Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36372e302f32342d3234203d3e20383334.roa
File: 3231332e3133392e36372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: diQtt7F0K9Z9f6rsUOX/sfRFmXYl0sm1+9uI4Xz/ClU=
Subject key identifier: 77:F1:77:3B:82:B2:0B:77:04:78:37:00:DF:94:E7:E6:FB:43:29:66
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 5882C9C13B2CE8951C1A9C351C3887C8A7EBA007
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36372e302f32342d3234203d3e20383334.roa
Signing time: Sun 27 Sep 2026 06:50:19 +0000
ROA not before: Sun 27 Sep 2026 06:45:19 +0000
ROA not after: Sun 26 Sep 2027 06:50:19 +0000
asID: 834
IP address blocks: 213.139.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 06:11:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:82:c9:c1:3b:2c:e8:95:1c:1a:9c:35:1c:38:87:c8:a7:eb:a0:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Sep 27 06:45:19 2026 GMT
Not After : Sep 26 06:50:19 2027 GMT
Subject: CN=77F1773B82B20B7704783700DF94E7E6FB432966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b4:69:86:7b:4b:12:59:92:d4:53:e0:1c:9c:
6c:a6:07:a4:c3:38:03:cd:fd:32:35:6c:05:19:de:
a0:ba:62:37:86:aa:92:8e:b2:5c:d3:39:bc:48:ad:
1e:47:a9:d7:41:16:df:d0:66:9f:68:89:07:95:bd:
28:62:0f:87:57:5b:08:9f:cc:a5:e4:bd:63:3d:93:
5e:9f:9b:17:95:93:6b:3c:34:db:67:0b:34:ab:5d:
da:5a:78:cb:bd:f6:9d:f7:e8:1e:54:0f:8d:57:e8:
1e:a9:2d:79:23:ed:09:ef:68:f5:01:2d:d5:94:08:
6d:0b:9b:ee:ef:af:27:bb:c3:3f:38:98:aa:ad:37:
db:c2:af:df:59:a3:f3:e7:4e:aa:21:e3:e2:cf:60:
eb:58:13:1f:99:87:98:6b:e8:10:9d:0f:71:10:91:
00:72:84:b6:4c:87:86:da:a4:d2:07:b9:e7:5a:a4:
ea:00:f1:c9:2e:4d:72:86:79:fe:79:f4:12:10:19:
93:9d:42:af:ec:92:43:53:3d:ee:0f:88:4a:6b:b2:
fa:38:5c:dc:bb:c9:e0:d4:a0:67:2d:0d:4a:00:9f:
cb:86:0d:ce:b1:c6:24:b2:5c:17:2f:65:59:3a:a8:
b5:76:00:70:8c:f8:82:67:ce:1d:53:af:97:1d:b6:
d8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F1:77:3B:82:B2:0B:77:04:78:37:00:DF:94:E7:E6:FB:43:29:66
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.67.0/24
Signature Algorithm: sha256WithRSAEncryption
47:fa:45:12:b5:42:9b:42:60:cf:72:89:be:77:6c:6b:16:fd:
99:b7:3a:e9:0a:c2:9e:7a:2e:68:0c:4b:d6:eb:1e:de:f2:de:
eb:6a:28:a7:db:2b:8b:7f:16:9b:0e:f1:e3:3b:56:84:57:02:
96:d5:dc:ed:74:fd:bc:86:d7:3f:7e:59:1a:e4:84:e9:54:d7:
4d:97:cb:c9:ac:77:65:ea:e4:1e:82:ca:17:13:e6:22:66:2b:
f3:af:ff:c7:ef:70:b4:05:74:66:52:1a:cd:11:4b:bc:a8:23:
91:ff:8b:c1:2a:fc:01:7e:9f:81:3b:8d:77:5b:d9:86:63:95:
48:e1:fb:10:ec:b1:e7:ae:55:07:41:22:0d:3f:0b:8f:95:6c:
68:5b:c6:90:97:79:3a:3d:3e:e6:13:bd:04:3a:a6:31:66:5f:
7c:a1:c2:cc:5d:df:ca:4a:ce:57:65:38:88:e6:91:4b:1f:80:
3c:2b:36:7a:f5:b9:64:59:a9:62:a1:de:56:9a:97:5d:53:f2:
d1:d5:6e:5a:40:08:79:2e:75:dd:09:79:b5:09:a1:8c:21:da:
99:0d:3d:d2:83:b8:3b:0d:36:e5:81:ae:88:8f:65:b4:c3:9f:
d1:a6:37:5e:7b:6c:f6:c3:d5:ea:1d:e2:c3:57:c3:3d:84:16:
74:bd:08:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 18:23:00 2026 by rpki-client