86:
be:79:aa:3b:05:d4:96:ab:4c:04:0e:fb:5d:7a:0a:66:7e:6a:
d3:74:7b:ab:c6:78:d7:84:c7:d4:80:11:fa:0f:61:ec:06:ce:
05:dc:3b:6f:04:11:46:98:9d:f1:c7:d5:c9:01:65:e2:35:17:
5c:7c:cb:fc:8d:47:7c:6f:00:10:a7:99:3f:a2:5a:97:3c:96:
99:c5:32:9e:43:b9:bf:55:8f:e0:26:5e:e2:04:d0:79:f7:80:
e9:a3:49:09:d4:0e:b1:da:70:39:07:03:91:d1:e3:7c:d9:06:
c1:07:4c:45
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUEKSCHCF64lA1HCMFSQsgtit8ih4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjY4M2YyZWI1MGM1OTk5YTc3NDU2ZTg4MjY4MzE2MDlk
NDhjN2QzZTAeFw0yNjA4MTQxNDQyNTZaFw0yNzA4MTMxNDQ3NTZaMDMxMTAvBgNV
BAMTKDg2ODgxRTYzOUI5OEE2NTZGNjExNzIwQjZDMUVDMzkwRkE5NUJDNDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVWU2sdPE0eCu7EEgojIu94mTt
IqRyg4workIsLjJ2uW2P6HNtpudZAWS0MaxYX7+TycvQBHPUSgwoLjQRQ5f/+Pwy
1v5eB/Z5nErypBKtxnxzZxjIOel3NlzNM4hyMY4PY7e5LAgoYNqxilqVUT1nbkux
0B6w1dFPKfL5G6LbRD/m7cYjxCkbxTTwxrUHF7flviBPY47DUmO6SfLit0s1XAD1
Lm0z0JMaH8Uji5xMwu3/byQCAj9cUaWGb7tiKdZoo24nYI7LuMmMO3tw7mDry2v2
iwU+VLJZmed3xBjDaK+mDMBHWmo6BqIXm9iixtJM9+4LkSwzDKQstA6Z32dvAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUhogeY5uYplb2EXILbB7DkPqVvEcwHwYDVR0j
BBgwFoAUtoPy61DFmZp3RW6IJoMWCdSMfT4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTAxYzE0ZmItYjY2MC00ODlkLTllOWYtOTQwMmU5ZTJj
MmUyLzAvQjY4M0YyRUI1MEM1OTk5QTc3NDU2RTg4MjY4MzE2MDlENDhDN0QzRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3RvUHk2MURGbVpwM1JXNklKb01XQ2RT
TWZUNC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTAxYzE0ZmIt
YjY2MC00ODlkLTllOWYtOTQwMmU5ZTJjMmUyLzAvMzIzMTMzMmUzMTMzMzkyZTM2
MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM0MzIzMjM0MzAucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADVi0IwDQYJKoZIhvcNAQELBQADggEBADi8vJLa2q7tTi9B5EU1TybFZj5xqNNm
SYl/8UhPKzsGDsRY2I6ui6zRl7mwmKD+ZF/FkOmOdGFWCkcxsTFEetcL4k8oCk2O
HeMMX5rNMFxxIqeoQrKEZbbcUH/AmpEI3qPZvvTctksUCG3IjdbvY1EGDHIGA+CZ
RJknIQocuxJDDAgOjw8OC3M6/w+xj8rEhr55qjsF1JarTAQO+116CmZ+atN0e6vG
eNeEx9SAEfoPYewGzgXcO28EEUaYnfHH1ckBZeI1F1x8y/yNR3xvABCnmT+iWpc8
lpnFMp5Dub9Vj+AmXuIE0Hn3gOmjSQnUDrHacDkHA5HR43zZBsEHTEU=
-----END CERTIFICATE-----
Generated at Fri Sep 4 20:23:46 2026 by rpki-client