Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e36312e302f32342d3234203d3e203633373933.roa
File: 3231322e37342e36312e302f32342d3234203d3e203633373933.roa (raw, json)
Hash identifier: 2LLe2iRUx3kqjetnGXBlvhluYhEdMLVZUUkQmNUjpcA=
Subject key identifier: 15:82:E1:96:A1:3F:D4:C6:14:E4:53:55:32:96:CD:5C:C6:EC:E9:B1
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 15E3B0939828487BB00F03D3C2733EE65989E433
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e36312e302f32342d3234203d3e203633373933.roa
Signing time: Wed 25 Feb 2026 03:21:36 +0000
ROA not before: Wed 25 Feb 2026 03:16:36 +0000
ROA not after: Wed 24 Feb 2027 03:21:36 +0000
asID: 63793
IP address blocks: 212.74.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:e3:b0:93:98:28:48:7b:b0:0f:03:d3:c2:73:3e:e6:59:89:e4:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Feb 25 03:16:36 2026 GMT
Not After : Feb 24 03:21:36 2027 GMT
Subject: CN=1582E196A13FD4C614E453553296CD5CC6ECE9B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:04:59:01:37:31:0e:49:b3:63:24:ce:51:c6:
de:da:98:ee:2e:da:c9:68:21:92:c4:52:9e:70:95:
60:26:6e:08:62:6f:52:e5:3b:3a:cb:ff:2a:e4:b6:
2f:06:db:d4:da:93:dd:51:6d:90:80:b2:66:ff:82:
6d:36:f6:96:0d:c1:15:e1:92:d5:24:61:a3:51:9e:
aa:b8:d5:a7:b7:3f:c3:56:28:7a:0b:0a:3b:81:38:
73:0e:14:65:68:7c:70:fa:43:9b:0d:bf:03:dd:8d:
c5:e2:4f:2c:8d:98:2b:b9:5a:63:64:34:f8:e9:ea:
55:2a:ad:df:d2:45:3d:ef:3b:b9:7c:a7:6f:5f:d8:
72:e6:2f:04:6a:39:fd:d4:08:3b:bb:3c:37:62:df:
0b:39:cd:15:8b:7a:e1:69:a3:a9:4e:9c:71:7f:42:
dd:cc:b5:6b:5d:b3:20:18:e2:f3:b9:58:7e:9d:62:
eb:b1:aa:06:3b:22:fd:80:0d:81:3b:92:3c:81:98:
9f:9b:ae:dc:60:23:9c:bb:d6:dc:2a:2c:fc:95:5e:
bc:6d:db:cc:9a:11:99:85:0c:5c:88:b8:06:f5:af:
de:be:d8:8a:b4:c2:40:95:ac:f7:bc:38:dc:46:da:
6b:f3:ee:91:0d:36:14:6d:ee:12:09:b1:c1:45:22:
fa:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:82:E1:96:A1:3F:D4:C6:14:E4:53:55:32:96:CD:5C:C6:EC:E9:B1
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e36312e302f32342d3234203d3e203633373933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.74.61.0/24
Signature Algorithm: sha256WithRSAEncryption
38:51:e9:b7:6d:28:3e:86:4e:d8:65:02:6b:0d:cc:9a:69:07:
c2:81:e4:69:50:62:d9:68:14:8d:48:c2:22:6a:0a:b8:f3:3f:
00:f3:ff:9d:ee:ba:5d:ee:79:92:23:d1:a8:c1:b9:9d:03:a6:
07:9a:0c:f5:db:e7:d6:59:c7:2f:95:ad:2d:ba:41:a9:07:18:
b8:0e:7b:9f:06:7e:ac:52:9d:0f:de:22:47:8f:e6:bb:05:48:
fb:d7:49:e0:80:c6:b8:89:b8:64:79:61:3d:ba:d3:ee:f0:87:
31:b7:40:5d:fa:fe:4e:a7:16:83:07:40:0b:a0:5a:65:14:2b:
89:e3:59:56:90:b3:7b:93:43:64:45:dc:28:88:0f:0a:3e:72:
ee:d1:15:3b:54:c3:fe:2a:10:98:4d:40:23:ed:c8:f3:3b:8d:
fc:1a:0d:e7:35:f4:2d:f5:f8:0b:d6:d8:b5:c5:92:84:d9:79:
db:50:1f:72:db:6c:8f:15:2a:bb:cc:0d:3a:06:2d:57:93:be:
b5:c0:a3:13:0c:6e:c4:21:2a:83:72:fe:3a:29:21:17:83:7f:
96:90:a2:b4:df:b6:df:cc:35:76:7a:74:90:4e:60:48:76:22:
6c:ed:10:c9:82:f0:9f:59:fe:53:3c:e2:f4:de:64:9c:85:38:
e7:8a:80:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:45:16 2026 by rpki-client