Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37352e302f32342d3234203d3e20383334.roa
File: 3231332e3133392e37352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 4XXjL0MwhaJInGfscOF1Yf6rhcl9L6u/8QICuc26MxA=
Subject key identifier: 44:41:29:DB:FB:BE:AA:A5:4E:1B:9C:00:07:EA:56:15:73:8B:35:6B
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 16A1E55E66C10F6103C586336A5DAC7CA8B3E9A6
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37352e302f32342d3234203d3e20383334.roa
Signing time: Sun 25 Oct 2026 12:50:09 +0000
ROA not before: Sun 25 Oct 2026 12:45:09 +0000
ROA not after: Sun 24 Oct 2027 12:50:09 +0000
asID: 834
IP address blocks: 213.139.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 13:08:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:a1:e5:5e:66:c1:0f:61:03:c5:86:33:6a:5d:ac:7c:a8:b3:e9:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Oct 25 12:45:09 2026 GMT
Not After : Oct 24 12:50:09 2027 GMT
Subject: CN=444129DBFBBEAAA54E1B9C0007EA5615738B356B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ae:e0:13:55:08:b7:2f:3f:8b:ca:a3:70:0d:
28:47:5d:d9:9d:e6:d5:a7:1d:54:ec:98:a2:63:5e:
0f:e1:2f:01:e0:70:7e:28:e7:95:a3:98:47:56:f5:
3f:34:a3:8e:02:3e:a8:88:16:91:eb:f2:e6:45:d0:
1b:c2:15:65:ef:af:db:36:53:df:98:05:8d:67:d6:
86:6d:59:f4:2a:02:a7:dc:05:6b:68:f0:09:4f:3a:
48:f4:c2:2a:41:11:71:56:a8:e0:b1:b3:58:12:b5:
f9:51:b9:80:8b:fc:27:75:50:be:b4:29:c8:ae:2c:
b0:15:29:25:7a:1b:fd:d9:7e:57:a4:c7:1b:4a:9f:
b4:43:5c:ba:39:d5:6f:de:67:0f:2d:1e:40:78:87:
fe:e0:47:24:6f:73:6f:50:a1:62:7e:61:e7:16:1c:
70:96:17:e3:07:62:24:34:e7:ff:d1:6c:3c:78:55:
4c:5f:d0:76:dd:dd:0d:15:5d:e4:50:33:31:bc:e4:
e2:ea:25:4f:36:b9:85:8f:85:04:bf:8c:1d:51:03:
55:9c:26:f0:bb:77:e4:8c:a2:ea:fb:fb:d3:1e:48:
2f:d2:b1:ae:d0:75:fe:13:58:b1:fa:41:45:4b:f9:
2f:41:75:6f:42:83:34:9e:03:09:88:23:b3:d7:75:
41:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:41:29:DB:FB:BE:AA:A5:4E:1B:9C:00:07:EA:56:15:73:8B:35:6B
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.75.0/24
Signature Algorithm: sha256WithRSAEncryption
87:26:b4:87:50:57:28:47:5f:5c:6f:96:93:1b:f8:14:0f:94:
28:fd:9f:df:0b:c7:e7:52:06:07:d9:a1:f9:07:7e:26:b9:31:
3f:0f:aa:49:87:17:c7:22:5d:19:cd:a6:b9:8a:b0:04:0e:1c:
55:95:86:1e:bd:f7:20:a1:a5:f6:0a:2a:75:18:5b:1d:d1:16:
f3:d9:35:39:05:b4:9f:51:99:7a:e5:54:44:11:a4:14:9e:ea:
74:e1:4e:96:3f:bc:f5:48:9f:d3:9f:50:dd:f3:87:1e:6d:9b:
63:4d:1f:b4:1b:fc:9e:6c:b9:4f:97:dc:77:62:bc:8a:b8:a5:
f0:02:3f:42:3c:22:a5:df:b7:f1:57:d1:ce:e9:f6:9a:33:f8:
5b:e6:fc:d6:5e:e8:5b:5a:c2:64:ea:c6:33:30:4a:23:11:39:
eb:f4:ec:90:ff:b9:0e:25:59:03:50:fb:ef:e7:28:e6:d4:9e:
75:3f:c5:cb:ce:36:81:df:fc:f9:28:8e:9d:41:a6:53:08:c5:
41:f3:4c:48:04:42:1e:f1:a8:a8:d1:3d:b1:5a:e6:17:bc:d8:
9f:76:37:2f:e4:6a:c6:df:f6:4b:95:7b:81:1a:ae:a7:32:4d:
2a:c3:2e:40:76:3f:56:fd:08:94:82:dc:cb:5e:9f:20:02:e1:
31:0d:fd:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 04:21:57 2026 by rpki-client