Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3231322e31382e3131352e302f32342d3234203d3e20323131343834.roa
File: 3231322e31382e3131352e302f32342d3234203d3e20323131343834.roa (raw, json)
Hash identifier: C+TxIzF6QDeooBljKtU5g8jHCoJKYteQs88g8gs89EQ=
Subject key identifier: 10:82:AE:CA:FA:14:01:C6:85:46:20:13:6C:9B:EA:A8:A4:00:5B:2D
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 12244728DA1619915284D4562B48FBD66AE08A0A
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3231322e31382e3131352e302f32342d3234203d3e20323131343834.roa
Signing time: Tue 21 Jul 2026 08:12:00 +0000
ROA not before: Tue 21 Jul 2026 08:07:00 +0000
ROA not after: Tue 20 Jul 2027 08:12:00 +0000
asID: 211484
IP address blocks: 212.18.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:24:47:28:da:16:19:91:52:84:d4:56:2b:48:fb:d6:6a:e0:8a:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Jul 21 08:07:00 2026 GMT
Not After : Jul 20 08:12:00 2027 GMT
Subject: CN=1082AECAFA1401C6854620136C9BEAA8A4005B2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:50:ef:3a:1e:96:62:21:84:5f:80:a7:b9:f4:
ad:e6:30:c0:de:7c:e9:76:f1:61:5c:ca:4b:ee:bf:
d9:ef:e7:44:71:d2:97:ad:a3:5b:95:b3:95:33:57:
82:3d:62:32:f0:54:d5:79:52:83:80:35:0c:e6:29:
e2:b0:fe:19:16:d3:60:66:b0:05:6c:c1:03:3a:94:
de:8a:16:cf:eb:b0:df:f2:16:d7:f4:90:2d:dc:4c:
97:2e:7b:dc:c5:38:1e:72:a4:a6:b3:2e:6f:d4:71:
75:43:f8:e3:33:b2:46:0f:b2:36:df:51:e9:eb:ea:
ad:08:19:a0:d6:c7:40:15:e9:b5:5a:a6:fe:4d:66:
b8:f8:8d:09:9b:84:31:8c:4a:70:41:f0:3e:ce:63:
28:13:d8:a2:1b:72:53:a2:43:c9:51:b5:0e:5f:a7:
5d:ca:e2:ef:5b:be:1c:5f:75:7e:0c:c3:ff:39:66:
89:2a:21:f1:16:39:ca:dd:72:4f:3c:6b:f3:47:d2:
26:24:c4:ac:d9:04:40:ea:35:5c:c5:d4:41:58:e7:
4e:ed:bd:0f:aa:a5:5e:2a:13:f5:fe:4e:ba:1a:15:
0a:95:62:73:4a:90:55:4a:9c:ea:ea:5e:c7:9e:3d:
f2:0b:5a:99:ab:d6:3a:44:d5:cd:e2:fa:46:81:5c:
ab:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:82:AE:CA:FA:14:01:C6:85:46:20:13:6C:9B:EA:A8:A4:00:5B:2D
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3231322e31382e3131352e302f32342d3234203d3e20323131343834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.18.115.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:e6:5a:42:e3:2f:0f:cb:96:a5:a4:5e:0d:a9:b4:fe:9f:29:
50:75:9f:77:4c:52:17:19:5c:48:b7:1e:0b:67:71:30:69:fd:
98:7a:e4:71:91:14:47:2d:14:83:81:14:1e:18:17:01:8a:86:
5f:9f:ab:42:e1:d5:14:4f:00:fd:52:38:6b:dd:ae:26:65:e4:
98:ec:02:19:6d:ae:0b:07:ba:2d:1c:84:c6:bd:14:89:ca:3b:
14:b3:d4:70:48:53:6c:03:a2:1c:60:7e:69:90:2a:65:b2:a1:
c6:fa:aa:11:5a:95:a3:17:9c:b3:61:45:b1:3f:07:9f:3d:ff:
ff:7a:1f:32:ba:8c:32:1c:1e:27:29:c3:cc:06:74:30:30:03:
51:1f:19:65:7a:44:63:e2:67:e0:c3:f7:3f:a8:2a:69:7e:bf:
1a:4a:75:dc:d8:f4:64:06:d8:ea:5d:24:54:f6:1d:cc:82:89:
d1:5a:c4:d0:12:45:90:5d:12:cb:07:67:fe:76:c7:cc:6f:4c:
93:19:71:c9:29:ca:58:34:af:dd:c9:1a:07:e6:55:92:c2:32:
5d:44:c4:dc:0a:db:73:d7:db:41:f9:df:be:a9:b3:b1:ba:67:
9d:4b:04:f6:52:c0:32:83:18:12:31:0b:05:64:60:49:95:68:
62:ca:9d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:33:15 2026 by rpki-client