Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3231322e322e3233372e302f32342d3234203d3e20313938323530.roa
File: 3231322e322e3233372e302f32342d3234203d3e20313938323530.roa (raw, json)
Hash identifier: wZbQGuHgemFbv8qslIMNxpIPEuf0rY3Q5ZNk522f33Q=
Subject key identifier: CB:84:C4:04:49:36:22:4D:11:58:56:E7:A8:08:FE:39:CE:23:B2:36
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 0178001D3A4823D406780B56BEC746A17C7C02
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3231322e322e3233372e302f32342d3234203d3e20313938323530.roa
Signing time: Mon 13 Apr 2026 13:25:19 +0000
ROA not before: Mon 13 Apr 2026 13:20:19 +0000
ROA not after: Mon 12 Apr 2027 13:25:19 +0000
asID: 198250
IP address blocks: 212.2.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 11:59:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:78:00:1d:3a:48:23:d4:06:78:0b:56:be:c7:46:a1:7c:7c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Apr 13 13:20:19 2026 GMT
Not After : Apr 12 13:25:19 2027 GMT
Subject: CN=CB84C4044936224D115856E7A808FE39CE23B236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:24:05:d9:90:54:85:18:f2:f7:a6:b1:3e:de:
9e:c7:28:bf:ef:9a:8f:d3:da:4b:15:3b:5b:30:95:
8d:f9:57:af:6a:bc:73:ff:6a:f4:dc:8d:bd:82:d3:
01:44:b1:4a:c4:9e:98:6f:c5:a5:08:5f:19:c7:ae:
b5:df:fd:5c:29:a3:42:6e:6f:74:e2:0f:54:45:2f:
77:76:a2:7f:54:60:f9:ee:96:71:72:d6:23:72:b7:
28:6b:af:89:0d:fd:cb:51:f9:b8:cc:a6:12:d2:5b:
7a:df:8f:2b:e5:c4:43:ce:f0:4b:4e:7e:ff:2b:d7:
f7:1c:8a:8d:62:65:89:a0:4a:25:75:22:5f:93:fe:
30:06:4d:b5:1c:ae:59:d4:75:2d:d9:85:71:cf:77:
49:f3:2c:a7:13:88:ed:ae:1b:52:11:c9:48:16:39:
cd:d2:33:80:23:0c:41:8c:8d:03:d4:66:75:b2:82:
bd:00:8a:58:97:9a:35:d8:82:db:a9:71:75:92:f0:
e0:81:cf:1b:7e:b5:0e:0d:4e:86:fa:b7:7e:86:ae:
ef:15:eb:7f:6c:97:8a:0d:e4:f5:f8:de:fb:67:44:
11:ec:39:54:af:c2:d6:b3:5a:85:6d:5d:dd:ab:8b:
8b:bd:4f:0f:e8:5a:f0:5c:ae:a9:66:ec:8e:8e:21:
1d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:84:C4:04:49:36:22:4D:11:58:56:E7:A8:08:FE:39:CE:23:B2:36
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3231322e322e3233372e302f32342d3234203d3e20313938323530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.2.237.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:8d:9c:8a:ee:ae:ce:48:fb:aa:5f:e1:c3:da:d3:df:00:c3:
b2:69:ba:11:ef:27:23:0d:bf:80:d7:b8:fa:d7:49:6d:c9:70:
3c:42:ed:04:a3:d1:3a:a8:27:2b:c5:1c:e6:4f:58:1d:9c:ef:
cc:e0:9a:32:7d:d1:65:ce:b9:b6:86:16:73:37:cb:93:1c:23:
73:d0:57:b9:89:48:d4:9b:83:7b:03:31:ce:40:04:0b:b0:6c:
31:05:c8:56:ef:48:c5:fc:08:14:12:38:c1:67:6a:de:d8:e8:
6c:d8:c7:5b:1e:af:3a:aa:a4:c9:fb:a6:cb:b4:00:f5:d6:61:
0a:74:a3:be:20:be:2c:e6:4e:7a:2d:34:7e:53:e8:c0:45:f3:
69:dd:37:f0:a5:bb:06:4c:26:77:55:bb:c2:af:3c:1a:19:f5:
9b:1c:49:50:7a:a9:49:e9:21:12:ee:62:3d:35:37:c8:c8:0a:
31:73:35:f5:55:98:12:0c:8c:b1:e5:ad:52:b5:a9:52:f2:6c:
f5:87:e4:5d:6e:c0:9b:65:18:10:f0:96:0e:b7:bb:43:6c:56:
77:e5:53:3e:63:7e:b4:40:37:a5:b8:2e:a5:4e:da:ec:d0:31:
f2:b8:1d:8f:3d:ca:cc:91:4e:ac:0d:c8:a5:4a:55:e6:81:f8:
17:18:37:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:24:33 2026 by rpki-client