Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e34312e302f32342d3234203d3e20383334.roa
File: 3231322e37342e34312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: d8pBa/kKAmpArLZLFJ6MFeuU6gzvtWEBii22nVuemYc=
Subject key identifier: 19:D6:C9:E0:94:7E:F9:92:EB:BF:D8:09:32:50:BA:AE:16:AE:46:05
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 51A9969DBA5464487211709A8E22871782C3AD47
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e34312e302f32342d3234203d3e20383334.roa
Signing time: Thu 19 Feb 2026 05:22:26 +0000
ROA not before: Thu 19 Feb 2026 05:17:26 +0000
ROA not after: Thu 18 Feb 2027 05:22:26 +0000
asID: 834
IP address blocks: 212.74.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:a9:96:9d:ba:54:64:48:72:11:70:9a:8e:22:87:17:82:c3:ad:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Feb 19 05:17:26 2026 GMT
Not After : Feb 18 05:22:26 2027 GMT
Subject: CN=19D6C9E0947EF992EBBFD8093250BAAE16AE4605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5d:c1:16:4e:ba:29:bd:ad:18:9c:88:83:ed:
49:1a:cb:e5:b0:0b:2f:43:08:99:29:44:a6:dd:bc:
5d:f8:fd:8d:8f:d3:84:83:8f:b0:59:d2:e8:5c:77:
21:bc:9b:87:fd:cb:04:81:09:a6:cd:05:ef:63:19:
79:32:e8:5d:4d:10:6e:c4:bc:ef:3e:86:be:ea:7c:
92:e9:3f:fc:cf:5d:1b:78:43:83:55:8c:2c:25:3a:
12:36:33:fe:f5:b1:68:a1:af:fd:4b:83:01:be:67:
29:4a:15:5b:79:0d:0a:02:58:f9:4b:c2:dc:a9:f7:
a4:09:d4:52:1a:79:ce:89:6f:17:b2:92:1e:3c:8f:
ed:07:9e:19:f3:0d:30:87:6f:13:da:8f:47:2d:62:
c5:08:e8:fa:3b:ee:ff:2b:2b:73:6b:3d:6e:24:6e:
f6:29:93:45:71:f9:80:34:4f:c6:63:74:99:19:ec:
5c:39:fd:d3:77:65:0d:09:41:02:af:bc:1a:9f:32:
f7:c5:69:eb:11:ff:28:da:0a:48:d3:a9:b5:e0:58:
4d:b2:ad:0b:8e:1d:69:03:05:9c:59:8e:48:a8:a9:
a2:4d:b2:1a:8a:f2:36:db:57:dc:18:69:ac:5a:ec:
c8:0b:50:4d:af:1c:a4:e9:16:f4:05:9e:df:f4:bc:
ff:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D6:C9:E0:94:7E:F9:92:EB:BF:D8:09:32:50:BA:AE:16:AE:46:05
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e34312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.74.41.0/24
Signature Algorithm: sha256WithRSAEncryption
18:54:39:f6:55:b8:f9:08:14:70:5d:dd:bc:21:13:e8:e8:72:
bb:64:80:e9:35:9c:83:15:fb:94:b9:91:d2:00:e9:d9:52:c8:
a2:b7:49:bb:11:92:a1:1f:78:a1:84:06:24:c3:7e:33:e0:3b:
01:4f:d8:a7:4a:7e:73:0b:72:36:fe:da:c7:fe:8c:98:31:1b:
49:c9:39:a6:0b:90:c3:9c:50:5b:c3:e4:82:07:33:91:ed:29:
b2:f2:0f:0e:ec:f8:df:ad:f7:ff:ab:88:66:d4:1d:04:71:c1:
51:0f:3f:0d:f9:c8:9f:35:ae:63:06:93:52:b3:4d:68:15:3d:
91:1f:0b:57:21:38:2f:c8:6b:18:8f:8e:1d:4e:75:86:d0:1f:
67:c2:dd:cc:ed:97:66:c2:cd:ba:df:8b:10:7e:f9:1b:fe:87:
d1:c2:11:83:c0:d9:c9:af:cd:8d:51:25:ad:a4:a5:75:27:70:
e0:fa:ce:75:79:11:2c:04:6d:82:3f:26:49:f2:c4:b4:48:d9:
2f:0c:c2:31:30:76:0b:be:0b:59:be:96:d9:81:83:70:23:eb:
f3:6a:1b:41:20:af:67:9c:61:6f:42:d6:da:b1:0c:d0:2c:f4:
93:9c:e0:0d:04:0d:bd:2a:6a:8d:0b:9c:4b:77:19:c7:92:95:
6a:aa:fd:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:17:59 2026 by rpki-client