Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/3231332e3135372e3132312e302f32342d3234203d3e203331373135.roa
File: 3231332e3135372e3132312e302f32342d3234203d3e203331373135.roa (raw, json)
Hash identifier: I5j6fsClsT+fyd0Wi186EVr6Wo5+E40NjyrVgONGkdw=
Subject key identifier: 15:43:35:53:9F:44:2D:5F:A6:1C:92:AE:87:B2:DA:17:41:78:5F:A7
Certificate issuer: /CN=8184669b0189b7fabe05e700325a0d74957beb27
Certificate serial: 730A75A6E2407CEE509AB7A7CB9570E1F0E9FDD7
Authority key identifier: 81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/3231332e3135372e3132312e302f32342d3234203d3e203331373135.roa
Signing time: Wed 04 Mar 2026 03:10:16 +0000
ROA not before: Wed 04 Mar 2026 03:05:16 +0000
ROA not after: Wed 03 Mar 2027 03:10:16 +0000
asID: 31715
IP address blocks: 213.157.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl
rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft
rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 12:21:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:0a:75:a6:e2:40:7c:ee:50:9a:b7:a7:cb:95:70:e1:f0:e9:fd:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8184669b0189b7fabe05e700325a0d74957beb27
Validity
Not Before: Mar 4 03:05:16 2026 GMT
Not After : Mar 3 03:10:16 2027 GMT
Subject: CN=154335539F442D5FA61C92AE87B2DA1741785FA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:19:24:4d:4e:ec:a7:dd:77:86:5a:9c:bf:75:
7c:0d:0d:54:df:25:4c:1b:19:09:8f:cf:56:0a:26:
e2:0a:6f:e6:a4:f6:32:97:32:b3:35:b9:a5:ea:b0:
00:82:ec:01:81:66:00:77:60:d0:50:5b:2f:03:b4:
1e:05:97:15:c4:76:57:fc:18:1a:aa:80:33:41:83:
ec:76:a8:41:24:32:50:e5:40:e9:27:04:79:30:4f:
37:50:0b:01:4f:85:5f:2e:c7:de:cf:5e:eb:e8:56:
77:31:d1:7d:c5:87:28:fa:12:7e:8e:ba:0b:d1:92:
eb:a7:10:f5:ac:66:21:82:47:9d:cd:66:91:fa:27:
c8:78:ef:b7:21:22:19:87:f4:e6:01:69:64:96:60:
53:00:39:50:f0:ec:ff:01:21:ce:99:b8:4a:c7:74:
f8:20:b5:bd:59:50:86:1d:5f:10:90:34:f9:6f:e8:
62:e7:9b:47:77:01:d0:0f:e8:42:40:24:11:bb:25:
5b:48:f3:32:cd:20:01:46:67:c5:82:b1:df:3b:97:
6b:1e:79:97:7a:f3:bb:85:b0:c8:b8:1c:c7:29:57:
15:31:8a:fd:b4:b6:05:fe:fc:04:75:80:8a:86:e8:
d2:12:ac:77:e1:09:f8:80:8d:1c:db:95:a9:8e:b8:
e4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:43:35:53:9F:44:2D:5F:A6:1C:92:AE:87:B2:DA:17:41:78:5F:A7
X509v3 Authority Key Identifier:
keyid:81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/3231332e3135372e3132312e302f32342d3234203d3e203331373135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.157.121.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:f7:52:32:d5:ca:91:b2:6c:4b:19:bc:1c:60:86:a9:be:9f:
db:fd:e9:3b:a9:7c:e4:a2:67:fb:94:a6:a6:e0:54:b7:65:c0:
cc:b8:d5:18:23:3e:0f:37:46:ec:6c:9e:89:1e:70:56:d6:27:
41:24:f3:33:98:d4:14:71:52:47:40:2e:11:c1:a5:05:6f:5e:
a5:79:8e:80:db:75:fd:f2:cc:77:12:d5:64:74:84:38:04:ac:
e8:d9:8d:b1:23:83:bb:39:39:4c:d8:bd:c0:d2:4c:9e:50:d1:
aa:05:df:bc:fd:a2:2f:3c:1d:5c:08:d9:45:63:6d:26:2b:e8:
d6:b2:b7:0a:06:08:99:da:ba:fe:7b:e5:e5:81:c8:67:d1:44:
c0:9e:e3:1e:87:66:82:9d:02:88:ec:00:8f:92:bb:d7:1f:b7:
4f:6a:d0:b8:e9:19:f2:eb:63:3f:6e:4a:da:75:5a:39:aa:17:
64:01:c8:c3:9b:f2:c5:0a:57:9b:36:b8:e2:bc:54:cb:20:92:
c2:5f:5e:83:85:83:4a:ba:58:85:54:eb:97:07:2d:5b:09:91:
11:d2:f3:44:86:d2:bf:ac:6a:1f:3c:ea:45:42:bb:c6:11:13:
7a:11:46:54:22:13:8e:8a:a2:80:9f:0e:3b:6c:9e:d4:f9:87:
f5:eb:19:6b
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUcwp1puJAfO5Qmreny5Vw4fDp/dcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODE4NDY2OWIwMTg5YjdmYWJlMDVlNzAwMzI1YTBkNzQ5
NTdiZWIyNzAeFw0yNjAzMDQwMzA1MTZaFw0yNzAzMDMwMzEwMTZaMDMxMTAvBgNV
BAMTKDE1NDMzNTUzOUY0NDJENUZBNjFDOTJBRTg3QjJEQTE3NDE3ODVGQTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPGSRNTuyn3XeGWpy/dXwNDVTf
JUwbGQmPz1YKJuIKb+ak9jKXMrM1uaXqsACC7AGBZgB3YNBQWy8DtB4FlxXEdlf8
GBqqgDNBg+x2qEEkMlDlQOknBHkwTzdQCwFPhV8ux97PXuvoVncx0X3Fhyj6En6O
ugvRkuunEPWsZiGCR53NZpH6J8h477chIhmH9OYBaWSWYFMAOVDw7P8BIc6ZuErH
dPggtb1ZUIYdXxCQNPlv6GLnm0d3AdAP6EJAJBG7JVtI8zLNIAFGZ8WCsd87l2se
eZd687uFsMi4HMcpVxUxiv20tgX+/AR1gIqG6NISrHfhCfiAjRzblamOuOTjAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUFUM1U59ELV+mHJKuh7LaF0F4X6cwHwYDVR0j
BBgwFoAUgYRmmwGJt/q+BecAMloNdJV76ycwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTQzMWU0MmUtMGQ3Zi00NGQwLTgxM2YtYjVlM2EyYWJi
ZTI1LzAvODE4NDY2OUIwMTg5QjdGQUJFMDVFNzAwMzI1QTBENzQ5NTdCRUIyNy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2dZUm1td0dKdF9xLUJlY0FNbG9OZEpW
NzZ5Yy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTQzMWU0MmUt
MGQ3Zi00NGQwLTgxM2YtYjVlM2EyYWJiZTI1LzAvMzIzMTMzMmUzMTM1MzcyZTMx
MzIzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMzMzEzNzMxMzUucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADVnXkwDQYJKoZIhvcNAQELBQADggEBAJ33UjLVypGybEsZvBxghqm+n9v96Tup
fOSiZ/uUpqbgVLdlwMy41RgjPg83RuxsnokecFbWJ0Ek8zOY1BRxUkdALhHBpQVv
XqV5joDbdf3yzHcS1WR0hDgErOjZjbEjg7s5OUzYvcDSTJ5Q0aoF37z9oi88HVwI
2UVjbSYr6NaytwoGCJnauv575eWByGfRRMCe4x6HZoKdAojsAI+Su9cft09q0Ljp
GfLrYz9uStp1WjmqF2QByMOb8sUKV5s2uOK8VMsgksJfXoOFg0q6WIVU65cHLVsJ
kRHS80SG0r+sah886kVCu8YRE3oRRlQiE46KooCfDjtsntT5h/XrGWs=
-----END CERTIFICATE-----
Generated at Fri Mar 20 02:13:49 2026 by rpki-client