Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37312e302f32342d3234203d3e203631333137.roa
File: 3231332e3133392e37312e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: kRC8p1GZDVw/n153aBzSn3FnDjN+XtehTkikwSQQAhY=
Subject key identifier: D7:97:18:A1:DD:EF:B4:FF:C4:F3:F5:A1:26:4E:B7:0A:1D:07:C0:66
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 3FAACF3A3F872436EF87C23E8A07EE1CD1B6825C
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37312e302f32342d3234203d3e203631333137.roa
Signing time: Wed 30 Sep 2026 14:49:35 +0000
ROA not before: Wed 30 Sep 2026 14:44:35 +0000
ROA not after: Wed 29 Sep 2027 14:49:35 +0000
asID: 61317
IP address blocks: 213.139.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 18:47:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:aa:cf:3a:3f:87:24:36:ef:87:c2:3e:8a:07:ee:1c:d1:b6:82:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Sep 30 14:44:35 2026 GMT
Not After : Sep 29 14:49:35 2027 GMT
Subject: CN=D79718A1DDEFB4FFC4F3F5A1264EB70A1D07C066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3c:55:a0:29:eb:14:1f:cc:f1:bd:d3:e5:05:
9e:70:4a:7e:9d:43:78:52:5b:9c:bc:f9:80:4f:89:
02:05:c0:4d:8a:e3:08:57:3f:1a:cc:4a:2f:e2:3c:
a9:44:df:43:ea:12:ed:43:c3:53:54:18:a8:38:c7:
4a:a6:89:66:9d:8a:36:a3:ed:99:ca:1e:21:ae:0f:
c6:a2:18:5f:d9:25:b2:c9:ba:0f:d8:17:a7:43:31:
25:86:35:98:75:b0:f0:1f:a5:23:1c:4f:90:f0:08:
ad:4b:62:33:cd:4d:21:d0:62:c3:d3:62:c1:cb:69:
2a:bc:a3:43:a6:c0:32:7e:6b:dc:28:de:45:0b:db:
26:ae:f1:26:7f:cd:81:6d:54:91:ad:a5:44:36:91:
7e:18:e0:38:86:3f:6a:e4:ab:85:47:79:92:0a:9b:
fa:79:3f:5b:23:71:c3:b2:92:43:14:3c:8c:39:fb:
21:de:e8:b3:bd:72:81:e9:96:8e:71:62:b8:28:91:
00:ff:17:dd:68:7b:8b:8a:99:a6:da:9a:b6:93:5c:
88:46:80:ff:2e:f0:27:e2:ef:b1:ca:38:cb:f8:cc:
32:ce:aa:5a:cc:ec:74:f3:98:36:a3:b8:ad:88:b0:
99:0a:8b:5f:b5:77:0d:9c:3d:81:17:79:bd:5a:41:
ab:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:97:18:A1:DD:EF:B4:FF:C4:F3:F5:A1:26:4E:B7:0A:1D:07:C0:66
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37312e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.71.0/24
Signature Algorithm: sha256WithRSAEncryption
80:e7:3e:51:dd:2b:3b:21:cd:eb:57:bc:17:db:e6:14:44:20:
41:58:07:fb:fe:52:ff:6e:96:d5:e7:57:b6:74:61:7f:31:15:
bf:7b:68:ec:49:fd:b2:15:63:13:eb:d6:fa:5d:b5:d9:00:59:
10:ee:fe:dd:0c:48:84:0b:db:14:87:b9:45:c3:2d:ef:4b:18:
81:5a:a6:50:d4:81:fe:e1:ba:7e:6a:65:78:5f:29:15:9c:5a:
3b:bf:28:86:20:69:6b:ad:ed:6a:4c:77:26:8d:dd:75:40:11:
33:7b:f8:c8:ff:6f:61:a5:d3:d6:1c:7e:5e:b6:9c:c7:00:3a:
60:8e:1a:1e:a1:e8:00:09:e9:67:4f:74:de:c1:c5:dd:1d:96:
cd:c3:26:74:5b:56:c2:fb:71:4e:5e:7e:2f:5d:07:26:01:0f:
75:32:a0:79:da:d7:9e:7c:40:32:66:9d:d1:43:c8:04:b2:cf:
34:08:5a:1a:c0:d9:1a:93:b9:4e:0a:dd:61:a0:47:14:1b:b5:
42:69:9a:34:a9:d4:ce:30:54:ef:77:4f:0b:05:fc:e7:4c:ea:
0e:e1:32:a9:e3:54:be:f3:1a:62:62:88:36:38:b5:02:42:6f:
6c:c3:1f:72:27:22:f0:cb:78:5d:14:6b:82:3c:3d:72:0e:60:
3a:a0:58:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 03:57:59 2026 by rpki-client