Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e34382e302f32342d3234203d3e20333933343036.roa
File: 3231322e37342e34382e302f32342d3234203d3e20333933343036.roa (raw, json)
Hash identifier: PMZjlcBXN5Pf3UoozMQmtgnSOPjflQr47nAJ8V830HM=
Subject key identifier: 54:37:95:68:14:83:B2:8D:7A:6A:8D:A9:39:E1:9D:9C:F6:E9:F9:3A
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 42A263F44DF8E2F3934CA8E6F35F7A1F376ED572
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e34382e302f32342d3234203d3e20333933343036.roa
Signing time: Thu 26 Feb 2026 14:00:26 +0000
ROA not before: Thu 26 Feb 2026 13:55:26 +0000
ROA not after: Thu 25 Feb 2027 14:00:26 +0000
asID: 393406
IP address blocks: 212.74.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:a2:63:f4:4d:f8:e2:f3:93:4c:a8:e6:f3:5f:7a:1f:37:6e:d5:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Feb 26 13:55:26 2026 GMT
Not After : Feb 25 14:00:26 2027 GMT
Subject: CN=543795681483B28D7A6A8DA939E19D9CF6E9F93A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:67:fd:69:73:9e:18:8a:19:73:ec:0e:fa:0e:
af:35:66:6a:07:04:73:48:bd:5a:ed:fe:9e:fd:cc:
f4:7e:0a:73:b6:23:17:bd:e4:26:4c:06:af:6e:a6:
18:77:fc:dc:ce:d4:59:98:6f:5d:2e:28:e9:e7:f5:
76:74:d6:2c:61:18:50:7a:9e:a0:6c:82:b9:7c:61:
2a:c0:df:1b:25:af:f8:ac:34:09:8e:fc:de:30:52:
32:19:02:d8:7d:2b:b1:ab:e0:78:b2:da:f4:d4:8b:
f8:56:79:fc:44:97:70:3e:d2:35:b8:df:bc:1e:2a:
ff:2c:bb:a4:15:ed:9a:85:e4:5d:55:a4:6e:c8:24:
c7:12:4c:00:e8:81:d5:ea:d1:84:27:32:32:c8:c7:
77:68:f4:3c:8e:3c:0a:f9:d4:9a:80:e6:f9:63:1a:
81:4d:15:45:1f:de:bd:27:ae:d3:dd:d0:91:a3:a1:
93:8a:a3:72:8b:b8:cc:32:c6:48:22:b7:1a:eb:96:
cf:fc:a5:52:da:27:20:1f:58:d2:7a:f3:d4:62:ba:
35:de:19:5c:3b:3f:28:8b:06:c0:fb:48:25:f3:97:
4c:51:eb:7d:4e:08:c8:da:07:eb:62:f4:6e:57:d4:
d1:f2:7a:b5:11:f9:87:8d:84:dd:f0:84:24:e2:2f:
c2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:37:95:68:14:83:B2:8D:7A:6A:8D:A9:39:E1:9D:9C:F6:E9:F9:3A
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e34382e302f32342d3234203d3e20333933343036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.74.48.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:54:c7:c0:e1:ba:37:37:96:6c:4b:cd:3c:a1:e8:18:5b:d5:
f5:01:8f:41:99:ed:bf:39:65:4f:b0:a4:90:6d:de:8c:fc:aa:
98:ce:c4:43:cf:58:1c:a6:ba:58:46:16:70:67:d7:e5:79:ee:
3c:76:9a:0c:b9:b6:c5:7d:ad:8e:ed:18:48:75:de:d4:e2:4b:
73:45:b1:76:aa:34:c0:f1:e2:9b:17:8e:b6:33:2a:04:99:be:
90:a8:84:e2:ed:da:4b:aa:5c:46:96:39:a3:45:e2:05:b4:bd:
23:51:69:ab:e6:30:84:68:24:8c:f5:f5:f3:5b:9b:09:4d:80:
07:0f:75:5a:b0:9b:53:97:b0:66:6b:fc:2e:0f:e3:ee:2c:97:
aa:a4:4c:3f:65:22:02:99:b4:2b:00:61:b0:1b:50:47:58:bc:
d1:16:16:a7:01:b4:3c:1a:2c:f5:b1:9f:19:8e:8b:43:e9:b9:
e9:44:77:f4:16:73:f3:60:49:54:94:e9:46:7d:43:8c:db:b3:
a5:14:fe:02:a2:35:56:86:42:9b:bd:d6:4e:60:e2:34:dc:ef:
3e:73:f1:76:31:c5:4d:1c:14:97:54:72:26:03:36:3b:63:9b:
d2:56:40:5a:3c:20:45:04:44:67:2e:83:4c:bf:dc:70:96:65:
b4:54:d8:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:05:23 2026 by rpki-client