Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37302e302f32342d3234203d3e203631333137.roa
File: 3231332e3133392e37302e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: dwbyJCtBdp+JkGUYAgtx7UvsHYfO6HdHWwhgMdccyTg=
Subject key identifier: 1E:B7:F8:52:E2:E9:95:CD:A0:A7:6F:72:52:65:A9:C4:C4:35:7C:CE
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 3A944B31FE5F8923F9D01BD41CC32E745B27D902
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37302e302f32342d3234203d3e203631333137.roa
Signing time: Wed 30 Sep 2026 14:49:35 +0000
ROA not before: Wed 30 Sep 2026 14:44:35 +0000
ROA not after: Wed 29 Sep 2027 14:49:35 +0000
asID: 61317
IP address blocks: 213.139.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 00:54:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:94:4b:31:fe:5f:89:23:f9:d0:1b:d4:1c:c3:2e:74:5b:27:d9:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Sep 30 14:44:35 2026 GMT
Not After : Sep 29 14:49:35 2027 GMT
Subject: CN=1EB7F852E2E995CDA0A76F725265A9C4C4357CCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d5:5e:32:e2:a3:3b:65:88:34:be:96:2c:c3:
09:cf:6e:1a:34:41:94:d6:0e:22:c7:fb:8a:c1:68:
f5:c2:57:1f:c1:b7:4f:ca:4b:a1:9e:08:dd:37:aa:
4b:04:2a:ea:81:58:63:06:fa:70:e1:12:1e:f1:61:
e0:90:74:b9:3b:7e:85:d6:b6:09:52:68:e6:12:c9:
35:f0:f5:a4:a6:6a:bd:7a:59:68:e0:90:e2:8b:72:
4c:15:62:91:dc:72:7c:f5:97:4e:ed:ad:28:56:97:
27:4a:6c:6d:b2:8a:fc:5e:5a:64:2b:69:0e:69:c6:
cd:bb:0b:35:e4:e1:93:28:7b:35:92:ca:71:18:ef:
5f:f3:ba:30:be:99:49:c0:c0:c8:25:4b:a7:18:26:
f7:d8:52:ac:f8:61:1b:64:6d:b4:24:4b:53:6c:c3:
6e:9f:02:f1:6b:d8:db:01:db:81:a6:48:3f:cb:d9:
e3:66:c3:a6:b1:32:62:35:05:8b:0d:f0:19:01:d3:
ca:69:11:32:fd:ff:f2:e7:c1:7c:3a:00:f8:c8:f2:
a8:86:8c:09:51:20:78:9f:df:4d:cc:f5:77:79:39:
ab:9d:8e:f2:64:89:7a:29:1b:7a:d6:09:ac:33:36:
04:3b:fe:75:c2:f9:2e:4c:69:ae:3a:60:d0:fb:6b:
96:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B7:F8:52:E2:E9:95:CD:A0:A7:6F:72:52:65:A9:C4:C4:35:7C:CE
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37302e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.70.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:13:bf:ba:4a:a0:6e:ca:79:92:8b:01:02:d9:6c:bc:6b:cd:
6d:a5:31:fb:7a:40:9e:53:65:f3:04:51:73:db:82:7b:58:27:
86:90:e3:f1:90:78:32:24:a0:87:19:c0:3f:77:d4:10:81:02:
d2:d6:6b:e6:89:81:56:44:1a:16:e1:7d:df:69:53:96:97:e4:
15:ff:5c:0a:2a:e8:b5:12:bc:b1:03:86:65:a2:c3:74:41:e9:
79:f4:10:80:22:f8:6d:85:7c:45:c1:70:03:39:26:68:6e:54:
c3:72:06:fb:a0:05:8c:5b:bd:9e:0f:78:82:e5:a9:81:1b:98:
1c:0b:00:db:97:69:f0:ef:7e:ee:91:0b:72:8b:bd:74:74:38:
7f:16:07:a5:d4:92:b2:f0:2d:cc:e1:37:e3:e3:9c:1e:52:49:
b0:71:b0:62:ce:b5:81:6d:59:f2:23:0a:67:80:86:ab:67:87:
68:f6:e3:d1:e3:ba:a4:cd:66:48:a1:87:c6:15:df:df:9b:82:
20:03:29:f3:a7:e1:17:5c:78:8c:54:dd:9a:56:8d:38:0c:f1:
21:07:a1:be:de:b0:51:02:cd:39:6b:47:72:fb:98:e8:81:80:
b6:2e:6a:d0:1e:14:7c:99:0f:b2:69:bc:93:5c:06:8c:70:b7:
0c:3b:fb:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:42:22 2026 by rpki-client