Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36362e302f32342d3234203d3e20383334.roa
File: 3231332e3133392e36362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: NNeSm0YmYiv7RDDSl/AI52boRHe4mM/vb2OQANfwSD4=
Subject key identifier: B7:3C:0B:89:0C:74:C0:3A:62:D9:1B:84:0D:7D:4D:FF:C6:D9:94:90
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 3E41D6366769D5A713B45BF6134331B5F8C31D7F
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36362e302f32342d3234203d3e20383334.roa
Signing time: Mon 14 Sep 2026 14:42:17 +0000
ROA not before: Mon 14 Sep 2026 14:37:17 +0000
ROA not after: Mon 13 Sep 2027 14:42:17 +0000
asID: 834
IP address blocks: 213.139.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:41:d6:36:67:69:d5:a7:13:b4:5b:f6:13:43:31:b5:f8:c3:1d:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Sep 14 14:37:17 2026 GMT
Not After : Sep 13 14:42:17 2027 GMT
Subject: CN=B73C0B890C74C03A62D91B840D7D4DFFC6D99490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:28:0f:b0:f7:41:83:6a:42:12:55:56:45:ce:
26:35:43:7f:d9:a2:a6:6d:5b:2f:71:fa:7b:9e:30:
fe:1a:60:0c:91:00:b8:e9:ee:b6:df:f7:c5:3c:c5:
c9:4c:2b:a8:99:98:28:e9:5b:36:12:7b:ff:41:d7:
13:67:80:07:08:7b:68:1b:c4:a0:29:fc:eb:b2:54:
87:75:d8:f9:94:cd:7f:c5:17:0e:93:22:67:3a:33:
30:80:46:cc:cf:e7:02:34:d2:43:1e:3b:da:56:74:
76:c7:0f:e7:19:59:03:ab:e9:20:3c:08:6c:70:0f:
86:2c:14:c0:cd:9b:d5:ed:2a:de:37:23:8a:72:61:
a9:e2:79:c4:5f:0b:9a:7a:df:d9:91:8a:aa:35:8c:
ea:4b:95:a0:3b:75:0a:a5:95:c5:44:bb:66:b6:a1:
dd:70:ff:58:49:d5:a5:ca:36:1b:9c:f9:46:b4:5b:
8b:7f:5b:24:75:35:41:46:c4:d6:5e:39:e4:c1:1b:
dc:1a:71:20:ac:c9:70:54:74:fe:da:9c:78:3a:bc:
42:60:f3:4d:61:83:28:a5:06:2a:8a:af:c6:eb:45:
20:55:fb:ad:c7:cc:bf:1d:cf:f1:ea:0a:b5:88:ba:
bd:84:dc:30:c5:b6:11:fd:ea:e9:c8:0a:9d:5d:9c:
ea:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:3C:0B:89:0C:74:C0:3A:62:D9:1B:84:0D:7D:4D:FF:C6:D9:94:90
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.66.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:ca:5e:1e:38:f8:be:fa:bf:d3:a7:35:6e:f3:5e:a7:67:0b:
c1:17:80:f4:ab:36:34:32:93:62:2e:48:5a:93:81:41:94:43:
69:42:e7:2a:7a:58:27:13:e9:ec:e2:60:60:4d:30:8d:e5:7f:
ce:69:e2:21:87:8f:be:89:03:dc:50:de:ad:11:72:1a:67:f8:
d9:06:41:fa:fc:5a:33:5b:4b:c4:37:57:62:e4:c4:02:58:df:
88:6e:ef:51:bf:c8:81:6e:7a:20:5d:81:eb:6c:f0:f6:a2:48:
4b:06:e1:6d:70:0c:96:19:ec:00:fc:6b:8d:90:27:61:85:73:
1a:90:b4:0a:5c:1b:9b:cc:10:76:0c:18:9b:44:33:68:ec:d9:
58:ee:fe:9d:e3:f6:c7:44:76:76:ac:ca:0a:8b:35:bd:a4:02:
87:d2:01:0a:b8:ad:f6:ca:63:5b:fa:f2:b2:d7:08:ee:d0:2a:
53:5a:31:17:21:78:5e:2f:8c:06:a4:f7:56:3c:25:a0:ca:25:
a2:58:81:bd:50:47:37:27:53:70:3a:fa:b7:e1:d6:a6:c9:e5:
99:26:8f:6e:46:f9:8d:e4:d2:d9:45:cc:14:8e:b6:1c:ac:88:
31:c8:04:cb:a4:1c:71:07:a0:53:32:33:3f:ef:ef:ae:1d:13:
5d:5a:08:85
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUPkHWNmdp1acTtFv2E0MxtfjDHX8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjY4M2YyZWI1MGM1OTk5YTc3NDU2ZTg4MjY4MzE2MDlk
NDhjN2QzZTAeFw0yNjA5MTQxNDM3MTdaFw0yNzA5MTMxNDQyMTdaMDMxMTAvBgNV
BAMTKEI3M0MwQjg5MEM3NEMwM0E2MkQ5MUI4NDBEN0Q0REZGQzZEOTk0OTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvKA+w90GDakISVVZFziY1Q3/Z
oqZtWy9x+nueMP4aYAyRALjp7rbf98U8xclMK6iZmCjpWzYSe/9B1xNngAcIe2gb
xKAp/OuyVId12PmUzX/FFw6TImc6MzCARszP5wI00kMeO9pWdHbHD+cZWQOr6SA8
CGxwD4YsFMDNm9XtKt43I4pyYaniecRfC5p639mRiqo1jOpLlaA7dQqllcVEu2a2
od1w/1hJ1aXKNhuc+Ua0W4t/WyR1NUFGxNZeOeTBG9wacSCsyXBUdP7anHg6vEJg
801hgyilBiqKr8brRSBV+63HzL8dz/HqCrWIur2E3DDFthH96unICp1dnOrPAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUtzwLiQx0wDpi2RuEDX1N/8bZlJAwHwYDVR0j
BBgwFoAUtoPy61DFmZp3RW6IJoMWCdSMfT4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTAxYzE0ZmItYjY2MC00ODlkLTllOWYtOTQwMmU5ZTJj
MmUyLzAvQjY4M0YyRUI1MEM1OTk5QTc3NDU2RTg4MjY4MzE2MDlENDhDN0QzRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3RvUHk2MURGbVpwM1JXNklKb01XQ2RT
TWZUNC5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTAxYzE0ZmIt
YjY2MC00ODlkLTllOWYtOTQwMmU5ZTJjMmUyLzAvMzIzMTMzMmUzMTMzMzkyZTM2
MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADVi0Iw
DQYJKoZIhvcNAQELBQADggEBACzKXh44+L76v9OnNW7zXqdnC8EXgPSrNjQyk2Iu
SFqTgUGUQ2lC5yp6WCcT6eziYGBNMI3lf85p4iGHj76JA9xQ3q0Rchpn+NkGQfr8
WjNbS8Q3V2LkxAJY34hu71G/yIFueiBdgets8PaiSEsG4W1wDJYZ7AD8a42QJ2GF
cxqQtApcG5vMEHYMGJtEM2js2Vju/p3j9sdEdnasygqLNb2kAofSAQq4rfbKY1v6
8rLXCO7QKlNaMRcheF4vjAak91Y8JaDKJaJYgb1QRzcnU3A6+rfh1qbJ5Zkmj25G
+Y3k0tlFzBSOthysiDHIBMukHHEHoFMyMz/v764dE11aCIU=
-----END CERTIFICATE-----
Generated at Mon Sep 21 23:15:16 2026 by rpki-client