Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/3231322e38372e3230332e302f32342d3234203d3e20383334.roa
File: 3231322e38372e3230332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: BmvKDhbgTkXU78xLYdJXmJWmvOhTrTLmz/lTVM9Fniw=
Subject key identifier: EF:A3:5A:0F:65:21:20:8E:D6:0C:DA:DA:EC:90:C3:41:83:47:C7:AD
Certificate issuer: /CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8
Certificate serial: 658502AA2DC118F2A762EDABFE5A69403DA74E82
Authority key identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/3231322e38372e3230332e302f32342d3234203d3e20383334.roa
Signing time: Sun 15 Feb 2026 00:09:32 +0000
ROA not before: Sun 15 Feb 2026 00:04:32 +0000
ROA not after: Sun 14 Feb 2027 00:09:32 +0000
asID: 834
IP address blocks: 212.87.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl
rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:50:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:85:02:aa:2d:c1:18:f2:a7:62:ed:ab:fe:5a:69:40:3d:a7:4e:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8
Validity
Not Before: Feb 15 00:04:32 2026 GMT
Not After : Feb 14 00:09:32 2027 GMT
Subject: CN=EFA35A0F6521208ED60CDADAEC90C3418347C7AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b1:cb:05:cb:5c:a9:5d:c3:5d:32:6e:82:9b:
4a:f7:9c:21:49:47:95:f8:84:d8:9b:31:43:7c:49:
d3:7e:d1:a9:a9:b1:34:2f:ee:1c:e3:46:a3:3d:ca:
89:fb:33:f5:56:ce:20:87:c3:98:f5:37:be:99:aa:
2b:dd:d9:22:08:97:f3:36:ed:dd:0f:80:32:4a:cf:
60:ac:f1:a5:83:76:c5:6d:fe:dc:56:a9:f5:ea:bd:
0c:2f:b4:f9:43:69:2d:4b:19:ff:a7:e7:e1:1f:f3:
e3:6c:cd:3d:3f:20:30:92:93:7f:70:44:47:09:73:
2b:4f:0c:4b:1d:3e:26:f8:89:47:05:15:10:39:49:
4c:17:52:86:9d:76:b7:7d:ee:90:37:c2:7c:79:d7:
2b:7d:5d:42:4e:a5:43:e0:80:7f:ac:1a:d0:0e:d4:
6c:cd:de:1f:09:e5:b1:0f:1a:69:ce:72:ff:3e:5e:
62:00:0e:f9:37:69:11:c3:63:98:a8:5f:fe:f6:86:
cc:0e:6d:e7:7d:1b:8a:b7:af:8d:89:2c:6a:a1:c9:
28:84:11:cf:ad:60:01:e7:3e:64:91:d3:06:fb:13:
0e:6c:1c:9f:67:e6:9a:13:d7:4a:4b:cb:cc:52:35:
24:4b:63:2f:a5:00:15:60:b7:34:4e:f8:45:08:4c:
cc:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A3:5A:0F:65:21:20:8E:D6:0C:DA:DA:EC:90:C3:41:83:47:C7:AD
X509v3 Authority Key Identifier:
keyid:7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/3231322e38372e3230332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.87.203.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:f5:e6:98:89:b6:6f:da:15:98:c1:86:66:6a:f2:d0:bc:f2:
e8:f3:f8:39:0c:77:0d:12:3f:6e:28:97:1d:d2:d2:9f:2f:9a:
3e:e5:93:68:9a:61:31:ff:82:a2:f5:64:8c:a8:91:47:7e:4b:
a7:0f:48:57:cf:63:8b:08:11:d7:f4:7a:09:b6:6f:96:63:2b:
85:ab:28:f1:a7:f2:f8:76:fe:e1:03:87:fe:3d:b5:d5:7d:f3:
4e:8c:e7:f6:cd:ba:ac:14:f8:25:79:4c:f5:33:9b:fe:ef:06:
e8:7f:bc:34:56:3c:d2:f0:54:39:f5:11:2b:17:ba:a6:3a:8b:
e7:a3:d4:56:cd:1b:a6:5a:86:90:3e:0c:c4:fb:32:1f:ce:ef:
5f:62:d7:13:14:31:3b:5a:d4:94:f8:22:ab:5b:6b:35:a2:95:
f4:b7:96:de:25:ca:ca:22:3a:94:5d:b4:5e:c2:07:cd:a7:5b:
8b:8a:bb:b3:e0:d0:0c:71:8a:95:49:d0:a3:6a:ec:50:5d:45:
c5:84:04:f1:2a:23:02:3a:24:b7:6c:1f:09:8c:9f:35:28:cb:
0d:ac:a7:d5:54:97:a2:14:41:5b:73:28:bd:42:0a:4d:66:52:
33:44:8a:d9:b8:46:45:13:fe:00:60:d3:ec:ca:1c:9b:b1:00:
c8:09:31:ab
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUZYUCqi3BGPKnYu2r/lppQD2nToIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2ZlYTM3ZmRmZTI5YjM0MTczZTk3ZjFiNjM3YTQ0ZWM0
MWFjZWJiODAeFw0yNjAyMTUwMDA0MzJaFw0yNzAyMTQwMDA5MzJaMDMxMTAvBgNV
BAMTKEVGQTM1QTBGNjUyMTIwOEVENjBDREFEQUVDOTBDMzQxODM0N0M3QUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtscsFy1ypXcNdMm6Cm0r3nCFJ
R5X4hNibMUN8SdN+0ampsTQv7hzjRqM9yon7M/VWziCHw5j1N76Zqivd2SIIl/M2
7d0PgDJKz2Cs8aWDdsVt/txWqfXqvQwvtPlDaS1LGf+n5+Ef8+NszT0/IDCSk39w
REcJcytPDEsdPib4iUcFFRA5SUwXUoaddrd97pA3wnx51yt9XUJOpUPggH+sGtAO
1GzN3h8J5bEPGmnOcv8+XmIADvk3aRHDY5ioX/72hswObed9G4q3r42JLGqhySiE
Ec+tYAHnPmSR0wb7Ew5sHJ9n5poT10pLy8xSNSRLYy+lABVgtzRO+EUITMwtAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQU76NaD2UhII7WDNra7JDDQYNHx60wHwYDVR0j
BBgwFoAUf+o3/f4ps0Fz6X8bY3pE7EGs67gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWItZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkz
YTlkLzAvN0ZFQTM3RkRGRTI5QjM0MTczRTk3RjFCNjM3QTQ0RUM0MUFDRUJCOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YtbzNfZjRwczBGejZYOGJZM3BFN0VH
czY3Zy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWIt
ZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkzYTlkLzAvMzIzMTMyMmUzODM3MmUzMjMw
MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADUV8sw
DQYJKoZIhvcNAQELBQADggEBANj15piJtm/aFZjBhmZq8tC88ujz+DkMdw0SP24o
lx3S0p8vmj7lk2iaYTH/gqL1ZIyokUd+S6cPSFfPY4sIEdf0egm2b5ZjK4WrKPGn
8vh2/uEDh/49tdV9806M5/bNuqwU+CV5TPUzm/7vBuh/vDRWPNLwVDn1ESsXuqY6
i+ej1FbNG6ZahpA+DMT7Mh/O719i1xMUMTta1JT4IqtbazWilfS3lt4lysoiOpRd
tF7CB82nW4uKu7Pg0AxxipVJ0KNq7FBdRcWEBPEqIwI6JLdsHwmMnzUoyw2sp9VU
l6IUQVtzKL1CCk1mUjNEitm4RkUT/gBg0+zKHJuxAMgJMas=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:58:28 2026 by rpki-client