Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37382e302f32342d3234203d3e20323036343436.roa
File: 3231332e3133392e37382e302f32342d3234203d3e20323036343436.roa (raw, json)
Hash identifier: 2qZQfOcJdShx8dQdW3jSDzAf+zGAwRn+nvT7o3J4pwE=
Subject key identifier: 4A:83:FE:1A:1D:2E:19:4A:B6:78:EE:1C:96:49:8F:94:A3:48:02:35
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 7AF8FB1385283FB5AD8FD6D9F7FB36D31E8A76C3
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37382e302f32342d3234203d3e20323036343436.roa
Signing time: Sun 21 Jun 2026 14:47:47 +0000
ROA not before: Sun 21 Jun 2026 14:42:47 +0000
ROA not after: Sun 20 Jun 2027 14:47:47 +0000
asID: 206446
IP address blocks: 213.139.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 22:11:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:f8:fb:13:85:28:3f:b5:ad:8f:d6:d9:f7:fb:36:d3:1e:8a:76:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Jun 21 14:42:47 2026 GMT
Not After : Jun 20 14:47:47 2027 GMT
Subject: CN=4A83FE1A1D2E194AB678EE1C96498F94A3480235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:74:b6:66:eb:54:5e:a1:01:e6:b4:07:71:2d:
01:fa:e0:29:cd:7c:47:5b:16:ef:56:4b:80:99:0d:
5e:6e:c4:96:41:a3:cc:7d:f9:f4:04:b3:1b:2f:b4:
15:72:3f:e3:c7:45:c3:2b:c3:ba:7e:9a:8e:74:51:
34:64:15:77:0a:ae:2b:e5:7b:ea:05:87:ba:0d:cf:
94:81:e3:4b:e3:80:5e:f7:75:cf:ae:ce:01:c9:ad:
96:40:6e:7c:d5:de:8b:16:2b:6b:42:ee:b1:98:45:
fd:4d:09:62:a1:18:95:44:d1:18:46:04:08:5e:96:
ad:11:08:89:55:ba:9a:c2:d2:cc:b9:2b:3e:3c:45:
4d:20:9e:43:f8:90:ad:39:88:0e:f7:c7:26:cf:e3:
9c:36:db:37:0f:f9:c7:4e:33:f9:f9:3b:3d:e5:03:
a4:58:30:b6:29:f4:24:d3:bf:29:e9:f1:41:e0:c1:
03:15:0c:75:5a:0a:bc:0f:fd:92:20:7a:a2:f4:84:
0c:43:54:14:b1:ad:81:8f:7d:75:9b:16:2b:9c:c4:
45:e0:23:2e:3f:19:a3:85:03:45:eb:b4:68:68:40:
2e:6b:cb:29:0e:bf:44:c2:ea:d0:57:0f:ff:4a:62:
96:c3:0b:3e:f5:e3:e4:6d:a7:2d:12:ec:6b:ce:24:
24:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:83:FE:1A:1D:2E:19:4A:B6:78:EE:1C:96:49:8F:94:A3:48:02:35
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37382e302f32342d3234203d3e20323036343436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.78.0/24
Signature Algorithm: sha256WithRSAEncryption
75:1a:7f:98:16:b1:f7:91:06:88:80:d3:ae:85:a4:2e:b7:2c:
f8:92:9b:0d:79:26:40:bd:73:20:b6:98:db:84:88:1b:ab:f0:
de:35:93:37:16:0c:03:be:fe:db:03:8c:2a:a0:17:9c:4d:b7:
bc:2c:78:b7:57:37:fd:e8:eb:ec:67:35:33:34:cb:33:2b:6b:
2a:56:55:cd:f1:10:15:a1:09:4d:2a:6e:3f:be:04:67:dd:63:
c7:17:af:8b:ef:e0:54:99:f5:3d:4e:1b:44:1b:ef:19:51:24:
be:b6:3a:c1:3c:30:7c:9b:aa:42:fd:73:eb:88:78:9d:c1:f6:
b2:d0:2a:91:85:89:16:75:97:2d:0f:da:63:ec:c6:62:aa:66:
9a:04:fe:9f:6b:38:fa:4a:3c:7b:89:39:9a:00:aa:4d:1f:dd:
b1:65:67:e6:43:66:4b:f9:d3:ce:9d:2c:d4:48:61:3f:70:eb:
c3:24:d2:e2:ab:71:09:28:3d:63:17:6e:f4:45:fe:2f:55:79:
ca:c6:b8:8d:6e:55:7b:ef:84:dc:f0:f5:62:23:b7:e4:2b:74:
85:d9:ef:a6:c2:c3:f2:14:80:f3:fa:35:ba:19:0d:84:5e:7c:
96:80:a1:de:f3:b7:69:c7:15:46:36:49:5a:48:e4:df:b1:f1:
6a:47:ec:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:30:26 2026 by rpki-client