Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3231322e322e3233382e302f32342d3234203d3e20313939373431.roa
File: 3231322e322e3233382e302f32342d3234203d3e20313939373431.roa (raw, json)
Hash identifier: +UiGMHT186FK7evbSGM3wae0Kc1lpwUZf19W7GWwyD4=
Subject key identifier: 39:3F:37:67:07:1C:A8:75:66:F9:78:C7:68:53:7F:88:5D:5B:F5:72
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 2806EF9F73F04F905B64896EDB61FD36CE34F275
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3231322e322e3233382e302f32342d3234203d3e20313939373431.roa
Signing time: Mon 10 Aug 2026 14:21:28 +0000
ROA not before: Mon 10 Aug 2026 14:16:28 +0000
ROA not after: Mon 09 Aug 2027 14:21:28 +0000
asID: 199741
IP address blocks: 212.2.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 22:17:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:06:ef:9f:73:f0:4f:90:5b:64:89:6e:db:61:fd:36:ce:34:f2:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Aug 10 14:16:28 2026 GMT
Not After : Aug 9 14:21:28 2027 GMT
Subject: CN=393F3767071CA87566F978C768537F885D5BF572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f5:50:27:e0:a7:f8:fe:e3:b2:89:80:de:00:
a3:32:c4:c8:5e:f7:a1:34:13:6a:8c:e3:ad:73:df:
af:d4:80:31:bb:3f:aa:9e:7d:fa:cc:ca:9a:53:c1:
c9:d5:99:cd:5a:f8:e6:fb:62:c3:09:34:aa:b8:ed:
e3:f7:b9:ad:29:7f:91:fb:9b:7f:b4:35:e4:a6:29:
59:e1:a1:5a:54:6e:db:72:19:0c:66:8c:e4:5a:8e:
7d:e7:f7:0f:d3:6d:dd:91:8f:18:79:17:19:bd:76:
86:18:94:80:c9:0e:a7:8c:31:9a:35:51:35:9d:14:
ae:e6:24:68:42:13:54:51:16:36:68:a8:a5:f7:ab:
30:fb:aa:c8:74:cb:10:5a:ac:ee:5c:e8:b1:0a:9d:
81:69:89:5e:5e:f7:5f:01:01:50:06:3a:e8:d0:40:
97:9a:a4:c7:d5:8b:b8:06:d7:ca:d0:ea:8f:01:a8:
f2:f2:05:87:a5:b2:7e:cc:17:31:03:c3:d7:5a:e2:
00:eb:c6:83:84:2a:92:94:71:6d:a2:07:2c:48:02:
b2:ed:3c:3c:74:54:9e:f6:74:a3:5f:01:86:17:d6:
55:f6:1b:44:4d:80:45:36:d0:d4:95:a8:98:06:b9:
7b:09:1b:f2:fe:90:45:51:b3:90:28:09:8c:57:3a:
90:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:3F:37:67:07:1C:A8:75:66:F9:78:C7:68:53:7F:88:5D:5B:F5:72
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3231322e322e3233382e302f32342d3234203d3e20313939373431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.2.238.0/24
Signature Algorithm: sha256WithRSAEncryption
42:3d:ff:dc:77:33:04:7b:52:6c:42:8d:a7:ea:d9:ac:fd:bc:
36:cf:51:50:56:bf:7d:90:7e:a2:11:c3:26:7d:75:3d:5a:31:
ed:98:2e:2a:c0:45:7e:e2:58:eb:14:ad:31:3c:9c:90:c0:fd:
8c:f1:8d:d1:51:2f:31:de:9f:b4:67:64:26:04:01:15:5d:96:
1d:02:4b:b0:c8:c1:d9:d4:2e:08:7e:9e:89:f7:66:9a:aa:a7:
74:36:07:94:3b:41:f5:ca:1c:7b:74:5b:06:dd:fe:29:29:da:
a3:f1:dd:b6:50:24:cf:8f:63:94:8d:00:1a:12:53:53:84:9b:
d4:d4:bb:bb:fc:04:9b:a9:64:7b:b6:51:a9:e3:32:a5:42:e6:
1a:47:01:fb:ba:71:8f:b4:3b:59:51:69:ed:97:62:4c:7d:d5:
13:e3:60:75:70:bc:51:e6:7d:83:5e:bc:08:d2:45:d1:f7:0c:
d9:f7:73:51:d9:6c:bc:a4:57:be:1f:6c:61:8d:4d:a1:df:bc:
0e:71:13:09:f8:d3:2e:db:20:22:b5:17:4b:d5:ab:8f:3a:b0:
7e:0a:ed:81:c8:6a:93:81:a9:74:37:01:de:22:9f:9a:05:f9:
b8:73:d7:34:23:61:6c:00:76:dd:f7:be:4e:8b:b7:ca:fd:76:
a8:ce:c8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 10:36:21 2026 by rpki-client