Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/3231332e3135372e3131322e302f32322d3232203d3e203230353130.roa
File: 3231332e3135372e3131322e302f32322d3232203d3e203230353130.roa (raw, json)
Hash identifier: O9XudG5Hna9EdsKz3NaxZpnBC6BtoYf94CzMXezJk5w=
Subject key identifier: 50:3D:ED:DA:B9:9B:9B:01:80:B1:27:DB:F9:56:C4:7D:99:0D:21:65
Certificate issuer: /CN=8184669b0189b7fabe05e700325a0d74957beb27
Certificate serial: 443A523A20F12DBAC860E0DC1D17604F3EDE72CA
Authority key identifier: 81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/3231332e3135372e3131322e302f32322d3232203d3e203230353130.roa
Signing time: Sun 08 Mar 2026 10:46:47 +0000
ROA not before: Sun 08 Mar 2026 10:41:47 +0000
ROA not after: Sun 07 Mar 2027 10:46:47 +0000
asID: 20510
IP address blocks: 213.157.112.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl
rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft
rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 12:21:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:3a:52:3a:20:f1:2d:ba:c8:60:e0:dc:1d:17:60:4f:3e:de:72:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8184669b0189b7fabe05e700325a0d74957beb27
Validity
Not Before: Mar 8 10:41:47 2026 GMT
Not After : Mar 7 10:46:47 2027 GMT
Subject: CN=503DEDDAB99B9B0180B127DBF956C47D990D2165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c2:a2:f0:11:7d:76:b7:b2:c5:a0:79:b5:3c:
0e:7b:65:4b:b5:10:cf:a7:76:6a:43:8a:45:0a:57:
ea:95:b1:2e:9a:e1:2a:87:84:7b:41:73:f3:45:3e:
22:46:c6:37:86:b9:17:40:65:08:d9:d4:9e:30:df:
48:32:c8:80:d0:c4:43:70:17:20:24:05:49:f2:ed:
0a:13:fa:b8:55:ad:af:32:aa:e0:a9:d5:2a:e2:75:
ed:d3:d8:ec:b2:8e:d8:9e:80:f7:dd:55:2b:aa:8b:
05:cd:ed:b4:0b:fb:df:d2:d4:5f:33:26:ac:cd:89:
21:ff:dd:4b:65:d3:8e:ed:f8:c9:84:6e:4b:e0:88:
b0:4a:42:d2:64:78:1e:29:3a:17:18:9b:bf:46:70:
94:73:07:eb:dc:ae:f9:b5:67:e3:7c:ff:53:bb:9d:
ad:63:55:9b:7c:b3:7b:1b:6f:6c:97:5b:ef:8a:3a:
ad:b5:cd:40:77:63:51:dc:de:c7:ab:ac:21:01:5d:
c3:f1:6b:58:e5:d8:a0:f0:80:28:be:2d:55:f4:ee:
f4:6a:d0:ca:49:f8:8f:50:d1:7d:a5:40:61:e6:2d:
31:b1:c7:4c:7e:8f:95:7c:4a:46:62:71:f7:82:8c:
4e:a7:2c:19:c5:26:ba:50:57:3f:2a:ff:f1:16:26:
1e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:3D:ED:DA:B9:9B:9B:01:80:B1:27:DB:F9:56:C4:7D:99:0D:21:65
X509v3 Authority Key Identifier:
keyid:81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/3231332e3135372e3131322e302f32322d3232203d3e203230353130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.157.112.0/22
Signature Algorithm: sha256WithRSAEncryption
79:63:67:40:45:ad:ef:96:90:e2:a6:73:72:1e:5f:23:3e:cd:
dc:34:42:b1:f7:5e:77:29:39:cc:68:71:2d:85:c8:9d:5e:6b:
73:e3:93:4c:be:b2:40:e9:c0:ab:ab:42:5f:4f:18:29:a4:26:
29:6d:ac:16:87:9f:c2:89:54:25:2a:df:96:78:47:d0:74:68:
06:2b:81:c8:78:ea:2b:e3:aa:bb:17:1f:7e:6b:01:24:f5:cf:
fe:17:0b:e0:bd:7e:3f:b2:75:f2:76:9f:98:19:69:2d:6e:39:
7f:d8:c5:66:5e:f3:51:62:62:c4:3a:44:58:1f:ea:16:4f:f5:
f0:f9:b8:1c:58:6a:1c:69:17:a4:45:06:ba:31:2d:13:91:8e:
cd:01:b2:2a:5d:65:b8:ff:71:cd:95:de:b1:37:f2:b5:d2:34:
02:c5:f9:75:c4:02:92:38:5f:6f:59:21:96:e6:b0:22:a2:dd:
88:6a:04:bb:32:3e:dc:ec:9d:62:c9:f3:90:2c:8b:e5:86:9f:
bd:a8:48:d3:4c:8e:9b:fb:08:72:62:a9:16:ea:10:f7:38:26:
27:f2:2f:11:ca:df:0d:f0:da:f4:cb:00:4d:3a:9e:b1:5a:f2:
a5:2f:73:30:38:4a:96:94:43:a9:f1:b7:4e:e9:5f:ad:30:1f:
bd:05:55:5f
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIURDpSOiDxLbrIYODcHRdgTz7ecsowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODE4NDY2OWIwMTg5YjdmYWJlMDVlNzAwMzI1YTBkNzQ5
NTdiZWIyNzAeFw0yNjAzMDgxMDQxNDdaFw0yNzAzMDcxMDQ2NDdaMDMxMTAvBgNV
BAMTKDUwM0RFRERBQjk5QjlCMDE4MEIxMjdEQkY5NTZDNDdEOTkwRDIxNjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9wqLwEX12t7LFoHm1PA57ZUu1
EM+ndmpDikUKV+qVsS6a4SqHhHtBc/NFPiJGxjeGuRdAZQjZ1J4w30gyyIDQxENw
FyAkBUny7QoT+rhVra8yquCp1Sride3T2OyyjtiegPfdVSuqiwXN7bQL+9/S1F8z
JqzNiSH/3Utl047t+MmEbkvgiLBKQtJkeB4pOhcYm79GcJRzB+vcrvm1Z+N8/1O7
na1jVZt8s3sbb2yXW++KOq21zUB3Y1Hc3serrCEBXcPxa1jl2KDwgCi+LVX07vRq
0MpJ+I9Q0X2lQGHmLTGxx0x+j5V8SkZicfeCjE6nLBnFJrpQVz8q//EWJh4dAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUUD3t2rmbmwGAsSfb+VbEfZkNIWUwHwYDVR0j
BBgwFoAUgYRmmwGJt/q+BecAMloNdJV76ycwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTQzMWU0MmUtMGQ3Zi00NGQwLTgxM2YtYjVlM2EyYWJi
ZTI1LzAvODE4NDY2OUIwMTg5QjdGQUJFMDVFNzAwMzI1QTBENzQ5NTdCRUIyNy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2dZUm1td0dKdF9xLUJlY0FNbG9OZEpW
NzZ5Yy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTQzMWU0MmUt
MGQ3Zi00NGQwLTgxM2YtYjVlM2EyYWJiZTI1LzAvMzIzMTMzMmUzMTM1MzcyZTMx
MzEzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzAzNTMxMzAucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BALVnXAwDQYJKoZIhvcNAQELBQADggEBAHljZ0BFre+WkOKmc3IeXyM+zdw0QrH3
XncpOcxocS2FyJ1ea3Pjk0y+skDpwKurQl9PGCmkJiltrBaHn8KJVCUq35Z4R9B0
aAYrgch46ivjqrsXH35rAST1z/4XC+C9fj+ydfJ2n5gZaS1uOX/YxWZe81FiYsQ6
RFgf6hZP9fD5uBxYahxpF6RFBroxLRORjs0BsipdZbj/cc2V3rE38rXSNALF+XXE
ApI4X29ZIZbmsCKi3YhqBLsyPtzsnWLJ85Asi+WGn72oSNNMjpv7CHJiqRbqEPc4
JifyLxHK3w3w2vTLAE06nrFa8qUvczA4SpaUQ6nxt07pX60wH70FVV8=
-----END CERTIFICATE-----
Generated at Fri Mar 20 05:46:30 2026 by rpki-client