Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e33392e302f32342d3234203d3e203136323736.roa
File: 3231322e37342e33392e302f32342d3234203d3e203136323736.roa (raw, json)
Hash identifier: peW+ln1qffedOumBZYXQJmcz0iogOhr8qHDdvIfMrfk=
Subject key identifier: 60:70:83:05:0A:49:64:F4:70:CE:45:74:87:04:EA:10:33:BF:DE:5D
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 569012E37233333E57E8B32B53DE33DEC1942DCA
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e33392e302f32342d3234203d3e203136323736.roa
Signing time: Thu 12 Feb 2026 15:08:06 +0000
ROA not before: Thu 12 Feb 2026 15:03:06 +0000
ROA not after: Thu 11 Feb 2027 15:08:06 +0000
asID: 16276
IP address blocks: 212.74.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:90:12:e3:72:33:33:3e:57:e8:b3:2b:53:de:33:de:c1:94:2d:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Feb 12 15:03:06 2026 GMT
Not After : Feb 11 15:08:06 2027 GMT
Subject: CN=607083050A4964F470CE45748704EA1033BFDE5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:74:69:d0:5a:4c:e1:59:03:7b:69:0d:5e:29:
b9:c7:98:3c:1e:f8:e0:94:16:ee:e1:19:20:e7:4a:
db:ea:54:62:57:27:bd:5a:95:1d:78:70:81:a3:06:
02:6e:c3:c4:16:83:7e:64:a6:c3:32:a4:c8:ff:49:
ae:76:85:15:6b:3e:c7:17:89:5e:75:04:37:56:2e:
33:f1:4e:66:6d:48:1d:37:cc:60:3f:7d:38:2b:67:
dd:aa:5d:93:fb:c1:ce:52:74:97:cf:d8:d8:95:7b:
16:c0:e1:8e:91:72:9b:3b:b6:c6:06:34:13:08:45:
88:46:8b:d9:3e:f1:bf:52:f5:56:4b:af:e1:39:aa:
e0:be:47:eb:21:56:ca:de:4e:bb:9c:db:e0:4d:22:
ef:5f:bd:4d:b7:54:41:a3:4b:d9:93:04:1c:f2:4f:
93:22:55:e1:a4:a5:61:13:98:6b:e4:50:45:b6:1a:
62:14:0d:bd:77:75:25:e8:a7:28:99:40:27:00:01:
9f:08:48:f5:b3:a9:4c:39:21:b2:49:40:fb:3c:19:
7b:9a:d3:8c:9d:8a:6a:59:88:fb:33:4f:2c:60:99:
de:5c:3b:13:78:d0:c4:9f:0b:55:c1:20:2e:b9:87:
88:98:5e:39:52:42:0c:8f:81:4d:bf:63:f2:bf:a6:
fb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:70:83:05:0A:49:64:F4:70:CE:45:74:87:04:EA:10:33:BF:DE:5D
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e33392e302f32342d3234203d3e203136323736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.74.39.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:17:e9:c6:3e:ea:e0:4d:b0:63:02:99:64:2c:b7:b5:fd:43:
14:c7:f0:56:1b:dc:d0:d2:08:6b:dd:1d:fe:24:68:b8:bb:2a:
4f:e1:c3:3a:a9:9d:80:e6:9e:71:79:e6:fc:38:29:36:fe:34:
55:f8:ad:74:af:ce:2d:dc:de:5f:d9:3d:8e:db:2e:02:fd:14:
db:83:c8:1b:21:3a:75:67:44:db:9c:32:81:9a:8e:45:d4:e7:
e5:50:7a:b9:f4:ca:08:a6:0b:8e:5d:a5:40:81:c2:53:14:e5:
31:02:57:bc:20:d2:bf:39:59:4e:c1:13:8e:0d:e0:0e:df:9f:
7b:8d:08:99:fc:e2:8d:b3:95:ba:49:39:bd:8e:0f:4b:c5:9d:
e8:04:fd:b3:de:bb:16:ac:99:b2:7b:d3:a0:0e:68:4b:f3:b3:
86:82:a1:9d:e2:a4:88:11:ef:cf:ca:f9:0e:2d:5f:4b:e5:c7:
3f:ec:b1:10:e7:65:ba:ec:17:7d:53:c2:10:1a:c6:49:79:39:
15:6a:0f:b0:20:ea:fb:71:2a:41:7d:e3:52:63:cb:2d:b8:19:
7e:38:80:6e:49:94:fd:c5:5b:0b:73:7d:7e:b7:8b:2a:a4:ba:
8e:94:f9:36:13:4c:cc:f7:24:01:c3:a3:4c:db:85:20:a4:f5:
34:ac:33:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:10:13 2026 by rpki-client