Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37392e302f32342d3234203d3e20323139313030.roa
File: 3231332e3133392e37392e302f32342d3234203d3e20323139313030.roa (raw, json)
Hash identifier: r6hGPW9EliDZLrxKGbasu0b9A1Y7nnFgX6bLK+/jROY=
Subject key identifier: 85:0A:2B:95:5E:C1:71:0B:D7:FA:13:91:14:E6:3D:2D:69:FA:79:7C
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 5C6C2C29ABD43B8C6EED7B806A5F603F7AFE716F
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37392e302f32342d3234203d3e20323139313030.roa
Signing time: Wed 16 Sep 2026 07:25:24 +0000
ROA not before: Wed 16 Sep 2026 07:20:24 +0000
ROA not after: Wed 15 Sep 2027 07:25:24 +0000
asID: 219100
IP address blocks: 213.139.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:6c:2c:29:ab:d4:3b:8c:6e:ed:7b:80:6a:5f:60:3f:7a:fe:71:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Sep 16 07:20:24 2026 GMT
Not After : Sep 15 07:25:24 2027 GMT
Subject: CN=850A2B955EC1710BD7FA139114E63D2D69FA797C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:81:97:65:fa:77:12:0d:69:bb:46:84:58:f5:
47:d2:b5:0b:ad:86:9e:97:e5:85:cc:15:0a:cb:7c:
05:ed:d8:71:0b:1b:91:a0:a1:bb:26:6f:10:62:f9:
a1:11:04:44:ed:d2:bb:f0:37:58:e6:96:19:d8:95:
9f:c6:b2:5c:b9:39:72:4a:52:6f:12:91:64:3b:4b:
ae:4e:6f:59:26:87:80:33:f1:d2:a1:fc:c3:cd:5b:
4c:e8:89:b6:87:2f:f4:b7:98:c4:54:ab:bb:92:ce:
e2:22:cb:be:5b:c0:57:13:61:01:f2:96:28:aa:70:
d6:8b:51:b1:9c:78:bf:ba:c8:1a:12:09:92:8d:9a:
1f:c7:ef:7f:59:16:e5:21:a8:95:e9:28:e7:4f:32:
e1:f1:76:01:af:0f:c5:ac:77:31:32:2d:bc:54:1a:
56:4a:25:ce:28:a9:a6:0f:fb:d4:7b:3e:90:7a:0e:
2b:1f:0f:5a:70:78:02:65:4f:88:4f:d3:98:cf:2a:
6b:fe:90:79:4f:e1:75:d8:98:b1:06:17:b1:5f:08:
41:1f:3f:1c:97:f6:84:c9:15:16:96:2f:9d:e4:14:
01:f7:0f:86:9f:61:4a:a9:95:2f:bc:03:89:17:a0:
f2:b6:83:c6:de:73:ae:a1:95:e0:f6:3f:a6:88:f9:
7c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:0A:2B:95:5E:C1:71:0B:D7:FA:13:91:14:E6:3D:2D:69:FA:79:7C
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37392e302f32342d3234203d3e20323139313030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.79.0/24
Signature Algorithm: sha256WithRSAEncryption
00:7a:dc:7e:c8:5e:d5:0f:39:05:36:eb:a2:0d:8b:92:ed:72:
44:8f:40:4d:29:26:88:77:c1:fe:c4:8b:98:c4:cc:1e:d4:be:
33:16:f4:7c:9d:44:7b:12:ad:6d:af:8e:96:56:b1:8e:0d:28:
31:34:12:ca:af:f1:71:0a:82:bb:30:89:7c:81:fc:1b:a7:f4:
e9:3d:e6:57:f5:6e:54:c6:71:39:c3:92:ce:2d:31:0e:bd:38:
52:29:0b:70:b8:de:66:f2:be:b7:a7:da:7e:bb:4e:1f:24:ee:
fe:5f:cf:d4:08:c0:47:78:67:87:b0:a3:1c:13:8c:d3:3c:90:
5c:3d:c6:9d:df:81:1b:31:06:ac:89:27:2c:50:95:7f:69:8c:
32:7a:48:79:37:27:e4:c6:05:6c:40:9b:8d:90:a4:fe:91:e2:
29:c4:5d:a5:1e:07:71:25:82:7e:6c:fa:52:58:ec:49:81:d3:
18:43:af:f2:ff:a9:ca:f1:0c:7d:19:ec:c1:8a:a6:55:25:7d:
ff:e9:0c:b7:be:01:3c:c1:ff:93:86:0f:59:81:d7:d9:09:5c:
80:5f:a4:5c:94:4d:f1:1c:31:86:e4:e1:fb:f6:6c:13:bc:30:
68:c8:c5:fe:8a:47:4e:c0:4b:a2:45:25:ea:1f:56:39:6a:31:
9a:2e:f4:fa
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUXGwsKavUO4xu7XuAal9gP3r+cW8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjY4M2YyZWI1MGM1OTk5YTc3NDU2ZTg4MjY4MzE2MDlk
NDhjN2QzZTAeFw0yNjA5MTYwNzIwMjRaFw0yNzA5MTUwNzI1MjRaMDMxMTAvBgNV
BAMTKDg1MEEyQjk1NUVDMTcxMEJEN0ZBMTM5MTE0RTYzRDJENjlGQTc5N0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsgZdl+ncSDWm7RoRY9UfStQut
hp6X5YXMFQrLfAXt2HELG5GgobsmbxBi+aERBETt0rvwN1jmlhnYlZ/Gsly5OXJK
Um8SkWQ7S65Ob1kmh4Az8dKh/MPNW0zoibaHL/S3mMRUq7uSzuIiy75bwFcTYQHy
liiqcNaLUbGceL+6yBoSCZKNmh/H739ZFuUhqJXpKOdPMuHxdgGvD8WsdzEyLbxU
GlZKJc4oqaYP+9R7PpB6DisfD1pweAJlT4hP05jPKmv+kHlP4XXYmLEGF7FfCEEf
PxyX9oTJFRaWL53kFAH3D4afYUqplS+8A4kXoPK2g8bec66hleD2P6aI+XwLAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUhQorlV7BcQvX+hORFOY9LWn6eXwwHwYDVR0j
BBgwFoAUtoPy61DFmZp3RW6IJoMWCdSMfT4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTAxYzE0ZmItYjY2MC00ODlkLTllOWYtOTQwMmU5ZTJj
MmUyLzAvQjY4M0YyRUI1MEM1OTk5QTc3NDU2RTg4MjY4MzE2MDlENDhDN0QzRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3RvUHk2MURGbVpwM1JXNklKb01XQ2RT
TWZUNC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTAxYzE0ZmIt
YjY2MC00ODlkLTllOWYtOTQwMmU5ZTJjMmUyLzAvMzIzMTMzMmUzMTMzMzkyZTM3
MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzkzMTMwMzAucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADVi08wDQYJKoZIhvcNAQELBQADggEBAAB63H7IXtUPOQU266INi5LtckSPQE0p
Joh3wf7Ei5jEzB7UvjMW9HydRHsSrW2vjpZWsY4NKDE0Esqv8XEKgrswiXyB/Bun
9Ok95lf1blTGcTnDks4tMQ69OFIpC3C43mbyvren2n67Th8k7v5fz9QIwEd4Z4ew
oxwTjNM8kFw9xp3fgRsxBqyJJyxQlX9pjDJ6SHk3J+TGBWxAm42QpP6R4inEXaUe
B3Elgn5s+lJY7EmB0xhDr/L/qcrxDH0Z7MGKplUlff/pDLe+ATzB/5OGD1mB19kJ
XIBfpFyUTfEcMYbk4fv2bBO8MGjIxf6KR07AS6JFJeofVjlqMZou9Po=
-----END CERTIFICATE-----
Generated at Tue Sep 22 13:29:01 2026 by rpki-client