Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/3231332e3235342e3137302e302f32342d3234203d3e20323139313339.roa
File: 3231332e3235342e3137302e302f32342d3234203d3e20323139313339.roa (raw, json)
Hash identifier: 1Vl9oWFR11Yoo0iTLsVc/HDIQkucPHAPz/peYfql2NQ=
Subject key identifier: E4:C7:A0:62:32:35:FA:E0:6B:41:F8:48:1B:BA:9D:A2:67:A2:79:B9
Certificate issuer: /CN=5ecb4cadbbadd500f49ca697d566a2761e017608
Certificate serial: 78EEEE48807DC320454E1A707EB5742A084B3185
Authority key identifier: 5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/3231332e3235342e3137302e302f32342d3234203d3e20323139313339.roa
Signing time: Mon 27 Jul 2026 11:02:28 +0000
ROA not before: Mon 27 Jul 2026 10:57:28 +0000
ROA not after: Mon 26 Jul 2027 11:02:28 +0000
asID: 219139
IP address blocks: 213.254.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl
rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft
rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 04:55:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:ee:ee:48:80:7d:c3:20:45:4e:1a:70:7e:b5:74:2a:08:4b:31:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ecb4cadbbadd500f49ca697d566a2761e017608
Validity
Not Before: Jul 27 10:57:28 2026 GMT
Not After : Jul 26 11:02:28 2027 GMT
Subject: CN=E4C7A0623235FAE06B41F8481BBA9DA267A279B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b6:df:8b:72:92:56:a8:a0:a2:72:e6:81:cd:
66:6c:7e:ee:54:c4:70:ee:8a:ad:95:b5:fe:eb:91:
4a:37:99:ec:91:69:d5:54:02:2b:54:6b:cb:0b:8e:
46:24:f6:e6:6f:a9:ec:3c:7e:e2:4d:03:32:fc:d2:
1e:82:6d:18:ef:8e:60:dd:cb:4d:84:df:d4:0f:a7:
30:b2:48:7e:c1:e1:41:55:31:97:27:e8:19:cc:80:
5d:94:60:13:ab:a6:9b:b7:88:36:3d:10:6a:79:e8:
2e:54:3c:ea:51:ec:00:e2:f8:70:a5:ec:f2:6e:53:
c5:cb:de:0b:d9:ad:a0:b1:22:c9:75:41:54:56:fd:
c2:10:3f:d6:db:27:16:fe:a7:b8:84:ae:ea:eb:12:
6f:81:9a:ed:42:81:f5:c8:45:73:9a:66:bb:9c:4d:
ff:34:4e:8f:e5:f5:27:29:1d:d3:6f:3d:6b:8a:aa:
88:30:60:1b:75:e1:b2:a7:0c:cb:ba:be:10:9f:92:
45:a3:79:6d:29:08:9e:79:f0:94:03:ac:a1:d4:eb:
d2:06:33:de:8c:f4:d3:88:13:2c:a8:f3:0d:c9:15:
4e:df:79:6c:44:34:ed:4e:26:a2:8a:cd:a7:ab:38:
a4:63:a4:a8:b4:16:33:33:e7:78:ee:90:fa:3f:20:
42:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C7:A0:62:32:35:FA:E0:6B:41:F8:48:1B:BA:9D:A2:67:A2:79:B9
X509v3 Authority Key Identifier:
keyid:5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/3231332e3235342e3137302e302f32342d3234203d3e20323139313339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.254.170.0/24
Signature Algorithm: sha256WithRSAEncryption
34:ab:38:55:90:51:d1:5e:30:fb:74:9e:79:0a:c3:6e:34:44:
7c:b7:4f:bf:a6:20:79:82:dd:fc:eb:19:b6:ab:c2:aa:e0:bc:
f6:74:ef:15:73:1a:0d:bf:6f:13:fa:0e:b2:a2:4a:13:df:9c:
ef:61:32:ed:b4:ef:b8:9c:85:dd:8d:bb:a2:3f:81:5a:a7:08:
bd:a8:14:cc:07:8a:92:57:a5:84:31:d1:fa:db:75:49:92:38:
1a:be:f1:2a:a0:39:03:36:ee:58:e9:8c:1b:2f:63:03:43:b7:
3d:df:5f:35:75:7d:b0:0b:fc:91:00:16:e8:f7:bd:78:7e:42:
a7:d2:9b:19:aa:76:92:e1:9a:54:1c:5b:6b:05:1d:68:e5:82:
43:c6:00:d6:75:d5:19:49:43:4a:1a:fc:84:12:5e:f8:17:0e:
8a:db:b4:f4:6a:b7:30:8d:78:32:75:f9:ed:96:62:01:d5:b5:
a2:3d:12:e5:28:c4:82:c5:9e:d9:4e:a6:39:d7:98:97:92:d8:
e7:ab:38:db:6d:bd:9f:b9:4e:d9:b5:fb:18:a6:11:cb:82:49:
c9:0e:90:88:24:d9:29:b6:c7:e7:a7:80:4b:8d:81:86:0c:ff:
27:fd:97:ef:15:bf:4a:aa:0a:01:01:08:cf:33:bd:fe:79:af:
75:88:86:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:04:55 2026 by rpki-client