Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37382e302f32332d3234203d3e20383334.roa
File: 3231332e3133392e37382e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: ZAAaqaDQto8YMZJOOWZKhH2B64dKunjVz6h4lEzy2Bo=
Subject key identifier: 0A:74:EF:9E:F6:E3:C1:0A:AD:50:81:56:07:61:99:D0:91:91:26:3D
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 0990D4F47861B304FCA7115A779B4E4232A06EDF
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37382e302f32332d3234203d3e20383334.roa
Signing time: Sun 01 Nov 2026 00:14:16 +0000
ROA not before: Sun 01 Nov 2026 00:09:16 +0000
ROA not after: Sun 31 Oct 2027 00:14:16 +0000
asID: 834
IP address blocks: 213.139.78.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 13:08:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:90:d4:f4:78:61:b3:04:fc:a7:11:5a:77:9b:4e:42:32:a0:6e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Nov 1 00:09:16 2026 GMT
Not After : Oct 31 00:14:16 2027 GMT
Subject: CN=0A74EF9EF6E3C10AAD508156076199D09191263D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:16:a5:79:ec:51:75:70:15:38:d1:63:d0:23:
7b:f9:5c:7f:2b:8c:6a:bb:00:bd:51:2f:15:6f:70:
4f:2e:89:a8:e0:9e:e1:f4:96:48:25:57:5d:ab:61:
99:b2:19:78:69:2d:e1:95:9c:25:01:ac:5b:44:3d:
3b:c9:20:bb:36:f1:c7:7b:ba:11:c9:89:1f:81:6b:
c4:07:61:b2:02:06:b1:0e:7b:63:52:63:40:c1:8d:
30:3e:a6:b6:c8:e4:e0:bc:92:2c:8e:1d:a8:f4:dd:
6a:26:64:b1:40:eb:d9:a1:5f:99:50:e2:6e:83:e2:
05:53:3b:c7:ae:de:f9:3d:6d:9c:8e:7a:e2:8d:bb:
e8:66:6d:17:92:b6:7a:68:a5:5f:c4:18:86:e6:6f:
47:02:82:93:37:e7:fb:38:46:d7:35:be:6d:c1:63:
79:5b:7c:fb:77:4f:4b:e3:b2:d5:1c:28:a0:11:d4:
1a:09:be:ce:73:89:df:26:09:67:03:de:8f:74:2d:
09:4d:27:53:2c:d5:02:61:b2:0f:42:55:95:96:64:
17:c3:0b:8c:be:05:1c:1b:8f:2e:6a:66:ee:f4:52:
ac:a9:96:82:ae:42:67:2c:ad:e7:59:63:92:be:93:
b0:08:9b:34:95:08:0f:8f:27:92:3f:da:fd:60:0d:
d1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:74:EF:9E:F6:E3:C1:0A:AD:50:81:56:07:61:99:D0:91:91:26:3D
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37382e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.78.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:01:b3:b4:ad:28:1f:a4:c7:97:b0:6b:e6:61:50:0b:37:b9:
ba:7e:07:21:c5:d7:4a:11:49:02:f0:44:27:ff:fa:0a:e4:f7:
bb:1f:f4:7d:5e:d3:19:d2:59:6f:64:84:59:b7:93:12:83:d6:
f9:0c:2e:79:6c:16:97:6b:79:e6:21:51:11:ad:3b:14:0e:33:
8b:22:49:c0:cd:b4:79:93:c9:3a:fa:62:0c:61:d7:68:c8:03:
ab:7d:ae:d5:13:ec:0e:24:74:91:ea:f4:0b:5c:33:9f:23:b0:
d7:f5:a7:dd:d9:b9:18:f6:e4:26:c4:98:18:28:32:8d:8b:04:
34:06:a7:97:ad:8a:e6:0c:ef:cb:bf:70:51:29:3b:88:95:ce:
b9:22:21:70:67:c4:f6:e0:7f:f4:c9:f5:83:44:1d:5a:40:73:
b6:02:39:bf:40:e9:51:1b:3c:19:28:3d:8f:7e:4c:24:1d:4f:
d4:80:28:5c:9c:39:49:1e:53:bb:68:16:f0:f8:ca:8b:03:3e:
e8:da:c8:69:a0:7b:3e:48:ac:04:51:ac:d7:4a:2e:e3:30:6e:
4c:96:df:e2:48:f0:6a:0b:17:5b:76:4a:63:9f:ef:3d:4e:1c:
fe:0a:95:59:f1:39:fe:cf:1a:61:66:63:e2:d0:59:cb:af:cb:
06:b1:42:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 04:22:16 2026 by rpki-client