Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36392e302f32342d3234203d3e20313436383133.roa
File: 3231332e3133392e36392e302f32342d3234203d3e20313436383133.roa (raw, json)
Hash identifier: RrpOirPaASxmPT1c3cWrzIwLbF20+al2mguK3utGcDM=
Subject key identifier: EC:C0:FD:A7:63:62:84:BB:54:2F:60:4C:6A:A6:49:B2:5A:E8:98:9D
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 6054DCD422707DCF837F2EEC8C626DA5CE6E4AE5
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36392e302f32342d3234203d3e20313436383133.roa
Signing time: Fri 25 Sep 2026 13:27:59 +0000
ROA not before: Fri 25 Sep 2026 13:22:59 +0000
ROA not after: Fri 24 Sep 2027 13:27:59 +0000
asID: 146813
IP address blocks: 213.139.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 12:34:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:54:dc:d4:22:70:7d:cf:83:7f:2e:ec:8c:62:6d:a5:ce:6e:4a:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Sep 25 13:22:59 2026 GMT
Not After : Sep 24 13:27:59 2027 GMT
Subject: CN=ECC0FDA7636284BB542F604C6AA649B25AE8989D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ff:3f:6e:3a:2c:4a:88:1f:c1:1b:7d:08:e7:
4f:31:ea:c2:e2:cb:fd:7c:4e:10:84:28:9e:22:16:
d1:2f:4e:99:72:f3:b0:c2:1f:17:40:f2:a4:c5:a6:
66:8e:e2:d1:9d:d6:18:c2:66:27:f2:c0:63:68:23:
5f:59:e9:58:81:f7:5a:e7:7c:98:b5:08:22:39:c9:
14:47:b7:cc:9d:09:35:75:c7:64:15:01:12:24:86:
75:a1:12:af:8c:e6:b2:21:fc:50:fc:12:56:56:d2:
b2:f1:b5:17:62:87:23:6b:80:69:a1:99:9b:8d:cd:
0b:c6:9e:2b:fa:4f:40:cf:b5:ab:ee:74:79:8b:c0:
3c:4d:f3:30:28:af:16:c5:25:0d:95:13:09:9b:2e:
d3:54:f7:e9:91:13:f8:83:85:43:dd:18:b8:83:2f:
22:43:91:d5:e4:3a:cf:1e:95:b1:36:32:99:96:4d:
23:46:d0:78:27:47:89:7a:b2:8e:5e:4e:2d:1a:ff:
4c:6b:e1:74:b2:44:92:6a:c5:42:e8:8f:4c:9e:d6:
44:0a:53:fe:89:37:d2:0b:94:45:25:65:e5:1a:fb:
e1:a1:ae:04:da:b4:fa:98:ca:12:ed:17:78:5f:ba:
20:e5:14:cf:ab:d9:8f:a5:9f:70:ef:70:da:bb:af:
65:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C0:FD:A7:63:62:84:BB:54:2F:60:4C:6A:A6:49:B2:5A:E8:98:9D
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36392e302f32342d3234203d3e20313436383133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.69.0/24
Signature Algorithm: sha256WithRSAEncryption
09:fc:18:4d:60:03:06:3b:52:6f:7a:7b:df:a0:d2:80:c7:89:
c6:c9:19:2d:4f:a9:a8:52:86:3f:aa:ed:97:02:d7:a5:89:d0:
f5:33:a8:42:39:69:88:dd:df:1c:93:81:32:82:78:a7:5f:30:
ce:3d:bf:e1:d6:a4:db:03:d4:f7:f8:a6:75:95:3e:2b:27:49:
6a:0a:c2:cf:33:f3:3c:61:61:1b:a5:f3:a8:09:b1:45:ad:ac:
6b:f5:3e:95:e8:83:06:9d:d0:7c:83:20:b8:9b:68:35:ed:37:
9f:af:2e:d0:20:ec:ea:55:4e:a8:10:f4:20:9e:c5:69:fb:3c:
8b:20:88:cb:38:59:16:6b:e5:87:4e:1a:58:1e:ce:32:d1:4f:
46:22:24:15:fa:47:10:c7:e3:71:99:df:fd:17:5f:1e:51:db:
db:4c:74:05:c2:a0:bf:3a:b8:71:e5:c9:90:fa:50:02:a2:c6:
55:3b:95:de:84:70:72:07:99:1b:db:e8:d8:6a:11:c4:63:33:
71:bf:44:75:4f:b7:e6:d0:0d:00:a3:2c:02:e0:6e:f1:36:e8:
a6:10:d3:b6:36:3a:b3:be:53:12:c9:23:4c:fb:95:f2:f1:f1:
12:9c:18:3c:32:5d:57:0b:48:b5:f1:69:54:e4:e9:a0:3e:f9:
e7:7e:d8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:18:23 2026 by rpki-client