Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36392e302f32342d3234203d3e20383334.roa
File: 3231332e3133392e36392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: ltBPoGvI8LMOGTQFixOZhqY2LJ/20YwdXHn/7p1ROpI=
Subject key identifier: 42:05:01:7C:3F:E8:29:87:2E:86:A8:DA:1D:2D:82:7B:92:D6:47:61
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 27B77EA499AF299D4D5AD2DF35CF9CE51D00DBB5
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36392e302f32342d3234203d3e20383334.roa
Signing time: Sun 25 Oct 2026 13:30:14 +0000
ROA not before: Sun 25 Oct 2026 13:25:14 +0000
ROA not after: Sun 24 Oct 2027 13:30:14 +0000
asID: 834
IP address blocks: 213.139.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 13:08:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:b7:7e:a4:99:af:29:9d:4d:5a:d2:df:35:cf:9c:e5:1d:00:db:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Oct 25 13:25:14 2026 GMT
Not After : Oct 24 13:30:14 2027 GMT
Subject: CN=4205017C3FE829872E86A8DA1D2D827B92D64761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7a:7d:b1:2c:5c:33:a8:41:cf:0c:65:06:2d:
f5:06:07:13:f3:65:57:90:e2:85:57:a3:02:02:06:
3a:6c:5e:86:8c:da:60:47:49:49:c7:20:e1:e7:a6:
98:a3:04:f8:8c:3f:d0:38:8c:67:53:bf:89:1f:91:
d6:af:a5:21:84:7e:88:0a:5d:e6:19:6d:89:99:44:
48:3f:2e:d4:23:ea:67:5f:0d:e3:eb:3b:fd:f6:4d:
37:2b:c2:29:82:43:48:38:7d:44:53:9d:bf:83:04:
32:5f:5a:b0:3a:8c:6c:2e:3a:e3:ea:34:2b:b7:41:
af:a2:1f:82:a4:d6:cb:36:f4:95:26:db:86:f5:a0:
c9:5d:e9:c5:ed:79:c3:e2:73:04:04:49:c2:e0:80:
57:49:17:e9:db:a0:89:b9:c6:14:3f:da:11:51:bf:
ea:51:47:b1:8d:2b:4c:6a:e2:d5:45:e2:f9:7c:89:
64:de:94:56:db:ad:b8:39:eb:8f:4b:5d:0c:c8:44:
96:de:dd:f5:34:ab:f2:81:17:eb:d7:1d:de:e3:7b:
6e:ef:f4:cb:ae:4c:44:a0:9c:df:db:78:3a:29:58:
91:7d:ce:41:14:01:29:eb:9b:65:c8:24:80:c2:99:
ba:90:e9:4c:a8:ce:52:15:4d:6c:db:4e:66:60:76:
28:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:05:01:7C:3F:E8:29:87:2E:86:A8:DA:1D:2D:82:7B:92:D6:47:61
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36392e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.69.0/24
Signature Algorithm: sha256WithRSAEncryption
61:4d:3a:b7:36:87:fc:4a:f7:68:59:1c:18:e3:23:7d:c2:a1:
4b:91:e7:fc:25:2a:4a:7e:a0:c3:b0:9d:39:49:b3:21:52:ec:
2a:8f:de:6c:7b:10:1e:98:ff:89:30:e8:f9:53:b8:87:3e:c4:
38:21:c2:d9:cd:67:00:d3:b3:6e:e8:9a:79:a4:a7:75:99:0d:
22:12:02:0c:87:9e:2c:6a:01:5f:78:c0:c7:13:5d:29:70:18:
50:23:21:3a:6c:74:dc:02:27:cd:cf:0f:c7:ba:fa:c3:fd:9e:
8e:19:a9:f2:0d:0b:26:1d:ef:32:18:c1:60:b5:fe:70:7c:5b:
9f:6a:be:ea:1f:fc:d5:37:81:ab:31:7a:df:29:78:35:42:c1:
e7:4e:ff:5d:fb:09:d8:eb:ee:a7:67:85:87:fc:7b:98:54:67:
cc:1d:9d:76:b4:3f:a0:2a:32:b0:16:1f:7d:fd:61:df:e0:b6:
fb:b0:2f:16:a2:8c:9a:99:b3:cf:af:ab:10:7e:9c:2f:14:e7:
ce:00:db:7a:70:e9:13:f2:c5:31:91:21:00:33:2e:b3:89:9d:
a6:7b:10:01:31:ba:34:9a:33:61:cf:3f:91:93:88:2a:eb:2d:
23:10:4d:38:05:2c:3b:83:bd:5f:c5:5f:f4:23:e9:8d:74:68:
05:02:58:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 04:23:04 2026 by rpki-client