Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3231332e3232352e3233372e302f32342d3234203d3e20383334.roa
File: 3231332e3232352e3233372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: DmUl1UOfyEFR0IkzGYwyu0i/j2CQhJswq5LFSQ+uebQ=
Subject key identifier: 8D:D2:10:47:06:46:14:41:96:CA:D3:E9:4C:50:0A:B3:43:DB:7F:ED
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 573274FDEE6494B5C5E41B3703F7BCDEA5A2CF65
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3231332e3232352e3233372e302f32342d3234203d3e20383334.roa
Signing time: Wed 12 Aug 2026 00:00:31 +0000
ROA not before: Tue 11 Aug 2026 23:55:31 +0000
ROA not after: Wed 11 Aug 2027 00:00:31 +0000
asID: 834
IP address blocks: 213.225.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 22:17:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:32:74:fd:ee:64:94:b5:c5:e4:1b:37:03:f7:bc:de:a5:a2:cf:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Aug 11 23:55:31 2026 GMT
Not After : Aug 11 00:00:31 2027 GMT
Subject: CN=8DD210470646144196CAD3E94C500AB343DB7FED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:45:21:6a:1b:0a:b5:a2:24:97:fd:7b:0c:2c:
f3:3d:04:b4:e9:b2:93:36:c4:b3:07:3b:30:dc:88:
47:c0:c0:a4:5c:54:3f:01:d9:20:fa:d6:21:47:84:
00:fc:07:48:ac:91:02:5f:54:66:b0:c5:a2:28:76:
c4:73:54:b9:a6:8d:3a:c6:b4:33:2f:64:33:3a:1f:
76:5e:4a:e0:b2:b7:79:60:40:59:58:00:20:d1:c5:
08:f9:ee:f6:59:33:e5:27:3f:ec:42:8d:f3:f3:d0:
2d:a0:a9:a4:86:d7:89:c0:fa:ea:f5:80:00:5f:1f:
1e:3a:04:36:9d:43:f6:41:7a:01:96:a7:bf:24:b3:
34:52:bd:d5:ba:9f:90:f5:70:46:74:1d:ea:da:83:
d8:f2:92:35:7b:67:bf:77:1d:3d:e8:4e:c8:ae:3c:
e5:66:52:58:7a:44:b1:86:ef:4f:23:7b:e1:7c:60:
e2:47:6e:d2:fd:81:a4:9c:60:d1:01:54:a8:5f:83:
be:da:1a:79:3f:ab:70:83:8d:1b:a9:6c:30:2e:0f:
2e:d7:85:3b:8f:6f:e0:d5:30:1f:66:17:8e:b3:38:
ca:88:29:5c:59:db:0b:4a:7b:a8:18:59:a9:d6:a6:
35:69:db:73:b9:f2:97:6a:09:63:af:3e:79:8e:52:
f5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:D2:10:47:06:46:14:41:96:CA:D3:E9:4C:50:0A:B3:43:DB:7F:ED
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3231332e3232352e3233372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.225.237.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:04:8a:e2:4e:a3:e9:f6:f5:68:f9:38:38:bd:a4:cf:cc:f7:
a8:77:08:22:6b:8f:cd:a3:90:f9:f7:5d:78:06:0c:19:05:ae:
4d:87:27:da:37:50:c7:d4:94:58:cf:42:75:2e:33:2f:4a:71:
10:51:f7:d7:c4:05:84:1d:85:de:5f:b2:55:d9:7d:09:12:a8:
53:90:27:e4:e1:6d:53:be:b9:69:35:87:92:19:e1:da:58:52:
97:cd:9e:7f:e0:2f:c5:94:31:d2:7f:f7:ad:d9:7a:d6:9e:2b:
2e:9b:3b:be:e2:32:f5:48:1d:05:e9:fc:8d:66:15:96:56:36:
e4:27:fa:d3:29:9e:a3:e2:d2:aa:8d:4f:02:8a:07:39:ac:1c:
47:53:7f:dd:e1:d6:f6:15:f1:e6:5e:11:8a:04:4b:d5:82:fa:
c3:1a:24:3d:f8:1d:48:ba:af:04:7c:5b:90:1e:4a:e9:ad:3a:
61:da:42:a2:bc:59:33:b9:ec:db:f1:e9:90:50:cb:d0:df:66:
0a:b5:83:54:f1:79:cb:37:b5:68:1f:31:f6:8d:f5:99:4a:6c:
61:ac:b7:91:3e:b5:10:6c:22:b2:5e:c3:12:6b:f3:3e:f4:26:
82:ce:76:1d:56:ab:cb:44:0f:10:35:05:64:ae:f2:95:c5:9d:
ed:cf:c3:c9
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUVzJ0/e5klLXF5Bs3A/e83qWiz2UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGQwNTlmMTBkMThkMDAwNTJjODA4ZWI4MDY5ZjkwZDQ3
ZTMwNTY0YTAeFw0yNjA4MTEyMzU1MzFaFw0yNzA4MTEwMDAwMzFaMDMxMTAvBgNV
BAMTKDhERDIxMDQ3MDY0NjE0NDE5NkNBRDNFOTRDNTAwQUIzNDNEQjdGRUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4RSFqGwq1oiSX/XsMLPM9BLTp
spM2xLMHOzDciEfAwKRcVD8B2SD61iFHhAD8B0iskQJfVGawxaIodsRzVLmmjTrG
tDMvZDM6H3ZeSuCyt3lgQFlYACDRxQj57vZZM+UnP+xCjfPz0C2gqaSG14nA+ur1
gABfHx46BDadQ/ZBegGWp78kszRSvdW6n5D1cEZ0Herag9jykjV7Z793HT3oTsiu
POVmUlh6RLGG708je+F8YOJHbtL9gaScYNEBVKhfg77aGnk/q3CDjRupbDAuDy7X
hTuPb+DVMB9mF46zOMqIKVxZ2wtKe6gYWanWpjVp23O58pdqCWOvPnmOUvWFAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUjdIQRwZGFEGWytPpTFAKs0Pbf+0wHwYDVR0j
BBgwFoAUDQWfENGNAAUsgI64Bp+Q1H4wVkowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQtMjg1NC00MDgwLTlhMDktNzI2MjMyNmM5
ZTIyLzEvMEQwNTlGMTBEMThEMDAwNTJDODA4RUI4MDY5RjkwRDQ3RTMwNTY0QS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RRV2ZFTkdOQUFVc2dJNjRCcC1RMUg0
d1Zrby5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQt
Mjg1NC00MDgwLTlhMDktNzI2MjMyNmM5ZTIyLzEvMzIzMTMzMmUzMjMyMzUyZTMy
MzMzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANXh
7TANBgkqhkiG9w0BAQsFAAOCAQEADQSK4k6j6fb1aPk4OL2kz8z3qHcIImuPzaOQ
+fddeAYMGQWuTYcn2jdQx9SUWM9CdS4zL0pxEFH318QFhB2F3l+yVdl9CRKoU5An
5OFtU765aTWHkhnh2lhSl82ef+AvxZQx0n/3rdl61p4rLps7vuIy9UgdBen8jWYV
llY25Cf60ymeo+LSqo1PAooHOawcR1N/3eHW9hXx5l4RigRL1YL6wxokPfgdSLqv
BHxbkB5K6a06YdpCorxZM7ns2/HpkFDL0N9mCrWDVPF5yze1aB8x9o31mUpsYay3
kT61EGwisl7DEmvzPvQmgs52HVary0QPEDUFZK7ylcWd7c/DyQ==
-----END CERTIFICATE-----
Generated at Thu Aug 13 12:19:30 2026 by rpki-client