Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/3231322e38372e3230302e302f32342d3234203d3e20383334.roa
File: 3231322e38372e3230302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: yOyanybURP1iJ/zN1eqZTgvzTnr7OBFJTuT96Tr77zk=
Subject key identifier: 63:8D:D7:4C:5D:A4:55:12:70:64:8D:C7:40:51:FD:99:6B:F6:BB:1B
Certificate issuer: /CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8
Certificate serial: 52C6989FB5FCC9AA2EBB61895CB0625374FAE76E
Authority key identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/3231322e38372e3230302e302f32342d3234203d3e20383334.roa
Signing time: Thu 08 Oct 2026 09:45:12 +0000
ROA not before: Thu 08 Oct 2026 09:40:12 +0000
ROA not after: Thu 07 Oct 2027 09:45:12 +0000
asID: 834
IP address blocks: 212.87.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl
rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:35:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:c6:98:9f:b5:fc:c9:aa:2e:bb:61:89:5c:b0:62:53:74:fa:e7:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8
Validity
Not Before: Oct 8 09:40:12 2026 GMT
Not After : Oct 7 09:45:12 2027 GMT
Subject: CN=638DD74C5DA4551270648DC74051FD996BF6BB1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:08:d5:44:6f:ee:32:75:80:39:3e:22:57:32:
9d:c2:4c:d5:11:39:3e:aa:83:77:1f:97:2c:13:c5:
2b:60:ec:97:ef:06:b1:15:1b:74:60:16:29:b2:b7:
35:c4:2d:4b:f2:a9:bc:17:9e:ae:5d:8c:97:2d:2d:
ef:27:a2:87:d1:0e:3a:66:b2:8e:ed:34:d6:0e:33:
b1:ad:d5:a6:7d:20:8e:a6:22:8f:26:50:68:d0:c7:
15:2c:66:3b:f2:1a:59:56:18:10:4d:a2:b0:6e:45:
66:c9:9a:8c:e3:10:18:29:7f:e6:75:ee:2d:e6:81:
d2:55:65:1a:96:fe:91:c2:a4:7d:05:59:59:1e:47:
ca:c9:d6:fe:22:07:ce:b6:9a:f6:4c:e0:90:a3:40:
9d:79:f3:09:97:b6:e0:a9:84:56:d0:c9:68:a0:75:
13:da:11:2a:c1:4c:9d:31:c6:1a:5d:4b:da:39:5e:
12:11:2f:51:1e:bc:f3:bb:63:08:38:ef:0a:d4:37:
5f:b2:62:78:25:c0:16:5b:ee:e8:a5:01:df:76:48:
93:12:38:24:39:f8:c1:6b:b3:97:e3:10:dc:14:35:
ec:86:ea:34:e1:ac:f7:ea:6e:15:47:f9:6f:e6:c4:
af:52:be:2a:1c:48:01:1b:a7:d0:05:28:78:1f:cc:
f2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:8D:D7:4C:5D:A4:55:12:70:64:8D:C7:40:51:FD:99:6B:F6:BB:1B
X509v3 Authority Key Identifier:
keyid:7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/3231322e38372e3230302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.87.200.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:39:0f:78:a1:09:20:03:4e:35:49:ea:a6:33:80:f0:01:06:
eb:aa:c5:60:c7:4e:e6:db:ee:57:bf:af:f9:c3:4d:e6:d3:78:
3e:59:03:ac:8d:e5:a8:53:79:a6:a4:40:ee:d7:a1:63:26:f7:
01:99:c5:56:02:52:6a:fb:55:86:c8:60:79:78:7d:53:12:06:
67:a1:6c:4e:ed:10:07:9b:76:ca:e2:80:40:57:6d:a6:27:50:
0b:b5:b1:c5:0b:40:44:8e:46:60:cd:2c:5d:6d:c6:dd:c4:cd:
be:6c:da:62:32:d6:b9:5e:a6:fb:98:8e:76:94:39:fa:2e:fe:
02:95:bc:88:c6:91:8b:57:bd:4f:0f:15:d2:e3:e9:40:05:f0:
c4:e3:b9:47:8b:80:3b:38:d3:04:b6:9e:8e:48:93:19:c9:ee:
16:80:10:45:63:01:63:95:dc:51:6d:9e:d8:e6:e8:02:17:43:
de:7c:b6:67:77:94:1d:1e:65:54:c9:64:a7:e2:98:64:52:64:
e0:57:00:19:d8:f6:68:93:4f:72:b7:0f:a6:0a:c0:6d:b5:cc:
a7:ee:a1:f4:98:b2:94:c8:81:ac:c0:20:e8:97:82:cf:aa:cf:
54:24:f4:9c:64:44:3d:9f:e5:8b:46:bf:71:8f:1a:c9:f4:49:
d5:8f:7a:52
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUUsaYn7X8yaouu2GJXLBiU3T6524wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2ZlYTM3ZmRmZTI5YjM0MTczZTk3ZjFiNjM3YTQ0ZWM0
MWFjZWJiODAeFw0yNjEwMDgwOTQwMTJaFw0yNzEwMDcwOTQ1MTJaMDMxMTAvBgNV
BAMTKDYzOERENzRDNURBNDU1MTI3MDY0OERDNzQwNTFGRDk5NkJGNkJCMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1CNVEb+4ydYA5PiJXMp3CTNUR
OT6qg3cflywTxStg7JfvBrEVG3RgFimytzXELUvyqbwXnq5djJctLe8noofRDjpm
so7tNNYOM7Gt1aZ9II6mIo8mUGjQxxUsZjvyGllWGBBNorBuRWbJmozjEBgpf+Z1
7i3mgdJVZRqW/pHCpH0FWVkeR8rJ1v4iB862mvZM4JCjQJ158wmXtuCphFbQyWig
dRPaESrBTJ0xxhpdS9o5XhIRL1EevPO7Ywg47wrUN1+yYnglwBZb7uilAd92SJMS
OCQ5+MFrs5fjENwUNeyG6jThrPfqbhVH+W/mxK9SviocSAEbp9AFKHgfzPIZAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUY43XTF2kVRJwZI3HQFH9mWv2uxswHwYDVR0j
BBgwFoAUf+o3/f4ps0Fz6X8bY3pE7EGs67gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWItZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkz
YTlkLzAvN0ZFQTM3RkRGRTI5QjM0MTczRTk3RjFCNjM3QTQ0RUM0MUFDRUJCOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YtbzNfZjRwczBGejZYOGJZM3BFN0VH
czY3Zy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWIt
ZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkzYTlkLzAvMzIzMTMyMmUzODM3MmUzMjMw
MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADUV8gw
DQYJKoZIhvcNAQELBQADggEBAMs5D3ihCSADTjVJ6qYzgPABBuuqxWDHTubb7le/
r/nDTebTeD5ZA6yN5ahTeaakQO7XoWMm9wGZxVYCUmr7VYbIYHl4fVMSBmehbE7t
EAebdsrigEBXbaYnUAu1scULQESORmDNLF1txt3Ezb5s2mIy1rlepvuYjnaUOfou
/gKVvIjGkYtXvU8PFdLj6UAF8MTjuUeLgDs40wS2no5IkxnJ7haAEEVjAWOV3FFt
ntjm6AIXQ958tmd3lB0eZVTJZKfimGRSZOBXABnY9miTT3K3D6YKwG21zKfuofSY
spTIgazAIOiXgs+qz1Qk9JxkRD2f5YtGv3GPGsn0SdWPelI=
-----END CERTIFICATE-----
Generated at Thu Nov 5 19:52:12 2026 by rpki-client