Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36362e302f32342d3234203d3e20313436383133.roa
File: 3231332e3133392e36362e302f32342d3234203d3e20313436383133.roa (raw, json)
Hash identifier: rSDiTxPDq8fZohf24SgUGrU5pySdRUQuMLkGmS75J+s=
Subject key identifier: D2:55:DF:6C:74:F7:84:38:32:A8:DA:24:76:63:58:B1:17:C8:6D:7B
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 523454A7A9934947BECCF18EC30DFB1E08F802BC
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36362e302f32342d3234203d3e20313436383133.roa
Signing time: Fri 25 Sep 2026 13:48:40 +0000
ROA not before: Fri 25 Sep 2026 13:43:40 +0000
ROA not after: Fri 24 Sep 2027 13:48:40 +0000
asID: 146813
IP address blocks: 213.139.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 12:34:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:34:54:a7:a9:93:49:47:be:cc:f1:8e:c3:0d:fb:1e:08:f8:02:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Sep 25 13:43:40 2026 GMT
Not After : Sep 24 13:48:40 2027 GMT
Subject: CN=D255DF6C74F7843832A8DA24766358B117C86D7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d7:c4:cd:bc:fe:74:f3:65:df:c3:8e:fa:3f:
2f:25:27:7c:9f:75:4e:46:06:2b:a4:4e:88:86:74:
cd:d3:43:fc:1c:36:f2:63:eb:2c:78:9d:e0:2f:86:
1c:c6:cb:44:59:21:b7:c1:a9:5f:61:36:37:ab:0d:
62:37:f3:e7:a5:6f:5c:7b:49:e4:2a:37:42:4e:06:
24:e5:7f:92:22:52:39:65:ce:66:02:34:ce:15:7e:
2d:08:d7:f8:98:6b:5f:10:71:9d:96:38:51:c7:ed:
78:5a:56:e9:c3:ea:bb:4f:df:f0:3e:75:28:5e:61:
52:c7:f0:0e:65:b6:f5:54:fb:ad:2f:83:1d:49:60:
58:2c:48:0b:3b:58:c3:f4:e8:b0:fa:45:de:65:5b:
bb:71:40:6a:50:56:3f:89:14:5d:a7:fa:6c:6b:eb:
f1:29:0e:0b:1f:3c:24:00:62:2a:e5:f8:ca:0a:c1:
06:37:35:ba:76:34:9b:bc:dc:d8:fd:ae:34:a4:0a:
0c:63:3c:75:12:e9:90:35:eb:90:49:be:9d:a1:0f:
b4:18:de:9a:84:59:99:45:19:c0:53:83:89:7f:45:
26:69:16:b9:da:4e:3b:f0:3c:6a:b6:2f:d7:fd:be:
8e:f9:53:96:b0:e0:96:aa:9c:4e:ef:88:64:e0:af:
8d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:55:DF:6C:74:F7:84:38:32:A8:DA:24:76:63:58:B1:17:C8:6D:7B
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36362e302f32342d3234203d3e20313436383133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.66.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:03:5d:d0:38:05:ea:cf:d9:b0:6d:a5:78:40:de:f9:3f:10:
c0:8f:20:2e:62:ac:83:e9:fc:da:a8:6a:20:05:88:54:ed:0d:
c8:c0:36:73:7d:32:12:81:46:6f:5a:fd:91:df:df:16:65:8d:
10:ff:26:b5:c4:99:db:6c:77:1e:0b:38:9f:27:ae:30:b1:6f:
a5:b0:ad:43:f9:2c:cb:54:80:4d:85:97:ae:b7:1e:ca:bb:eb:
68:32:5e:1b:44:ac:a2:85:87:1b:46:58:26:69:21:fa:39:70:
5f:6c:63:2a:63:44:d4:f2:42:5b:4f:24:b6:1b:35:67:48:a5:
4d:53:11:df:08:e1:76:ce:61:24:f0:dd:00:ea:91:98:50:64:
dd:29:2a:56:6d:b4:8f:5a:45:0e:29:ff:f6:fe:43:60:9c:64:
61:ab:cd:1a:2f:df:f0:f7:36:73:a4:60:93:f8:3f:14:a8:1f:
e6:6a:c0:3a:92:cf:3b:ef:20:cf:dc:f4:5f:2d:9c:bf:1f:54:
28:97:cd:77:59:90:3d:8c:26:8f:73:c4:4d:01:a7:21:09:fd:
88:a6:ff:68:d0:37:65:91:e8:d6:a2:33:9b:2f:67:8f:e1:b6:
0a:37:ad:e4:98:e5:c4:a6:e4:e7:a5:24:08:73:cf:72:a7:56:
81:0f:e8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:18:20 2026 by rpki-client