Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37332e302f32342d3234203d3e20323132323338.roa
File: 3231332e3133392e37332e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: 7Oj+hP0YV7LQnpCPJh2SU1zRRPNxpiFixVYZv1ihuBc=
Subject key identifier: A4:67:3D:E0:98:57:20:DF:7A:E6:B0:30:7C:98:AA:CF:A8:BF:D1:DB
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 766BB001C8907E4804442F78D88625D697152FB1
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37332e302f32342d3234203d3e20323132323338.roa
Signing time: Tue 01 Sep 2026 12:49:31 +0000
ROA not before: Tue 01 Sep 2026 12:44:31 +0000
ROA not after: Tue 31 Aug 2027 12:49:31 +0000
asID: 212238
IP address blocks: 213.139.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 04:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:6b:b0:01:c8:90:7e:48:04:44:2f:78:d8:86:25:d6:97:15:2f:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Sep 1 12:44:31 2026 GMT
Not After : Aug 31 12:49:31 2027 GMT
Subject: CN=A4673DE0985720DF7AE6B0307C98AACFA8BFD1DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:27:9e:2e:19:55:d9:24:cd:f1:93:0f:6c:50:
b5:cb:09:cc:0a:39:16:fc:b4:15:fa:82:68:8b:7b:
ca:e3:b5:0d:36:ab:46:52:86:3d:dd:98:f4:b6:1f:
73:82:f7:0d:02:ca:d5:11:de:61:32:7a:dc:cc:41:
2f:2e:02:53:e2:87:91:e7:90:16:df:85:ea:ba:61:
99:35:e7:ad:af:41:07:4f:c9:ce:30:13:00:bb:a6:
c9:b0:cf:92:8a:4a:4c:fb:62:aa:f3:54:0e:56:74:
76:55:5d:25:71:cb:a4:4e:77:4d:51:bb:38:0f:f9:
ab:80:07:63:17:7b:3e:ee:ac:ed:73:f9:98:41:9c:
b8:05:f1:ab:19:aa:46:40:c7:9e:ac:7e:5a:0f:d6:
45:2e:b8:b1:28:6f:67:ff:3c:4e:2d:12:52:c6:a4:
d8:5d:83:b9:57:d6:5f:76:7f:fa:cc:bb:13:c3:87:
ad:70:f2:00:66:ca:75:42:eb:ec:bc:19:37:a9:55:
a3:e4:5e:14:a0:a7:35:a7:42:2b:c3:9f:89:49:8b:
1a:fc:c6:29:e0:10:1f:e1:52:81:e2:bd:2f:4a:c6:
6a:5f:4a:30:9d:83:42:7d:6e:3e:06:cc:3b:be:dd:
e6:d2:bd:20:98:21:c9:cd:50:a3:ee:19:e3:38:31:
6c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:67:3D:E0:98:57:20:DF:7A:E6:B0:30:7C:98:AA:CF:A8:BF:D1:DB
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37332e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.73.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:1a:54:83:66:49:40:7e:8b:84:33:9a:4b:34:4f:68:2d:99:
ec:8e:04:bb:0a:fb:04:0e:47:d6:ba:16:f8:6d:de:0a:05:48:
e9:75:61:a1:9d:a2:32:70:91:b1:b6:37:f7:b9:da:1d:9f:04:
5b:9d:6d:d6:4a:34:12:e3:93:0f:46:0a:84:22:cc:97:0b:63:
79:78:82:d5:1b:ce:91:9b:d7:8f:dd:9c:60:c9:25:96:1f:03:
10:7d:bc:0d:b9:0f:15:31:8d:fb:ac:13:89:02:38:79:3a:0f:
61:c9:ac:3f:13:c6:63:fc:5d:dd:84:1e:21:b7:56:51:eb:94:
df:dd:a1:4d:e0:39:f7:a3:9a:da:28:d1:96:e8:99:d0:32:70:
d5:7f:bc:4f:5b:0b:e1:a8:b2:9a:df:ce:36:13:ec:eb:42:24:
93:86:e3:d7:6b:04:3f:35:fb:e5:bc:e2:db:c1:99:4a:5a:37:
74:20:fd:79:1e:60:7d:ab:2b:d5:71:24:ed:62:2b:1a:35:dd:
bc:c3:c8:93:cc:7b:4d:3c:2d:d6:0b:20:46:40:6e:00:33:ec:
72:9d:47:e8:37:db:ec:55:4e:c2:18:24:17:88:54:c0:55:73:
7a:ef:85:51:e1:80:a8:e5:18:83:24:13:78:1e:77:d2:ec:79:
46:a2:c7:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:33:22 2026 by rpki-client