Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e35362e302f32342d3234203d3e203633373933.roa
File: 3231322e37342e35362e302f32342d3234203d3e203633373933.roa (raw, json)
Hash identifier: XH/PbbTuer5IAo4zOo40iBlZeVJ8jOOCE5twEtDs74o=
Subject key identifier: D4:40:AE:63:64:EB:5A:C6:CB:7B:B6:F6:10:58:47:4F:1A:12:50:FA
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 664F94230A92A964779BBFF3CAA1932985210DFA
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e35362e302f32342d3234203d3e203633373933.roa
Signing time: Wed 25 Feb 2026 03:21:38 +0000
ROA not before: Wed 25 Feb 2026 03:16:38 +0000
ROA not after: Wed 24 Feb 2027 03:21:38 +0000
asID: 63793
IP address blocks: 212.74.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:4f:94:23:0a:92:a9:64:77:9b:bf:f3:ca:a1:93:29:85:21:0d:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Feb 25 03:16:38 2026 GMT
Not After : Feb 24 03:21:38 2027 GMT
Subject: CN=D440AE6364EB5AC6CB7BB6F61058474F1A1250FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6c:09:7f:af:e4:a1:a2:6a:5f:51:7f:9d:87:
41:66:7a:a9:49:e8:f8:a0:19:c2:d2:a6:b6:a9:22:
c6:7c:93:0a:8e:bb:e4:a8:44:48:64:ec:e0:e4:d2:
a0:8f:2b:f3:1b:56:40:65:1b:79:63:7a:58:e4:24:
af:ea:27:76:4e:0c:cf:51:14:00:6d:9f:53:87:87:
93:cc:10:1c:82:61:40:17:29:4f:ef:ba:52:9a:a0:
1d:89:9a:04:ab:8d:46:69:85:41:6c:fb:04:af:18:
74:15:59:83:9b:f7:9c:70:ff:c1:51:54:02:3a:8f:
79:d4:4b:4d:cf:56:8b:23:9e:04:55:aa:8c:0d:76:
2b:c9:a5:b5:4e:dc:53:8a:fa:21:49:62:24:23:f4:
53:48:fd:c2:b6:ed:b5:a9:42:86:a6:1d:33:64:c5:
cd:e9:d5:8e:df:54:e0:95:83:6e:a1:ab:b0:d6:44:
33:77:c2:e9:14:55:0d:dd:69:1a:58:6a:63:0c:29:
2a:ee:89:e3:6d:97:12:3d:c0:17:37:62:85:b4:62:
6a:08:93:27:ff:25:d2:b0:d1:5a:f5:a3:23:3d:6a:
33:c4:23:e1:34:46:82:04:92:3e:01:94:73:55:76:
96:87:d6:2c:3b:85:ca:e9:ab:d9:9a:2c:18:8a:40:
5f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:40:AE:63:64:EB:5A:C6:CB:7B:B6:F6:10:58:47:4F:1A:12:50:FA
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e35362e302f32342d3234203d3e203633373933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.74.56.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:a6:b5:86:fc:1f:f5:10:ed:63:f1:d5:d2:55:00:e9:d4:17:
ea:60:e4:9e:f2:62:3a:8b:4f:b8:f2:49:45:2c:b2:25:f0:78:
96:a7:f9:29:9c:42:1a:c3:1f:ba:54:f0:37:1c:19:62:3b:97:
da:ba:be:f1:9c:0a:d3:00:be:60:71:74:cb:37:c1:bb:4f:20:
47:8f:7f:b1:79:1f:e6:3f:32:9c:55:22:49:2d:7f:94:1c:01:
74:2e:ba:f6:2f:55:d0:4f:58:d9:8b:03:ca:8f:d9:cc:90:dd:
1c:8e:f0:32:9c:93:ce:e5:f6:02:91:ae:f1:4e:ba:4f:6c:2c:
44:ea:f4:81:85:5e:1c:4d:4f:d1:68:5d:c9:b9:9f:66:b5:27:
fb:a3:16:41:25:f4:d9:f2:e0:45:3f:ff:84:4d:36:95:e4:77:
dc:cc:e6:10:cd:c3:82:38:4c:eb:e3:a8:76:ff:16:d8:34:2f:
41:4a:00:d2:9f:a2:50:e5:d6:79:45:a5:92:7a:a8:70:bd:e6:
25:ae:08:c3:fe:26:92:a4:00:4f:0e:9d:06:b6:60:90:8f:64:
b9:72:9e:c3:c9:a7:62:1b:89:63:e3:7d:4b:71:83:c9:1e:50:
9b:a2:8f:43:82:0f:b4:54:e4:90:05:40:ee:d8:4b:70:5b:72:
d3:f3:8e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:45:17 2026 by rpki-client