Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3231332e3232352e3233372e302f32342d3234203d3e20313432323430.roa
File: 3231332e3232352e3233372e302f32342d3234203d3e20313432323430.roa (raw, json)
Hash identifier: eOBHKxAy5GptVsKHnspHDikAVrEFiBXFTAg2Z887GNM=
Subject key identifier: 92:D6:8A:5A:FC:79:01:5C:67:E4:FF:38:58:50:21:32:2F:F7:CE:E3
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 0D81F23D6FF2DA608AB17BB72D7AF9D501848CF5
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3231332e3232352e3233372e302f32342d3234203d3e20313432323430.roa
Signing time: Sat 22 Aug 2026 03:11:32 +0000
ROA not before: Sat 22 Aug 2026 03:06:32 +0000
ROA not after: Sat 21 Aug 2027 03:11:32 +0000
asID: 142240
IP address blocks: 213.225.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 22:28:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:81:f2:3d:6f:f2:da:60:8a:b1:7b:b7:2d:7a:f9:d5:01:84:8c:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Aug 22 03:06:32 2026 GMT
Not After : Aug 21 03:11:32 2027 GMT
Subject: CN=92D68A5AFC79015C67E4FF38585021322FF7CEE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8c:c1:1f:6f:37:26:a1:84:5c:69:10:93:93:
da:0e:1a:00:d6:1e:56:ed:b5:19:58:dc:84:c4:14:
8c:19:7a:b8:2b:13:12:1b:3a:b5:b8:ff:75:c9:e6:
2c:83:9f:32:b7:4c:c9:2b:fc:27:47:bb:31:dc:92:
df:81:ec:a3:c3:f4:b4:3c:87:23:e3:49:3f:1a:25:
78:ca:9d:6e:03:73:d6:0c:6a:a1:f4:ef:e6:0e:72:
5e:92:02:53:f6:5a:e2:f3:92:cd:1a:df:26:67:34:
2e:84:0b:d8:de:cd:ba:cb:e0:04:fc:77:79:d9:3d:
6e:49:fc:32:7a:3d:04:25:24:72:b5:d0:52:3b:e7:
fa:eb:f1:53:1b:26:5c:e7:cc:a7:0b:3a:b7:ab:cc:
9b:9e:06:c4:45:16:df:84:f5:73:56:76:6a:a1:7d:
13:3a:35:6e:4f:28:c6:4c:44:25:b4:84:50:5d:3e:
e9:39:36:82:46:44:06:21:8f:d2:36:cd:db:55:6b:
91:76:c9:8d:9a:4b:86:6d:68:5d:cb:b6:53:55:04:
ee:5f:7e:e0:84:77:2b:33:c7:08:26:fb:b3:7e:ef:
16:17:0b:b7:6c:ab:11:9d:9a:39:d5:80:b8:b7:cb:
15:d2:8d:91:cf:cc:0b:19:63:20:3d:cf:01:93:5a:
56:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D6:8A:5A:FC:79:01:5C:67:E4:FF:38:58:50:21:32:2F:F7:CE:E3
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3231332e3232352e3233372e302f32342d3234203d3e20313432323430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.225.237.0/24
Signature Algorithm: sha256WithRSAEncryption
37:2d:bc:38:04:4f:8c:85:60:95:19:bf:c3:54:35:06:82:e2:
36:14:0e:be:62:5c:68:2a:a1:f8:f4:a7:56:3d:cb:ed:e8:d6:
de:5a:21:c9:64:be:70:6f:50:95:d1:13:7a:56:b2:a6:a0:01:
02:90:c4:3b:c8:01:77:c8:7f:cb:f5:c1:7b:12:c2:b4:28:fd:
cd:7c:ac:68:4d:e2:cc:45:12:3e:43:ee:4a:44:a7:96:a6:f6:
20:72:75:a3:04:15:ab:04:ba:10:87:7f:39:9c:f2:65:b7:4a:
9d:b7:84:22:c3:14:be:34:95:91:2c:88:61:0a:2f:71:dc:ca:
8e:30:8c:35:7b:fb:c1:03:19:d9:c5:da:04:75:47:48:ba:cf:
39:64:2e:9e:84:bf:19:ab:0e:00:93:4a:ff:8c:b0:40:ea:b9:
12:1d:6b:9a:d7:fd:89:63:f7:2b:68:65:84:52:3e:15:6f:6e:
a8:aa:b1:e7:12:5b:e3:77:87:d1:17:0d:57:d2:2b:3d:42:35:
60:c0:03:23:a1:27:e5:08:00:ab:4c:3c:d4:93:3f:99:58:8c:
3f:5a:3c:e0:0b:b5:6b:08:79:e8:f6:52:2c:b6:98:61:24:95:
00:13:ce:f3:72:5e:3d:91:5d:90:29:48:76:dd:15:40:72:05:
04:88:6e:73
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUDYHyPW/y2mCKsXu3LXr51QGEjPUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGQwNTlmMTBkMThkMDAwNTJjODA4ZWI4MDY5ZjkwZDQ3
ZTMwNTY0YTAeFw0yNjA4MjIwMzA2MzJaFw0yNzA4MjEwMzExMzJaMDMxMTAvBgNV
BAMTKDkyRDY4QTVBRkM3OTAxNUM2N0U0RkYzODU4NTAyMTMyMkZGN0NFRTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIjMEfbzcmoYRcaRCTk9oOGgDW
HlbttRlY3ITEFIwZergrExIbOrW4/3XJ5iyDnzK3TMkr/CdHuzHckt+B7KPD9LQ8
hyPjST8aJXjKnW4Dc9YMaqH07+YOcl6SAlP2WuLzks0a3yZnNC6EC9jezbrL4AT8
d3nZPW5J/DJ6PQQlJHK10FI75/rr8VMbJlznzKcLOrerzJueBsRFFt+E9XNWdmqh
fRM6NW5PKMZMRCW0hFBdPuk5NoJGRAYhj9I2zdtVa5F2yY2aS4ZtaF3LtlNVBO5f
fuCEdyszxwgm+7N+7xYXC7dsqxGdmjnVgLi3yxXSjZHPzAsZYyA9zwGTWlYHAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUktaKWvx5AVxn5P84WFAhMi/3zuMwHwYDVR0j
BBgwFoAUDQWfENGNAAUsgI64Bp+Q1H4wVkowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQtMjg1NC00MDgwLTlhMDktNzI2MjMyNmM5
ZTIyLzEvMEQwNTlGMTBEMThEMDAwNTJDODA4RUI4MDY5RjkwRDQ3RTMwNTY0QS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RRV2ZFTkdOQUFVc2dJNjRCcC1RMUg0
d1Zrby5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQt
Mjg1NC00MDgwLTlhMDktNzI2MjMyNmM5ZTIyLzEvMzIzMTMzMmUzMjMyMzUyZTMy
MzMzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzMjMyMzQzMC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEANXh7TANBgkqhkiG9w0BAQsFAAOCAQEANy28OARPjIVglRm/w1Q1BoLiNhQO
vmJcaCqh+PSnVj3L7ejW3lohyWS+cG9QldETelaypqABApDEO8gBd8h/y/XBexLC
tCj9zXysaE3izEUSPkPuSkSnlqb2IHJ1owQVqwS6EId/OZzyZbdKnbeEIsMUvjSV
kSyIYQovcdzKjjCMNXv7wQMZ2cXaBHVHSLrPOWQunoS/GasOAJNK/4ywQOq5Eh1r
mtf9iWP3K2hlhFI+FW9uqKqx5xJb43eH0RcNV9IrPUI1YMADI6En5QgAq0w81JM/
mViMP1o84Au1awh56PZSLLaYYSSVABPO83JePZFdkClIdt0VQHIFBIhucw==
-----END CERTIFICATE-----
Generated at Fri Sep 4 15:31:50 2026 by rpki-client