Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37352e302f32342d3234203d3e20313436383133.roa
File: 3231332e3133392e37352e302f32342d3234203d3e20313436383133.roa (raw, json)
Hash identifier: 7x5jnQnqIKOf1cUzXhXWfUxP324vunDOpOlRbDuQb3I=
Subject key identifier: 19:00:45:DD:B2:A9:FD:23:AF:1E:16:D4:ED:AF:F4:E2:A2:44:95:24
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 1C32B8486343F959E76356F5B4012193F5F7AB97
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37352e302f32342d3234203d3e20313436383133.roa
Signing time: Fri 25 Sep 2026 12:50:25 +0000
ROA not before: Fri 25 Sep 2026 12:45:25 +0000
ROA not after: Fri 24 Sep 2027 12:50:25 +0000
asID: 146813
IP address blocks: 213.139.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 12:34:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:32:b8:48:63:43:f9:59:e7:63:56:f5:b4:01:21:93:f5:f7:ab:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Sep 25 12:45:25 2026 GMT
Not After : Sep 24 12:50:25 2027 GMT
Subject: CN=190045DDB2A9FD23AF1E16D4EDAFF4E2A2449524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bc:5b:dd:18:5d:ae:6c:3b:01:43:6c:75:54:
ac:6b:3d:50:9f:dc:b1:8c:cf:e7:ba:c6:cf:9d:b4:
f7:35:f4:c9:d1:5f:13:de:d2:ca:66:bc:24:11:af:
16:2f:5d:cd:7b:01:2a:bf:39:f4:f7:b5:15:e6:e5:
ed:35:90:98:e9:e3:b5:1b:c1:47:9d:fe:f9:44:5e:
f6:dc:a5:88:c6:15:b2:bc:7d:44:18:43:0f:00:af:
d2:2f:63:91:d5:80:5a:45:da:ab:44:50:50:8d:c8:
4e:56:60:13:3d:d4:68:da:23:63:07:f2:f4:db:6a:
48:f9:7d:f2:7f:35:17:e1:e2:11:a6:2e:f2:48:12:
8d:b8:ee:8d:26:31:62:c8:d7:44:40:b3:0d:5c:2b:
65:82:b6:37:d3:9c:09:fd:a6:89:2e:79:75:4b:60:
95:72:ef:d7:1d:96:84:da:9c:66:d0:47:f8:74:cb:
9c:6e:7b:54:b3:9f:d7:5c:b6:07:c5:67:d1:e8:bc:
82:19:e3:b3:7c:1f:13:ff:9b:ed:f6:37:25:04:83:
ac:90:c5:fc:2f:f8:e0:a3:4f:9a:9b:7e:ad:92:5b:
21:02:82:50:5a:20:15:ef:74:1f:ef:c3:e7:6f:c8:
e3:78:3e:b1:ff:ce:a5:2e:80:b9:a1:5c:b0:f5:a9:
bc:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:00:45:DD:B2:A9:FD:23:AF:1E:16:D4:ED:AF:F4:E2:A2:44:95:24
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37352e302f32342d3234203d3e20313436383133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.75.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:c8:7c:7d:fc:ba:8c:8d:8e:76:3d:ce:62:40:fb:e0:21:2d:
52:f8:1c:5d:27:92:be:b4:f4:78:92:0e:97:19:01:3d:45:17:
a5:04:44:e3:31:d5:e7:ce:36:25:c4:a7:3f:98:c4:9e:de:4c:
ba:f9:09:7c:3e:29:8b:ea:5a:84:8a:53:a5:67:26:a4:5f:62:
73:1b:ff:23:0d:52:6d:be:ac:d2:92:02:ae:44:1d:b4:f8:1c:
e6:50:c5:28:71:2f:f3:13:f8:b0:dd:d5:94:86:91:ad:3b:91:
9a:af:fa:a1:2b:5c:57:40:e1:6b:e6:a2:6b:ae:59:44:50:1b:
33:6a:ec:d5:87:4d:e1:81:ca:fa:20:74:df:23:0d:77:20:25:
97:82:cc:d6:9d:99:11:27:ad:28:71:0b:b0:4c:03:dd:9e:d9:
ec:52:25:70:a7:60:13:10:8b:7a:bd:9c:6e:9e:02:f3:04:23:
3a:a6:a3:45:b7:40:f7:f3:0d:6a:08:b3:5f:aa:55:0b:5e:dd:
9b:e4:e3:62:d3:64:43:7f:ee:44:bd:7d:4c:d6:8b:09:99:c8:
69:26:2b:4b:83:12:dc:b9:b6:eb:2f:5c:3c:64:5b:b7:53:e2:
c4:13:ea:78:16:b8:2f:b6:55:da:b6:1e:48:cf:fd:eb:a6:cd:
13:b6:d6:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:18:20 2026 by rpki-client