Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e34322e302f32332d3234203d3e20383334.roa
File: 3231322e37342e34322e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: jibLmm4y6SjaKz2oxpY+WpFpBi2eOe22mcYraL7p8wI=
Subject key identifier: FE:18:4B:01:F6:BA:36:2E:3E:7A:5E:B3:84:65:5A:D0:43:98:2C:0A
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 3D5A0B654070BBA3B4EC70780527CB47B5F0B568
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e34322e302f32332d3234203d3e20383334.roa
Signing time: Thu 19 Feb 2026 05:22:26 +0000
ROA not before: Thu 19 Feb 2026 05:17:26 +0000
ROA not after: Thu 18 Feb 2027 05:22:26 +0000
asID: 834
IP address blocks: 212.74.42.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:5a:0b:65:40:70:bb:a3:b4:ec:70:78:05:27:cb:47:b5:f0:b5:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Feb 19 05:17:26 2026 GMT
Not After : Feb 18 05:22:26 2027 GMT
Subject: CN=FE184B01F6BA362E3E7A5EB384655AD043982C0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1a:6b:2e:87:73:68:4b:6e:3e:75:29:c9:1e:
5a:7c:97:ed:ab:17:c6:6f:65:e5:50:6e:35:ab:21:
84:d1:06:c9:fd:b8:d6:f2:be:80:79:d1:e0:3b:0b:
65:ac:33:0b:ee:96:46:d4:d0:d3:36:13:53:d6:53:
04:1c:b4:1d:ea:1b:cd:8f:aa:f6:63:f1:72:a9:f0:
d1:f3:e1:c4:4c:a1:ff:83:20:65:22:ae:7a:e1:ab:
4b:9e:70:2e:50:df:8e:38:cd:f0:fa:05:33:25:79:
43:bc:a5:10:37:08:8c:8b:39:e5:45:b6:48:0d:8f:
b6:a4:99:10:af:2a:ed:fc:ab:df:4d:13:ed:d2:a6:
4e:ba:20:44:fd:a2:53:f7:49:93:7e:08:93:a9:3b:
d8:77:e3:b9:cb:57:84:9c:75:f8:a2:14:3c:62:cd:
1a:b0:99:0f:34:ba:64:cc:bd:2f:1d:71:34:04:96:
5d:e4:a1:78:e1:6f:0e:d0:29:8a:9e:c8:ae:85:84:
85:82:68:d1:65:a4:76:b1:8b:51:bf:96:18:6d:b0:
45:7f:c6:d6:8c:41:7a:fa:45:79:ef:98:4d:04:e0:
b7:ea:13:86:9e:24:a7:1e:ca:b4:d2:06:cd:92:56:
c8:dd:69:d8:ca:fd:5a:5b:10:7b:42:e6:e3:84:da:
c8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:18:4B:01:F6:BA:36:2E:3E:7A:5E:B3:84:65:5A:D0:43:98:2C:0A
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e34322e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.74.42.0/23
Signature Algorithm: sha256WithRSAEncryption
88:60:d5:05:90:fc:b5:ea:70:01:be:c3:8b:e4:19:db:21:3f:
35:5b:b2:11:b2:a1:ac:b0:ae:f1:21:f4:1a:4c:59:36:76:44:
03:70:00:59:92:ce:9c:6f:2f:d7:dc:2e:be:9f:d0:56:0a:69:
22:fb:fb:94:33:cf:72:59:bf:c9:37:2a:81:ab:b4:64:31:ff:
42:c1:c3:98:dc:08:27:e3:35:dc:24:ea:22:62:4c:8a:76:fc:
ce:99:f0:62:5f:9e:12:4a:a8:0c:b4:f8:10:13:8b:40:4e:e3:
77:16:09:4c:61:f0:65:05:d5:71:3c:ed:0b:1b:35:db:81:2c:
4f:4f:f5:92:c7:b7:5f:ac:51:e7:3e:9c:db:b8:e5:3f:fc:91:
67:83:44:b5:cb:f2:95:6c:91:8a:3d:07:eb:b5:a3:a3:b7:86:
ee:1c:8e:b7:8d:3c:11:59:72:cb:1a:12:c6:2c:07:64:df:fc:
f3:70:9b:4e:b6:8c:b3:b6:83:fd:14:ef:90:6a:d3:8e:fa:be:
32:ef:92:05:55:a1:0c:f1:77:1d:84:ce:ac:6f:9a:49:3e:8d:
dc:78:d5:6f:61:cc:37:bd:a8:28:01:30:93:ff:7a:8d:9a:13:
e2:87:69:58:03:37:57:e0:45:eb:b7:89:03:fd:81:20:47:36:
64:0e:18:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:17:57 2026 by rpki-client