Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/3231332e3135372e3132332e302f32342d3234203d3e20323138383239.roa
File: 3231332e3135372e3132332e302f32342d3234203d3e20323138383239.roa (raw, json)
Hash identifier: 5nflC/ZAQBKmwe6R0T4Zf8LtCLe1A1oD7ZGFGhKypUg=
Subject key identifier: 35:CC:2A:8C:AA:E3:ED:1C:B0:CB:A2:2A:AE:99:4F:8C:E4:0C:8E:C8
Certificate issuer: /CN=8184669b0189b7fabe05e700325a0d74957beb27
Certificate serial: 30A9C2E3CA6038466CBB4A55A855B6808F12155A
Authority key identifier: 81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/3231332e3135372e3132332e302f32342d3234203d3e20323138383239.roa
Signing time: Sat 05 Sep 2026 06:59:12 +0000
ROA not before: Sat 05 Sep 2026 06:54:12 +0000
ROA not after: Sat 04 Sep 2027 06:59:12 +0000
asID: 218829
IP address blocks: 213.157.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl
rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft
rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:a9:c2:e3:ca:60:38:46:6c:bb:4a:55:a8:55:b6:80:8f:12:15:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8184669b0189b7fabe05e700325a0d74957beb27
Validity
Not Before: Sep 5 06:54:12 2026 GMT
Not After : Sep 4 06:59:12 2027 GMT
Subject: CN=35CC2A8CAAE3ED1CB0CBA22AAE994F8CE40C8EC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:cc:5e:f2:53:9c:de:ea:b3:a6:5f:28:66:de:
ec:e3:a1:29:e1:c1:20:96:ae:86:a1:ea:6c:c6:ea:
6a:30:ae:c4:03:50:ce:ed:91:7a:38:40:40:0d:42:
d7:8d:02:44:8b:13:d7:49:b7:85:70:dd:5b:10:6e:
eb:db:b8:3a:53:98:41:3e:74:b6:aa:fa:73:14:a4:
93:04:bd:5b:e6:00:f3:32:cb:83:ad:be:f6:00:ae:
50:77:cd:5e:4a:85:5e:13:98:fd:07:19:8a:a5:32:
96:bb:54:76:08:86:dc:18:0b:b7:da:34:82:4d:fc:
04:4e:42:cf:d9:c1:c5:8a:c2:30:08:55:ed:83:ce:
b7:c7:26:ef:75:62:90:f9:85:e6:f1:d5:e0:ad:17:
48:f8:21:de:98:c9:b6:3d:f6:90:dc:d3:14:f3:9a:
4f:43:90:95:66:7c:2b:32:9b:47:f2:30:d7:c9:2c:
7f:61:2a:e4:32:f2:b3:51:b6:e2:2c:e3:99:7f:6f:
f3:ca:6e:6e:3b:0d:fa:1c:9b:1d:46:da:4d:94:ab:
e6:0c:e8:60:17:8e:ce:87:1c:dc:bb:4a:e4:fb:1b:
73:18:0d:de:50:0a:e0:97:75:26:f5:1c:99:95:64:
fc:80:33:56:4c:52:8a:bd:fe:f0:74:73:a0:d8:b6:
83:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:CC:2A:8C:AA:E3:ED:1C:B0:CB:A2:2A:AE:99:4F:8C:E4:0C:8E:C8
X509v3 Authority Key Identifier:
keyid:81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/3231332e3135372e3132332e302f32342d3234203d3e20323138383239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.157.123.0/24
Signature Algorithm: sha256WithRSAEncryption
54:7c:a0:f2:f6:fc:18:6a:0e:53:4d:b3:75:0e:ef:fb:fd:c8:
c4:bb:40:0d:74:1a:9f:41:20:44:5b:50:63:f1:84:e4:37:68:
5f:b4:5d:fc:7f:0c:86:45:85:21:64:80:fd:7a:26:34:d7:3d:
89:c9:85:e6:d1:14:7a:ed:c9:be:7c:95:79:13:26:7d:ab:89:
4c:e2:dd:5d:53:f7:a6:c7:3d:32:b9:8c:fd:9e:fa:fc:64:cd:
75:1b:fd:23:7f:28:40:fc:b7:6a:6f:1f:ac:5d:bb:f5:95:aa:
83:54:eb:8d:a3:40:42:96:a1:2c:5f:af:b2:59:fd:a5:1c:b2:
b5:53:a6:95:22:ea:ba:b1:6c:f4:f9:77:bc:15:f7:71:2e:6f:
87:81:fa:d8:b8:05:02:e0:98:2f:de:74:1d:bc:e7:0c:59:c0:
9e:7a:31:99:3a:5b:6c:b6:02:95:de:d3:47:28:7a:f5:4d:e3:
a7:69:ce:63:e1:f4:ac:ad:e8:6b:f8:43:bd:13:1a:a2:ef:f4:
a1:12:68:84:b3:ad:4d:ec:0a:c8:cc:bf:50:55:85:d9:49:95:
bf:78:42:76:4c:95:03:56:f2:61:36:6d:53:6b:43:76:c5:76:
09:45:11:30:71:dd:e5:ca:fb:47:fd:cc:39:79:8a:a2:b8:51:
28:cb:7d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:26:30 2026 by rpki-client