Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3231322e322e3233372e302f32342d3234203d3e20383334.roa
File: 3231322e322e3233372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: PTUJaRdbVfb/jjpgJoZf3WCz3s9SVo4PSeZALPJzz9M=
Subject key identifier: F9:0B:F7:ED:F8:81:F3:2E:4F:EB:0B:43:37:98:0E:1D:12:1C:A2:80
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 52E2EBC18F59D8B7F9504B31073E204976AC877A
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3231322e322e3233372e302f32342d3234203d3e20383334.roa
Signing time: Wed 13 May 2026 13:14:12 +0000
ROA not before: Wed 13 May 2026 13:09:12 +0000
ROA not after: Wed 12 May 2027 13:14:12 +0000
asID: 834
IP address blocks: 212.2.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 17:34:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:e2:eb:c1:8f:59:d8:b7:f9:50:4b:31:07:3e:20:49:76:ac:87:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: May 13 13:09:12 2026 GMT
Not After : May 12 13:14:12 2027 GMT
Subject: CN=F90BF7EDF881F32E4FEB0B4337980E1D121CA280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:94:5a:27:b0:66:83:91:4c:b9:df:46:e3:d9:
10:67:b5:5d:10:9b:ca:e7:84:36:1b:52:da:ec:b4:
c8:a9:bb:5c:1b:fa:3c:2e:5b:d2:b0:bb:c2:b7:48:
04:4e:29:4a:68:48:e6:e8:f0:a8:39:1a:4b:a3:cc:
14:6c:49:ad:b3:9b:81:db:3d:2a:e9:e9:60:48:26:
34:cf:00:d0:86:91:4f:79:9a:cc:26:a4:8b:f1:df:
8d:f6:2b:5f:84:f5:ca:78:ac:78:5a:0c:d9:be:2c:
01:2d:77:ae:cc:79:2a:5c:bb:a1:84:4c:bc:64:44:
bc:c5:bc:b6:30:57:bf:fd:25:31:31:e0:43:95:e7:
35:35:ff:30:25:23:a8:30:c1:80:dc:95:7a:4c:e9:
73:f1:91:b1:3a:fd:a9:d5:d5:2b:a1:e3:9b:0e:64:
9f:f0:4a:e9:85:15:df:f1:24:17:c6:e6:db:39:19:
ff:64:b6:31:80:32:bc:0c:13:6c:16:b0:54:8c:61:
dc:1a:ac:52:8c:54:e2:6c:9c:78:0f:29:23:f4:ee:
bb:36:1c:1c:65:64:37:0e:4a:8a:0b:a6:96:49:b3:
19:ad:9b:10:27:7b:5e:d1:63:11:91:28:a7:e1:b5:
81:09:42:6c:2b:9d:ca:ae:fa:a6:ef:8f:90:46:b9:
0a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:0B:F7:ED:F8:81:F3:2E:4F:EB:0B:43:37:98:0E:1D:12:1C:A2:80
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3231322e322e3233372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.2.237.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:9c:68:32:05:9b:e3:d8:07:45:c9:1f:b9:6a:c5:23:9c:dd:
b9:a3:2f:9b:e6:a9:21:de:c6:49:23:a8:76:68:0b:ca:ce:73:
6c:5a:08:2d:c4:d1:94:75:2d:15:99:a2:68:fd:db:79:dd:98:
32:c0:be:cb:f2:59:a8:7c:cf:3a:9b:b0:cf:aa:11:b7:c1:d6:
b9:1f:25:99:e6:0e:37:06:99:0c:69:d7:f8:7d:ed:ac:2b:fe:
3a:b1:89:f5:09:6f:5d:ba:ca:94:df:e8:be:17:b3:16:0e:69:
00:60:0c:23:cf:7f:1a:43:fc:76:09:1f:37:f1:7e:59:38:29:
f3:91:44:2f:a1:96:ab:1b:48:aa:dc:cc:78:05:7a:cc:d5:9b:
9f:ad:26:a5:e4:fc:59:d4:0a:95:7d:ff:8d:9a:97:b8:c4:a8:
77:5b:49:89:eb:db:ac:1b:51:9d:40:4f:39:f9:ad:40:0f:7e:
aa:00:22:33:b4:be:eb:ee:d8:26:96:69:da:61:59:da:fe:79:
08:47:4f:f9:76:43:fd:65:3d:b8:28:11:d0:e0:a8:3c:f1:5a:
3f:67:e4:ae:44:a8:fc:3b:f8:0e:10:49:a4:d9:7d:7d:2e:c3:
0f:7a:91:a8:bf:98:76:d0:1f:9a:56:38:a0:f8:f8:84:a6:ed:
05:0f:88:82
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUUuLrwY9Z2Lf5UEsxBz4gSXash3owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGQwNTlmMTBkMThkMDAwNTJjODA4ZWI4MDY5ZjkwZDQ3
ZTMwNTY0YTAeFw0yNjA1MTMxMzA5MTJaFw0yNzA1MTIxMzE0MTJaMDMxMTAvBgNV
BAMTKEY5MEJGN0VERjg4MUYzMkU0RkVCMEI0MzM3OTgwRTFEMTIxQ0EyODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzlFonsGaDkUy530bj2RBntV0Q
m8rnhDYbUtrstMipu1wb+jwuW9Kwu8K3SAROKUpoSObo8Kg5GkujzBRsSa2zm4Hb
PSrp6WBIJjTPANCGkU95mswmpIvx3432K1+E9cp4rHhaDNm+LAEtd67MeSpcu6GE
TLxkRLzFvLYwV7/9JTEx4EOV5zU1/zAlI6gwwYDclXpM6XPxkbE6/anV1Suh45sO
ZJ/wSumFFd/xJBfG5ts5Gf9ktjGAMrwME2wWsFSMYdwarFKMVOJsnHgPKSP07rs2
HBxlZDcOSooLppZJsxmtmxAne17RYxGRKKfhtYEJQmwrncqu+qbvj5BGuQpBAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQU+Qv37fiB8y5P6wtDN5gOHRIcooAwHwYDVR0j
BBgwFoAUDQWfENGNAAUsgI64Bp+Q1H4wVkowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQtMjg1NC00MDgwLTlhMDktNzI2MjMyNmM5
ZTIyLzEvMEQwNTlGMTBEMThEMDAwNTJDODA4RUI4MDY5RjkwRDQ3RTMwNTY0QS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RRV2ZFTkdOQUFVc2dJNjRCcC1RMUg0
d1Zrby5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQt
Mjg1NC00MDgwLTlhMDktNzI2MjMyNmM5ZTIyLzEvMzIzMTMyMmUzMjJlMzIzMzM3
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1ALtMA0G
CSqGSIb3DQEBCwUAA4IBAQBPnGgyBZvj2AdFyR+5asUjnN25oy+b5qkh3sZJI6h2
aAvKznNsWggtxNGUdS0VmaJo/dt53ZgywL7L8lmofM86m7DPqhG3wda5HyWZ5g43
BpkMadf4fe2sK/46sYn1CW9dusqU3+i+F7MWDmkAYAwjz38aQ/x2CR838X5ZOCnz
kUQvoZarG0iq3Mx4BXrM1ZufrSal5PxZ1AqVff+Nmpe4xKh3W0mJ69usG1GdQE85
+a1AD36qACIztL7r7tgmlmnaYVna/nkIR0/5dkP9ZT24KBHQ4Kg88Vo/Z+SuRKj8
O/gOEEmk2X19LsMPepGov5h20B+aVjig+PiEpu0FD4iC
-----END CERTIFICATE-----
Generated at Fri May 15 08:25:04 2026 by rpki-client