Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/3231322e38372e3230302e302f32342d3234203d3e20313437323831.roa
File: 3231322e38372e3230302e302f32342d3234203d3e20313437323831.roa (raw, json)
Hash identifier: afVGS8N0CInw25s+24qfgWStbA1X+EiC+SCaIe6zftU=
Subject key identifier: 35:F9:D1:38:89:E6:D0:5E:22:57:CB:C2:F8:D9:3A:62:E1:49:7F:CB
Certificate issuer: /CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8
Certificate serial: 2C05C47D78D9C855C6728A3F8EDAAE43B5D281A5
Authority key identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/3231322e38372e3230302e302f32342d3234203d3e20313437323831.roa
Signing time: Tue 08 Sep 2026 09:52:45 +0000
ROA not before: Tue 08 Sep 2026 09:47:45 +0000
ROA not after: Tue 07 Sep 2027 09:52:45 +0000
asID: 147281
IP address blocks: 212.87.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl
rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 05:50:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:05:c4:7d:78:d9:c8:55:c6:72:8a:3f:8e:da:ae:43:b5:d2:81:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8
Validity
Not Before: Sep 8 09:47:45 2026 GMT
Not After : Sep 7 09:52:45 2027 GMT
Subject: CN=35F9D13889E6D05E2257CBC2F8D93A62E1497FCB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ee:21:cf:28:da:31:fc:ad:ee:87:1a:0c:4e:
4b:17:82:db:94:70:37:07:5e:37:97:1c:f2:77:59:
ab:17:3a:53:d1:63:94:fb:86:41:2d:73:eb:22:f1:
de:4d:a3:c3:e7:85:9b:37:12:7b:04:69:5c:d7:1c:
da:33:0e:ef:54:90:cd:b8:7d:53:ab:65:24:68:55:
05:53:61:80:c9:4a:08:c2:d2:aa:ef:7a:e5:ed:87:
01:40:5c:66:ff:93:1f:0a:29:d7:0f:a5:18:a0:23:
5c:22:be:87:6f:42:f0:84:c8:15:7e:5f:ee:c2:5d:
35:80:ec:af:a2:a7:ec:08:aa:8e:20:ac:47:54:fa:
3f:76:0e:17:95:7f:a4:91:d8:85:78:00:a5:76:96:
59:a2:63:fe:30:f9:e2:8e:81:3c:30:0b:5c:fc:62:
29:c4:a9:1b:e1:7c:01:0a:68:d4:40:11:f7:02:9c:
e2:55:d0:1f:36:a7:7c:38:91:f5:12:1d:7a:c4:d8:
6b:53:a7:2e:ba:4f:ad:57:80:65:c5:40:e8:40:0f:
6e:23:7d:63:d5:a7:15:66:80:81:1b:c6:74:ee:6e:
1f:bd:cf:aa:3d:82:72:56:30:6b:db:67:e8:87:e8:
59:df:90:79:35:71:23:5d:91:01:73:a5:17:c1:05:
33:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:F9:D1:38:89:E6:D0:5E:22:57:CB:C2:F8:D9:3A:62:E1:49:7F:CB
X509v3 Authority Key Identifier:
keyid:7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/3231322e38372e3230302e302f32342d3234203d3e20313437323831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.87.200.0/24
Signature Algorithm: sha256WithRSAEncryption
02:cf:5b:6d:be:bc:65:6e:e3:92:41:75:cb:bf:6c:c3:28:45:
80:4c:1e:79:54:99:81:40:8e:c9:e2:d8:64:a7:41:35:bb:47:
41:86:1c:f0:0f:17:42:1e:13:d5:e2:4a:af:f1:88:46:72:ee:
21:ec:e7:19:05:32:85:ff:73:ae:0f:d7:50:18:a3:73:24:ba:
7c:22:1d:53:fc:4f:15:9b:77:ed:61:b3:9c:5c:fe:42:89:aa:
07:f7:81:58:16:99:d0:b5:a2:bc:4c:16:3e:f3:5c:d0:ad:c4:
19:85:4c:fc:1a:75:50:31:39:e4:55:79:55:43:03:2f:04:9f:
8d:d2:5e:1d:0e:d3:e5:01:ac:c9:7e:5c:d0:9f:7b:51:c5:2a:
35:cb:ad:fa:24:46:b3:cc:19:45:23:f8:a1:74:d9:d7:8b:77:
12:74:79:4b:5e:7e:c7:54:8e:44:87:d1:3c:25:6f:92:94:be:
6c:2c:55:32:d8:ad:87:d6:e3:29:e1:11:11:e9:b0:0c:b9:e3:
50:34:1e:d3:4f:aa:07:41:e6:05:dc:55:99:ee:71:c4:86:98:
16:ef:09:4a:53:84:5b:33:56:a0:8f:99:ab:2e:52:9f:55:63:
e7:be:aa:26:b1:8a:4e:01:3d:e7:86:61:ab:3d:3f:bb:ad:8f:
9d:22:c5:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:14:25 2026 by rpki-client