Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38302e302f32342d3234203d3e203232343237.roa
File: 3231332e3133392e38302e302f32342d3234203d3e203232343237.roa (raw, json)
Hash identifier: g2v8voZzjWLOYqIOoWNtEKKH0iUdXIeZf8etwqeRplw=
Subject key identifier: 4C:0F:B5:4F:38:BF:0D:A6:60:59:3C:DA:35:ED:69:F2:5C:F4:ED:4D
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 130719C43DECC71E5798A9533FD88B3FEC57DC57
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38302e302f32342d3234203d3e203232343237.roa
Signing time: Tue 03 Feb 2026 04:31:56 +0000
ROA not before: Tue 03 Feb 2026 04:26:56 +0000
ROA not after: Tue 02 Feb 2027 04:31:56 +0000
asID: 22427
IP address blocks: 213.139.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:40:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:07:19:c4:3d:ec:c7:1e:57:98:a9:53:3f:d8:8b:3f:ec:57:dc:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Feb 3 04:26:56 2026 GMT
Not After : Feb 2 04:31:56 2027 GMT
Subject: CN=4C0FB54F38BF0DA660593CDA35ED69F25CF4ED4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e4:ce:80:3f:ec:67:ed:e2:48:21:11:95:87:
44:4b:bb:c3:b3:8d:5d:24:38:ff:f2:93:7a:f3:4a:
c3:03:e5:78:c7:07:15:45:8d:0d:54:c4:02:91:21:
8e:95:7e:5d:3b:1f:24:08:e9:7b:eb:c5:15:9c:3e:
01:c1:c1:de:3b:bf:a0:05:c3:42:c5:46:c4:b3:ed:
18:33:6b:8e:12:f9:1a:4d:d9:1d:f4:61:ce:6f:b4:
6a:6f:40:57:01:99:40:b4:03:e3:4a:ef:7b:18:12:
e6:06:8e:ce:64:ea:c5:ce:e8:ab:fe:88:fa:35:e8:
44:ee:13:0b:3f:25:48:8b:d9:0b:7f:51:d4:50:c1:
2d:09:5d:71:f0:f2:e1:75:fc:37:a0:a7:2e:06:de:
6f:45:47:d4:66:c2:7c:b5:da:43:9e:f3:cc:78:b3:
23:9f:ad:ae:bd:d6:9f:06:f8:dd:24:26:6d:86:b0:
e8:b3:80:4b:58:b4:19:af:b9:7d:35:e1:95:6c:f2:
4b:17:4f:b2:73:4d:6d:9c:79:bd:1e:f7:3f:38:56:
e8:30:fa:11:41:93:54:8c:74:6a:c0:1c:41:85:85:
df:f2:46:49:18:54:46:24:5c:cc:f0:95:0f:77:9d:
ca:52:d8:08:d0:60:91:ad:f3:3d:36:c5:80:a6:cd:
e2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:0F:B5:4F:38:BF:0D:A6:60:59:3C:DA:35:ED:69:F2:5C:F4:ED:4D
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38302e302f32342d3234203d3e203232343237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.80.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:f3:e1:9b:4c:ae:fa:85:b9:44:e0:b6:1d:db:bd:2e:73:40:
c8:23:d9:96:57:39:d5:80:5f:02:7f:25:0b:9e:80:f2:9c:e5:
f5:e6:fc:c1:fa:81:db:65:0f:ff:b4:dc:8e:89:06:d9:56:da:
5a:17:8b:61:2d:53:61:14:bd:e0:e6:bd:34:40:ca:27:87:40:
9f:fe:ed:e8:90:33:6a:5a:72:80:b6:ea:07:26:0e:08:cd:46:
3c:0f:3c:b0:56:31:32:b0:ae:07:90:96:92:ca:6e:c1:2b:34:
40:d0:36:10:89:5b:c5:35:2f:dc:30:c7:67:38:c6:0c:45:6a:
48:e3:8d:9c:94:22:8e:3c:29:78:68:bf:d3:8e:63:7b:0d:66:
93:6b:b7:cc:25:c4:4d:90:31:00:80:95:eb:b4:13:6d:34:a4:
d1:97:12:8c:ee:28:4f:18:bb:ce:77:4d:32:da:d0:e0:17:9f:
8f:43:f6:80:61:a0:ed:3b:e8:b3:d0:df:3a:48:c3:2d:2a:55:
c9:69:83:93:ae:c3:33:86:b1:d0:3f:db:3a:85:17:1f:8e:dd:
7c:91:b5:59:48:eb:5e:4c:8a:2a:49:12:e4:77:9b:c2:93:b3:
eb:02:aa:44:52:56:a6:53:6b:80:4c:a6:93:15:e8:16:89:eb:
02:e5:44:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:08:16 2026 by rpki-client