Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3231322e32342e3132372e302f32342d3234203d3e20323035353434.roa
File: 3231322e32342e3132372e302f32342d3234203d3e20323035353434.roa (raw, json)
Hash identifier: Mxn8uOU1SwCqejZhgNenv9gthI4/mGec1zouYkB+GgA=
Subject key identifier: B8:88:A8:8D:40:6E:D3:FA:ED:06:18:73:7A:2A:6A:48:45:87:0D:5B
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 43D605B23A89968132EC3930A2704EA586320245
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3231322e32342e3132372e302f32342d3234203d3e20323035353434.roa
Signing time: Wed 15 Jul 2026 07:14:59 +0000
ROA not before: Wed 15 Jul 2026 07:09:59 +0000
ROA not after: Wed 14 Jul 2027 07:14:59 +0000
asID: 205544
IP address blocks: 212.24.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:d6:05:b2:3a:89:96:81:32:ec:39:30:a2:70:4e:a5:86:32:02:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Jul 15 07:09:59 2026 GMT
Not After : Jul 14 07:14:59 2027 GMT
Subject: CN=B888A88D406ED3FAED0618737A2A6A4845870D5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:78:74:32:b1:fe:cb:54:cb:79:12:a1:90:30:
b5:45:20:5d:0d:59:00:9d:7d:85:30:d6:30:fa:c9:
5f:78:5a:71:c9:25:90:8e:1a:aa:17:eb:03:6d:de:
07:8f:a8:41:8c:fc:dd:0a:9b:8a:c1:64:08:2e:ed:
ae:3c:4f:80:72:6b:6b:9e:53:32:f0:f6:9a:6e:07:
8d:30:64:fa:04:2e:03:ff:e7:d6:64:96:d1:44:cc:
32:3c:05:42:df:8d:16:4b:58:f3:62:9e:18:42:ed:
bf:79:4b:70:29:4a:1d:fc:46:7e:bf:8e:b6:e7:b4:
6b:73:b3:19:79:15:fe:2a:bd:e5:d8:47:08:ba:d6:
1f:1c:d6:9d:84:02:b5:18:76:dd:a7:9e:1b:f4:06:
ef:8d:2f:ec:66:a4:58:b3:f3:51:ed:94:87:27:d6:
6f:6e:e9:ca:57:ab:37:b9:b3:bc:5a:85:5f:42:7a:
ad:3d:b9:b6:11:31:5d:07:37:5d:70:73:74:72:58:
1a:09:fd:16:09:21:f3:85:cb:e6:b4:b5:b0:9a:a0:
14:56:d5:50:21:2c:0f:a7:ed:13:23:77:f1:16:dd:
07:5c:2e:15:46:6b:f9:8f:bf:a5:58:19:45:f2:69:
d6:82:94:96:f4:ec:32:fe:a8:e2:b8:c4:32:0f:f1:
eb:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:88:A8:8D:40:6E:D3:FA:ED:06:18:73:7A:2A:6A:48:45:87:0D:5B
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3231322e32342e3132372e302f32342d3234203d3e20323035353434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.24.127.0/24
Signature Algorithm: sha256WithRSAEncryption
97:ff:be:c2:48:1f:f0:af:34:3d:b9:44:4d:b4:e1:5c:a4:f6:
7c:78:44:27:24:5d:bd:9d:11:da:78:57:f6:f7:e3:ca:f8:57:
50:a1:f6:64:8b:0c:cc:35:ea:14:97:77:b7:1d:07:68:0a:95:
e5:89:62:e1:fb:56:c8:9e:e5:96:cf:af:fa:e7:e7:07:6e:b7:
f2:14:39:73:74:70:5d:f0:65:57:dd:54:55:e6:ed:b3:68:e9:
b6:23:05:3f:26:d1:3b:cb:d3:7e:b5:a4:e4:c7:52:b8:ad:8e:
da:0d:70:93:c8:ce:8b:20:00:6d:be:83:77:31:df:cb:33:ec:
de:13:f7:da:27:9c:b6:26:b4:55:dc:03:69:c9:9d:72:43:d2:
7f:fc:6f:54:0a:bb:ec:c9:79:e7:41:0c:43:d9:ee:fd:63:42:
73:e4:e6:2e:84:d8:ff:32:86:69:aa:f3:bf:9c:a2:c6:ff:4f:
61:3d:12:0e:41:d1:06:e1:00:07:32:9a:88:8c:f7:69:18:e3:
87:ed:97:68:fc:d9:94:8b:00:a8:47:7e:87:c1:dc:ed:1d:7b:
1a:6a:55:51:7e:7f:58:e0:0f:30:8e:e4:3f:76:bc:57:e7:dc:
4c:f6:82:ab:da:e6:2a:e8:68:78:5c:4d:96:5d:41:50:b8:c4:
b5:6a:e1:ae
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUQ9YFsjqJloEy7DkwonBOpYYyAkUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoY2VmY2U0NDliZWE4ZGVhZWRiMTgwNGRiYTI1YzU4NGRm
NTg3M2RjNDAeFw0yNjA3MTUwNzA5NTlaFw0yNzA3MTQwNzE0NTlaMDMxMTAvBgNV
BAMTKEI4ODhBODhENDA2RUQzRkFFRDA2MTg3MzdBMkE2QTQ4NDU4NzBENUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpeHQysf7LVMt5EqGQMLVFIF0N
WQCdfYUw1jD6yV94WnHJJZCOGqoX6wNt3gePqEGM/N0Km4rBZAgu7a48T4Bya2ue
UzLw9ppuB40wZPoELgP/59ZkltFEzDI8BULfjRZLWPNinhhC7b95S3ApSh38Rn6/
jrbntGtzsxl5Ff4qveXYRwi61h8c1p2EArUYdt2nnhv0Bu+NL+xmpFiz81HtlIcn
1m9u6cpXqze5s7xahV9Ceq09ubYRMV0HN11wc3RyWBoJ/RYJIfOFy+a0tbCaoBRW
1VAhLA+n7RMjd/EW3QdcLhVGa/mPv6VYGUXyadaClJb07DL+qOK4xDIP8eu3AgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUuIiojUBu0/rtBhhzeipqSEWHDVswHwYDVR0j
BBgwFoAUzvzkSb6o3q7bGATbolxYTfWHPcQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDFiMzVmOGItNmY0OC00YmFkLWIxODUtNWMxZGFhOGFj
ZGE5LzAvQ0VGQ0U0NDlCRUE4REVBRURCMTgwNERCQTI1QzU4NERGNTg3M0RDNC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p2emtTYjZvM3E3YkdBVGJvbHhZVGZX
SFBjUS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZDFiMzVmOGIt
NmY0OC00YmFkLWIxODUtNWMxZGFhOGFjZGE5LzAvMzIzMTMyMmUzMjM0MmUzMTMy
MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzUzNTM0MzQucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADUGH8wDQYJKoZIhvcNAQELBQADggEBAJf/vsJIH/CvND25RE204Vyk9nx4RCck
Xb2dEdp4V/b348r4V1Ch9mSLDMw16hSXd7cdB2gKleWJYuH7Vsie5ZbPr/rn5wdu
t/IUOXN0cF3wZVfdVFXm7bNo6bYjBT8m0TvL0361pOTHUritjtoNcJPIzosgAG2+
g3cx38sz7N4T99onnLYmtFXcA2nJnXJD0n/8b1QKu+zJeedBDEPZ7v1jQnPk5i6E
2P8yhmmq87+cosb/T2E9Eg5B0QbhAAcymoiM92kY44ftl2j82ZSLAKhHfofB3O0d
expqVVF+f1jgDzCO5D92vFfn3Ez2gqva5iroaHhcTZZdQVC4xLVq4a4=
-----END CERTIFICATE-----
Generated at Sat Jul 18 02:54:14 2026 by rpki-client