Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/3231322e38372e3230322e302f32342d3234203d3e20323032343538.roa
File: 3231322e38372e3230322e302f32342d3234203d3e20323032343538.roa (raw, json)
Hash identifier: y/2xo32L5MgaOwdY1OhNQU4XRufP4hb/Udu8+Htpjqc=
Subject key identifier: 56:EB:41:C0:B8:22:03:C6:1D:24:FA:9A:61:9A:4E:25:36:8C:E0:E1
Certificate issuer: /CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8
Certificate serial: 01E2421BF48FA885601AFD5C1E8ABBAD315F562A
Authority key identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/3231322e38372e3230322e302f32342d3234203d3e20323032343538.roa
Signing time: Fri 11 Sep 2026 19:39:49 +0000
ROA not before: Fri 11 Sep 2026 19:34:49 +0000
ROA not after: Fri 10 Sep 2027 19:39:49 +0000
asID: 202458
IP address blocks: 212.87.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl
rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 05:50:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:e2:42:1b:f4:8f:a8:85:60:1a:fd:5c:1e:8a:bb:ad:31:5f:56:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8
Validity
Not Before: Sep 11 19:34:49 2026 GMT
Not After : Sep 10 19:39:49 2027 GMT
Subject: CN=56EB41C0B82203C61D24FA9A619A4E25368CE0E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:01:52:47:dc:56:51:1f:f6:c0:42:bc:f1:7b:
b7:62:9f:b6:62:e6:25:a3:aa:56:ef:7c:6c:dc:7f:
62:43:98:6e:01:43:3e:08:d3:a0:3e:0f:3c:b4:37:
a7:b0:c9:51:af:78:69:f1:45:11:0b:e8:d0:4b:64:
77:9b:ca:24:d3:5c:01:1c:3c:dc:4a:18:f7:e9:2a:
c4:40:0f:14:50:b4:7c:b8:3c:ed:39:d7:de:31:26:
1d:95:62:4b:40:df:c0:0f:9b:87:50:70:df:1a:3e:
4a:ee:a7:16:ce:b8:ca:02:ea:fa:8b:c2:a5:e3:d2:
25:84:56:fb:3f:1e:55:75:ca:64:04:cb:26:fd:d0:
77:e2:2c:15:20:41:36:a5:ad:03:5e:46:bc:95:31:
f3:42:00:f8:8d:0b:a3:8c:8a:b5:03:04:5c:5c:50:
ac:f5:3e:69:de:0b:0c:14:f5:b0:15:d8:d8:ad:15:
02:9b:c2:bf:c5:86:bf:e8:78:00:d2:05:3c:ca:b2:
87:2c:d9:c0:d8:19:c9:0b:e5:c8:ae:7b:36:78:f4:
ba:fb:49:e0:fb:22:46:b1:68:ce:f3:4c:d2:18:7a:
be:fb:4f:77:29:73:3a:db:bd:b8:ea:a8:08:5e:66:
60:ae:4b:d5:8d:2d:b7:fd:9b:15:67:6e:68:3e:37:
cc:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:EB:41:C0:B8:22:03:C6:1D:24:FA:9A:61:9A:4E:25:36:8C:E0:E1
X509v3 Authority Key Identifier:
keyid:7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/3231322e38372e3230322e302f32342d3234203d3e20323032343538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.87.202.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:00:5d:c6:17:49:a8:57:44:65:2b:c1:26:3c:d4:6b:56:58:
5f:c4:bd:fe:48:fd:4e:d2:51:58:db:7b:49:72:db:b5:2b:13:
b9:73:c9:fb:6b:59:96:97:dd:13:49:fd:98:9d:b5:5c:22:4f:
69:63:08:23:3a:72:a8:e1:b6:52:f5:f9:52:79:15:f5:e2:5b:
11:c2:1a:5f:20:62:17:04:13:c6:63:16:81:27:29:a8:a2:31:
b9:fd:ea:21:8b:3a:f1:b9:22:de:a1:85:3e:17:e7:9c:e5:b4:
0d:ed:74:a2:16:95:af:97:f6:9a:c1:5f:12:dd:b7:a3:59:db:
12:df:ea:a2:ee:57:4b:ac:91:62:36:3a:5a:48:30:3d:8c:26:
9c:cc:02:ef:c5:a8:f1:7b:a1:11:cf:c3:17:ae:7b:28:53:6d:
c8:fd:9e:fd:ae:de:8d:dd:5d:b4:e4:10:81:99:24:b2:0a:a0:
75:09:70:88:93:4a:20:f8:a6:49:ae:8e:c8:27:cb:08:48:a3:
3f:f3:5f:63:1e:31:a4:3a:e3:5b:f0:75:64:97:8c:92:32:c5:
a4:c2:f2:d4:0e:c8:4c:1d:2b:a6:56:00:cb:32:37:ce:c3:56:
25:e7:7f:36:7a:03:82:b0:7d:ee:74:a9:1e:df:62:1a:78:42:
b6:4a:6d:49
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUAeJCG/SPqIVgGv1cHoq7rTFfViowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2ZlYTM3ZmRmZTI5YjM0MTczZTk3ZjFiNjM3YTQ0ZWM0
MWFjZWJiODAeFw0yNjA5MTExOTM0NDlaFw0yNzA5MTAxOTM5NDlaMDMxMTAvBgNV
BAMTKDU2RUI0MUMwQjgyMjAzQzYxRDI0RkE5QTYxOUE0RTI1MzY4Q0UwRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSAVJH3FZRH/bAQrzxe7din7Zi
5iWjqlbvfGzcf2JDmG4BQz4I06A+Dzy0N6ewyVGveGnxRREL6NBLZHebyiTTXAEc
PNxKGPfpKsRADxRQtHy4PO05194xJh2VYktA38APm4dQcN8aPkrupxbOuMoC6vqL
wqXj0iWEVvs/HlV1ymQEyyb90HfiLBUgQTalrQNeRryVMfNCAPiNC6OMirUDBFxc
UKz1PmneCwwU9bAV2NitFQKbwr/Fhr/oeADSBTzKsocs2cDYGckL5ciuezZ49Lr7
SeD7IkaxaM7zTNIYer77T3cpczrbvbjqqAheZmCuS9WNLbf9mxVnbmg+N8wTAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUVutBwLgiA8YdJPqaYZpOJTaM4OEwHwYDVR0j
BBgwFoAUf+o3/f4ps0Fz6X8bY3pE7EGs67gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWItZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkz
YTlkLzAvN0ZFQTM3RkRGRTI5QjM0MTczRTk3RjFCNjM3QTQ0RUM0MUFDRUJCOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YtbzNfZjRwczBGejZYOGJZM3BFN0VH
czY3Zy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWIt
ZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkzYTlkLzAvMzIzMTMyMmUzODM3MmUzMjMw
MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzIzNDM1Mzgucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADUV8owDQYJKoZIhvcNAQELBQADggEBALAAXcYXSahXRGUrwSY81GtWWF/Evf5I
/U7SUVjbe0ly27UrE7lzyftrWZaX3RNJ/ZidtVwiT2ljCCM6cqjhtlL1+VJ5FfXi
WxHCGl8gYhcEE8ZjFoEnKaiiMbn96iGLOvG5It6hhT4X55zltA3tdKIWla+X9prB
XxLdt6NZ2xLf6qLuV0uskWI2OlpIMD2MJpzMAu/FqPF7oRHPwxeueyhTbcj9nv2u
3o3dXbTkEIGZJLIKoHUJcIiTSiD4pkmujsgnywhIoz/zX2MeMaQ641vwdWSXjJIy
xaTC8tQOyEwdK6ZWAMsyN87DViXnfzZ6A4Kwfe50qR7fYhp4QrZKbUk=
-----END CERTIFICATE-----
Generated at Mon Sep 21 18:01:49 2026 by rpki-client