Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37392e302f32342d3234203d3e20383334.roa
File: 3231332e3133392e37392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: /SLsPLdnat3IsLzyk3/Xh47vph0iVnN2Tw7e7MMWbUQ=
Subject key identifier: 74:77:5C:07:A8:74:F1:DC:17:61:16:7F:53:A2:F6:54:22:EA:97:0B
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 25A654451C9051B446EF5F84F6BE478E4F3FD963
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37392e302f32342d3234203d3e20383334.roa
Signing time: Sun 27 Sep 2026 15:44:40 +0000
ROA not before: Sun 27 Sep 2026 15:39:40 +0000
ROA not after: Sun 26 Sep 2027 15:44:40 +0000
asID: 834
IP address blocks: 213.139.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 06:11:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:a6:54:45:1c:90:51:b4:46:ef:5f:84:f6:be:47:8e:4f:3f:d9:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Sep 27 15:39:40 2026 GMT
Not After : Sep 26 15:44:40 2027 GMT
Subject: CN=74775C07A874F1DC1761167F53A2F65422EA970B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2f:92:8c:1d:8e:9d:11:ce:b4:26:40:db:98:
62:c6:72:7d:b4:79:f3:23:ed:60:17:89:d0:18:7a:
61:16:b8:53:70:48:84:d8:0f:b6:1b:aa:8e:14:3e:
e9:75:fe:55:b1:fb:e4:e6:6e:4f:ef:4b:b5:07:14:
13:fa:48:e2:89:2e:a5:6c:c3:03:4e:ba:8d:c1:2c:
18:55:28:7b:7d:e6:3e:67:67:03:51:96:d7:26:43:
ae:08:09:e2:19:7a:8d:d0:11:e2:dd:0d:36:89:5d:
76:22:3a:62:fb:ff:1c:9d:a6:ae:5c:74:02:e7:fb:
7e:47:53:d0:e2:44:aa:ea:3b:ee:87:48:df:b8:f0:
04:d9:21:27:63:c2:c4:15:bd:7f:a9:fa:01:f9:e5:
7d:5b:98:c4:d8:ec:dd:29:cf:c6:88:4a:59:19:c3:
cf:0f:10:d6:3d:8d:82:98:ea:52:30:26:52:c1:fa:
67:2d:82:5d:0b:ff:5f:e3:61:bd:0d:51:20:76:b4:
62:52:ad:5d:77:1d:68:b7:a7:d5:07:8e:37:8a:e1:
6e:80:5e:14:ae:0a:b5:ca:e8:b2:e4:6f:da:ee:90:
cc:4c:39:13:63:0e:25:fa:38:d9:fa:6f:be:ae:6b:
e9:8d:a8:a0:6a:51:e2:66:d5:fe:be:a6:13:ea:c1:
fb:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:77:5C:07:A8:74:F1:DC:17:61:16:7F:53:A2:F6:54:22:EA:97:0B
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37392e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.79.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:78:75:ed:d2:2a:37:72:e8:33:ee:54:e7:d0:d1:13:3f:fa:
57:65:78:69:a6:e9:01:7f:00:34:83:9c:be:19:4a:6e:81:cb:
35:10:8d:31:17:15:bd:b6:5f:ef:81:be:f3:0d:67:2c:23:a6:
8d:8c:fa:4c:c4:53:53:f4:4f:cb:24:57:a4:3b:8d:58:bf:4b:
03:8a:4e:aa:ba:63:ad:c9:58:df:8e:53:44:45:a0:45:32:87:
5b:40:98:20:ad:e1:11:51:f7:c9:bf:53:76:db:89:b5:44:e5:
89:b0:98:55:cd:ae:c6:fe:d3:99:5b:f2:bc:ba:9f:e5:0e:33:
00:98:51:1c:cb:92:f5:bf:47:87:41:75:d0:6c:d8:7a:3a:26:
0f:e2:10:61:e2:80:fb:cf:c9:ca:3c:74:c6:af:15:9a:79:4d:
53:80:d0:36:12:e3:16:2e:67:bd:d2:fc:4a:49:01:d9:42:e8:
b6:93:c2:9d:f0:b5:9c:f7:c8:e5:68:dd:ed:90:3a:88:6d:a9:
c4:68:c2:b4:04:cc:43:41:24:28:66:f2:ec:1f:ec:c1:05:c6:
3f:da:d1:88:14:38:c0:3a:6c:97:86:a3:be:6d:12:a5:04:1c:
2f:aa:22:41:11:cc:a9:7d:7f:7f:95:14:63:ad:4e:7e:86:f8:
0e:14:49:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 22:49:31 2026 by rpki-client