Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3231322e322e3233372e302f32342d3234203d3e20323038393035.roa
File: 3231322e322e3233372e302f32342d3234203d3e20323038393035.roa (raw, json)
Hash identifier: k8j6EQsdE7kJaniOHXaXF7xlodb4Gvv5zOwJY5HoIqk=
Subject key identifier: 3E:CA:BB:06:DE:64:31:E1:19:DA:D8:91:C4:67:4B:20:E7:27:84:D4
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 1E111FF2F14BB6C2C31D70FCE7D74B6174D29FF0
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3231322e322e3233372e302f32342d3234203d3e20323038393035.roa
Signing time: Thu 18 Jun 2026 15:41:47 +0000
ROA not before: Thu 18 Jun 2026 15:36:47 +0000
ROA not after: Thu 17 Jun 2027 15:41:47 +0000
asID: 208905
IP address blocks: 212.2.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 16:34:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:11:1f:f2:f1:4b:b6:c2:c3:1d:70:fc:e7:d7:4b:61:74:d2:9f:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Jun 18 15:36:47 2026 GMT
Not After : Jun 17 15:41:47 2027 GMT
Subject: CN=3ECABB06DE6431E119DAD891C4674B20E72784D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:2f:52:c7:9f:1f:7f:ca:c3:6a:02:59:0a:d6:
4b:ac:65:f5:d1:4d:1d:86:5f:1f:3b:c7:0b:5b:37:
3c:73:8b:11:ff:ea:da:36:0b:a9:ab:e5:42:d2:5c:
b2:19:a2:18:2c:88:17:28:b8:0d:88:87:89:8f:58:
34:aa:34:91:b2:cc:20:16:76:21:48:61:7b:08:15:
e3:e1:45:cc:72:09:0a:c3:6d:b7:e5:71:5b:da:09:
e5:7f:ee:c3:d0:74:42:02:9f:6d:59:a0:b7:87:0e:
6d:1f:5e:25:fa:f2:03:72:6e:7a:1d:d7:f1:9d:11:
6d:6c:28:9b:41:d3:40:46:4b:71:3e:8e:34:33:a7:
46:d2:46:66:0f:ec:36:ba:31:6e:dc:ac:bf:06:8c:
ec:c8:41:87:8c:97:56:8b:e8:fb:2c:3b:ce:db:ad:
35:0b:0d:a7:a2:31:05:78:38:1a:00:58:17:c0:92:
18:0b:b8:94:25:11:99:50:91:ea:73:61:2f:72:c8:
da:87:c1:68:a7:28:cb:4a:84:94:7e:d9:66:c3:7d:
87:c9:c5:9c:aa:fa:0c:8e:13:e2:b2:b7:94:ea:ab:
1a:4d:83:20:7f:1a:bf:3e:2c:f6:a5:d7:cf:8f:5d:
3a:c8:3b:d1:b5:90:15:4e:cd:63:d3:75:5a:c9:8d:
55:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:CA:BB:06:DE:64:31:E1:19:DA:D8:91:C4:67:4B:20:E7:27:84:D4
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3231322e322e3233372e302f32342d3234203d3e20323038393035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.2.237.0/24
Signature Algorithm: sha256WithRSAEncryption
45:ae:7b:ec:e0:9d:ca:f1:49:4f:5f:c1:85:f9:8c:f1:c2:ed:
b8:e6:03:0c:e8:02:0c:79:62:b2:9c:81:fb:6c:45:c4:26:4e:
fe:98:32:88:ba:a9:f0:91:59:6b:12:78:bd:0c:5f:a4:0a:2f:
65:cd:ae:76:bb:a0:8e:03:ef:18:a3:a8:e3:3e:b6:f4:52:56:
b3:3e:41:59:9c:62:99:8b:14:83:ea:21:22:59:2c:f0:28:a4:
b1:b5:44:4d:b5:19:82:5f:77:38:29:2c:5c:eb:74:05:0d:3c:
8b:66:c0:79:01:5a:6b:d1:cf:8a:c8:3c:70:9c:dd:8e:e9:22:
7f:fb:ff:31:56:06:18:75:9c:68:e9:37:00:b1:6e:49:47:6c:
cb:aa:86:5f:2c:17:5a:7d:cd:08:f1:27:e2:2a:13:a7:ed:0b:
5b:ea:a2:aa:15:2c:34:3c:06:73:37:83:37:f2:49:a2:04:a0:
5e:81:24:47:43:21:52:0c:f2:d8:17:6b:dc:76:8f:93:9f:48:
e3:94:f6:30:2d:c0:09:85:02:dd:62:41:21:0c:48:cc:6e:ad:
7e:0c:b7:01:80:b0:56:de:b9:34:cb:df:5d:7a:c1:ea:5d:62:
3b:9f:a3:9e:a3:0a:55:28:4e:ba:2c:76:4e:19:c0:3d:9e:45:
fa:ff:b7:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:37:47 2026 by rpki-client