Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3231322e32332e3231392e302f32342d3234203d3e203235313938.roa
File: 3231322e32332e3231392e302f32342d3234203d3e203235313938.roa (raw, json)
Hash identifier: CNhhgibAwqT2/STbO6pJ8teMjdh/9qL4JpkSVhV1cRQ=
Subject key identifier: A4:98:2A:84:CB:BB:86:D2:A1:B3:6C:8E:4D:D5:B8:4C:86:9B:11:CF
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 2E24251EC385A61BDD74887CC80F7882924ED265
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3231322e32332e3231392e302f32342d3234203d3e203235313938.roa
Signing time: Wed 11 Feb 2026 11:33:52 +0000
ROA not before: Wed 11 Feb 2026 11:28:52 +0000
ROA not after: Wed 10 Feb 2027 11:33:52 +0000
asID: 25198
IP address blocks: 212.23.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:24:25:1e:c3:85:a6:1b:dd:74:88:7c:c8:0f:78:82:92:4e:d2:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Feb 11 11:28:52 2026 GMT
Not After : Feb 10 11:33:52 2027 GMT
Subject: CN=A4982A84CBBB86D2A1B36C8E4DD5B84C869B11CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1c:0f:a0:4c:fc:98:3b:21:03:a8:59:4f:5e:
60:5c:3a:eb:9e:9b:11:09:ee:49:9f:43:25:aa:41:
1e:a1:2b:d4:a5:a5:ef:d5:b6:b7:86:26:e8:f2:9e:
4d:e7:31:e3:3b:4a:80:7f:8e:38:8a:be:b9:05:7f:
21:35:fb:19:7b:de:2f:4d:46:39:ed:af:97:dd:eb:
e9:5c:87:28:46:19:d4:67:29:51:b5:6a:c8:e4:04:
5f:f3:57:56:f2:e3:2c:fd:71:96:29:87:36:d5:4a:
93:85:40:c2:24:02:92:70:12:b0:87:30:19:28:4c:
45:47:dd:6b:10:d0:a6:8b:63:cb:81:78:de:67:bd:
cd:e5:19:c4:23:16:c5:69:5c:2c:01:82:0a:0e:a7:
80:77:c2:d0:72:c7:8e:92:e5:bd:09:a3:a4:c3:27:
a4:77:65:ee:a5:9a:40:7d:80:2f:a0:4b:15:d1:43:
fb:b7:f6:e4:9a:18:ff:71:da:43:04:83:1c:52:71:
1e:fe:d3:31:c9:8c:b4:50:32:e6:60:ba:53:7e:9c:
b9:ee:0b:bd:7b:e0:ea:1c:72:a4:fb:0c:08:92:27:
8d:f5:92:63:69:1f:41:75:ff:cf:c9:e0:fe:d5:3c:
01:50:27:61:fe:8f:2d:54:26:7f:5c:ad:bf:2f:6d:
58:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:98:2A:84:CB:BB:86:D2:A1:B3:6C:8E:4D:D5:B8:4C:86:9B:11:CF
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3231322e32332e3231392e302f32342d3234203d3e203235313938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.219.0/24
Signature Algorithm: sha256WithRSAEncryption
63:56:41:92:f2:7d:47:83:96:bb:95:fa:3e:c7:f6:9d:0e:d4:
95:c5:56:48:1a:b6:e8:c3:f5:1d:d3:01:9e:37:09:df:4d:2f:
c8:18:4c:ed:ee:74:f5:21:03:47:6b:f4:33:db:f3:69:6a:d8:
e9:ed:16:ce:fc:18:f7:e8:53:24:55:f9:70:63:16:f3:0b:2f:
5f:09:24:65:b4:e0:31:17:73:8d:33:dd:08:b5:18:73:fe:bd:
1c:db:37:66:15:49:4d:26:94:65:a9:68:09:c3:3f:02:0e:40:
28:c4:6a:de:af:73:bc:e9:fb:f4:54:c0:b3:cd:24:c4:b4:29:
89:bf:3d:10:bc:5e:6c:6a:b1:32:22:1a:de:7c:71:ab:33:6e:
f1:c5:3d:b2:46:8c:66:ab:39:ad:52:7a:3b:40:35:e6:e7:70:
01:9c:52:9c:15:70:6a:c4:37:e4:71:fb:9f:51:fc:fa:70:88:
94:aa:e5:5b:b9:dc:a2:fd:db:99:e5:2f:d2:ca:90:ed:65:20:
54:ed:20:10:04:47:f5:c3:ed:28:90:52:a5:dd:b2:c7:00:2a:
ee:7f:ac:a4:c3:01:bc:ea:95:9e:06:34:53:71:ff:81:a6:26:
34:81:d3:77:dc:b7:f8:04:38:ef:43:83:9d:c2:40:b8:5a:17:
a8:28:04:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:06:32 2026 by rpki-client