Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e34392e302f32342d3234203d3e20383334.roa
File: 3231322e37342e34392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: Ihx33+Gy/Lf0m9weOejBGBz1ojPGljN1KqEvs4pMmj4=
Subject key identifier: C7:1C:77:A8:98:BA:4F:9A:A1:74:A3:BD:0D:81:DC:5C:2A:AB:4F:76
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 7B42B1C36A4353F9D5995C82779084CBC2889CDD
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e34392e302f32342d3234203d3e20383334.roa
Signing time: Thu 26 Feb 2026 14:00:28 +0000
ROA not before: Thu 26 Feb 2026 13:55:28 +0000
ROA not after: Thu 25 Feb 2027 14:00:28 +0000
asID: 834
IP address blocks: 212.74.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:42:b1:c3:6a:43:53:f9:d5:99:5c:82:77:90:84:cb:c2:88:9c:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Feb 26 13:55:28 2026 GMT
Not After : Feb 25 14:00:28 2027 GMT
Subject: CN=C71C77A898BA4F9AA174A3BD0D81DC5C2AAB4F76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2a:0e:5c:0d:63:65:37:29:1d:50:f6:e8:89:
c8:96:e8:e5:9e:82:31:91:bb:50:dd:e7:c6:3b:01:
20:bf:16:0d:75:87:34:34:6a:73:1d:3f:18:21:49:
c5:8e:fa:ab:be:82:33:06:11:19:25:3d:d1:f9:91:
9d:8b:0f:d5:53:32:8b:f5:1b:f1:53:0c:f4:95:0d:
46:c6:71:2c:3b:56:25:a0:d4:ad:37:b5:83:f2:14:
d4:39:15:c1:f1:49:ff:75:4d:48:c4:8c:72:4c:ad:
97:21:67:99:a8:6b:04:3a:28:d6:56:4a:b6:ec:92:
0d:71:50:ec:af:84:4d:8a:cd:75:dd:3f:28:85:7b:
86:08:97:ae:4c:7d:1a:10:af:86:f6:89:fc:d8:5d:
74:8d:1b:d8:f8:d7:b5:7d:ca:99:a2:03:38:91:a4:
8d:cc:30:e5:bf:13:49:f9:60:37:15:2a:12:4c:2e:
88:ae:e0:81:6a:25:90:a8:15:9a:17:52:74:b1:d4:
6e:53:52:24:52:50:0d:80:96:86:fe:4e:9d:dc:d0:
a9:d3:a9:2f:4c:88:b4:bc:16:1e:16:36:76:a3:51:
51:e9:52:86:60:1e:3a:7b:3d:68:e9:4e:65:4a:1b:
8a:30:c3:f8:78:d1:e5:51:fe:54:c0:db:8f:76:3a:
cf:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:1C:77:A8:98:BA:4F:9A:A1:74:A3:BD:0D:81:DC:5C:2A:AB:4F:76
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e34392e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.74.49.0/24
Signature Algorithm: sha256WithRSAEncryption
89:3f:50:52:05:2c:8f:d5:7c:e1:69:1d:e7:0d:08:8e:42:b9:
2d:1c:47:4d:62:da:59:f9:83:58:49:bc:b5:43:37:4c:59:71:
ec:0a:36:4b:96:b5:00:91:4d:2e:02:81:0b:e6:ac:ff:02:98:
60:13:c9:53:ba:0b:76:fd:fe:fa:f5:3e:0a:1f:85:0f:67:c8:
8e:ff:b9:88:83:a6:76:94:a2:1b:c1:e5:7b:c9:73:28:51:4d:
7d:9a:a4:7f:70:46:0a:78:cf:91:b4:2a:2d:7f:72:00:19:38:
af:70:77:76:12:ac:36:13:9d:e6:20:03:12:8a:40:3b:d1:fa:
b3:67:5c:07:b3:c1:ab:6b:2b:d1:c9:e9:b3:ce:de:f0:6f:5f:
62:be:1f:90:a2:1b:91:21:fc:85:7c:b9:41:b7:fa:02:01:f5:
aa:14:b8:e2:b0:cd:73:0b:0d:4d:f9:35:2c:af:5a:b2:87:7e:
01:84:e4:ee:06:b2:73:50:c7:81:b4:46:42:7a:23:5c:9f:8f:
73:5d:34:39:cb:53:f2:4f:b5:99:a4:9f:26:26:95:6b:a8:bd:
9a:28:d4:9a:bc:2d:ed:9c:db:dc:5a:49:5a:74:7b:5a:15:0b:
2e:e3:0c:1b:15:d1:29:ef:08:6d:be:e3:41:9c:31:1f:d2:7c:
45:09:21:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:24:50 2026 by rpki-client