Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/3231332e3135372e3131362e302f32332d3233203d3e203230353130.roa
File: 3231332e3135372e3131362e302f32332d3233203d3e203230353130.roa (raw, json)
Hash identifier: QIlDGQAR+BPaqMZSpuzOdDfZmoHzVS/KrbH1O77fni8=
Subject key identifier: 7E:42:05:2E:79:77:78:60:24:66:48:93:B4:83:C0:C5:C2:C8:17:3B
Certificate issuer: /CN=8184669b0189b7fabe05e700325a0d74957beb27
Certificate serial: 13FCE723324F62BE67E0105DBBF4EF1CCB9C4597
Authority key identifier: 81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/3231332e3135372e3131362e302f32332d3233203d3e203230353130.roa
Signing time: Sun 08 Mar 2026 10:46:47 +0000
ROA not before: Sun 08 Mar 2026 10:41:47 +0000
ROA not after: Sun 07 Mar 2027 10:46:47 +0000
asID: 20510
IP address blocks: 213.157.116.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl
rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft
rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 12:21:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:fc:e7:23:32:4f:62:be:67:e0:10:5d:bb:f4:ef:1c:cb:9c:45:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8184669b0189b7fabe05e700325a0d74957beb27
Validity
Not Before: Mar 8 10:41:47 2026 GMT
Not After : Mar 7 10:46:47 2027 GMT
Subject: CN=7E42052E7977786024664893B483C0C5C2C8173B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b2:c2:b1:69:2a:0e:a2:f8:77:76:ca:cd:20:
ea:a0:d5:62:b7:24:94:dd:2d:d1:09:c8:c6:2d:ec:
94:ab:b8:cc:74:40:a0:d0:1b:88:ef:05:ea:c5:53:
e0:62:f4:3b:0e:a3:99:ed:c9:a6:2c:f8:16:95:1a:
15:4d:9e:49:0b:da:97:5c:a4:b2:e3:f0:45:d8:27:
9b:1e:c7:ae:7f:23:82:6d:d6:25:91:d5:d0:cd:ab:
ee:67:9f:18:b6:ff:3b:5a:2c:e6:6e:d2:7d:08:08:
8e:2c:99:a4:cd:68:10:09:c2:f0:f6:19:16:28:05:
51:7a:f1:9f:3e:7c:65:53:0e:f7:3c:cf:9d:b6:8a:
93:5c:b9:25:7f:79:e1:ef:6a:db:16:b9:af:bd:16:
dd:96:39:a2:9c:d7:ae:82:d7:f4:4b:53:d6:bb:d9:
d6:46:13:18:19:26:e4:9e:b3:e9:24:90:71:be:4f:
1d:e7:c9:0e:40:9e:7b:39:4c:8d:9d:44:ab:78:8e:
a3:9c:b6:03:da:74:3e:97:c3:d0:f4:f9:f0:f7:81:
85:3b:79:55:50:f7:61:fa:1a:26:5b:19:d5:ee:59:
f3:2e:41:0a:dc:4f:bc:dd:77:a6:9b:98:96:6c:91:
3b:fc:cf:42:96:7e:00:40:e8:6b:44:fd:58:1a:6a:
46:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:42:05:2E:79:77:78:60:24:66:48:93:B4:83:C0:C5:C2:C8:17:3B
X509v3 Authority Key Identifier:
keyid:81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/3231332e3135372e3131362e302f32332d3233203d3e203230353130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.157.116.0/23
Signature Algorithm: sha256WithRSAEncryption
28:4a:95:6d:ce:c9:7b:7d:23:22:4f:aa:23:d1:ca:fa:f6:f9:
7a:32:b2:de:56:8c:fc:70:2d:69:49:b1:a4:e5:d9:07:f7:a2:
37:76:07:01:bc:5a:2d:35:3e:ee:2b:7c:9a:cc:f2:86:f4:cb:
7b:a5:f6:69:6c:09:47:a8:45:cc:10:4e:e1:c4:e6:f6:5c:5f:
e4:42:7b:0a:ab:92:1d:0b:c9:d7:a5:56:c1:44:45:22:83:70:
fa:67:c6:6b:99:18:4c:8f:54:cd:cd:4c:b5:68:ad:07:d4:32:
4a:9f:27:00:9d:ec:19:ba:4b:e3:a4:cf:21:52:cb:1f:af:41:
3a:ca:cf:3f:23:62:d5:2f:80:29:2f:25:de:76:4d:73:29:8b:
49:09:5f:44:8d:e2:e2:28:65:15:fc:4e:eb:bd:59:e3:76:40:
c6:4a:29:fc:c1:10:29:2d:fa:fb:2e:73:7a:5c:1e:5f:1b:27:
10:df:09:a1:7b:f9:8c:1c:11:fc:56:a8:4a:28:5d:12:83:ec:
aa:3b:1a:fe:d0:04:29:70:58:d1:6d:78:13:11:5b:30:96:3a:
b3:90:0e:cd:bf:71:ae:ef:b6:91:1f:68:47:6d:6d:93:1d:ec:
25:31:d5:8c:ac:ad:b5:07:79:c9:ee:fb:67:a1:6d:d7:46:e3:
5e:30:18:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 05:51:56 2026 by rpki-client