Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3231322e322e3233382e302f32342d3234203d3e203432383331.roa
File: 3231322e322e3233382e302f32342d3234203d3e203432383331.roa (raw, json)
Hash identifier: tf49q1rk4Zhil8rfNPBeN/HXxcZJ+bN4j9DGsJwb1yg=
Subject key identifier: EF:8C:88:6D:06:53:87:FE:2A:3B:C5:5F:0F:C5:5F:AA:A8:F4:1F:2D
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 398740BB5D24262E2576555B8AB779B156223A38
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3231322e322e3233382e302f32342d3234203d3e203432383331.roa
Signing time: Thu 05 Feb 2026 11:55:36 +0000
ROA not before: Thu 05 Feb 2026 11:50:36 +0000
ROA not after: Thu 04 Feb 2027 11:55:36 +0000
asID: 42831
IP address blocks: 212.2.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:50:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:87:40:bb:5d:24:26:2e:25:76:55:5b:8a:b7:79:b1:56:22:3a:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Feb 5 11:50:36 2026 GMT
Not After : Feb 4 11:55:36 2027 GMT
Subject: CN=EF8C886D065387FE2A3BC55F0FC55FAAA8F41F2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c8:72:95:26:98:ff:99:6b:09:a4:e9:e5:f6:
e9:7b:70:5c:46:d9:4a:a3:cf:0a:4d:9d:38:3d:66:
b7:31:dc:0a:9f:9c:9e:42:c8:9e:94:70:d4:47:0d:
4d:14:84:a8:5c:6f:c2:44:4d:9c:d8:92:c6:31:c0:
81:d1:e8:12:ff:3d:30:27:0f:fa:63:fe:0b:ce:66:
4b:25:20:5c:f4:b6:5f:55:71:80:02:2e:3b:4b:e1:
ca:0b:7e:ba:de:dc:6e:a2:42:75:de:81:83:ed:39:
ff:61:2b:17:02:8f:f7:e3:d3:4b:66:c1:bf:23:0e:
73:81:c5:1e:30:6a:a5:df:a1:e3:60:05:04:00:53:
21:22:ef:ac:49:a0:46:22:bc:d7:0b:70:65:ac:cb:
87:88:97:db:ac:39:b2:83:fb:22:09:b8:f4:25:30:
d8:2e:91:23:16:ea:b3:fc:d7:ac:92:f9:5d:0b:b4:
56:87:86:5e:98:95:f7:77:82:8d:ac:b3:df:d6:16:
c2:85:c4:7e:7e:67:3d:75:81:71:04:b0:a4:ac:db:
51:97:63:4f:cf:da:23:a5:4d:fd:fd:72:bb:ad:f0:
3d:bc:4f:a6:dc:65:b0:36:1a:ca:98:de:79:5f:10:
c3:ca:ee:95:3a:f7:83:02:8c:ac:53:31:81:85:93:
15:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:8C:88:6D:06:53:87:FE:2A:3B:C5:5F:0F:C5:5F:AA:A8:F4:1F:2D
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3231322e322e3233382e302f32342d3234203d3e203432383331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.2.238.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:12:aa:98:67:6c:95:00:bf:d4:74:da:05:f7:92:b7:c1:db:
3b:eb:5b:d1:57:ae:ee:97:ad:06:b1:b8:09:72:03:b1:c8:42:
bc:e3:19:16:16:18:7f:7e:25:a1:70:fe:c6:f9:a6:f6:30:ee:
ed:0d:6c:25:95:24:79:f4:68:bc:02:7b:cf:21:7a:ab:87:89:
59:b0:55:a6:8e:55:9b:58:40:52:25:cf:77:41:60:92:49:f4:
b1:30:98:42:11:09:5f:73:4b:d5:79:84:1b:b0:8c:87:da:82:
a5:12:fa:2b:10:b8:40:77:08:28:06:af:e3:51:e0:bb:62:d7:
33:12:c5:6e:cb:b0:12:41:8d:d1:11:69:78:66:37:4e:3b:7d:
6e:22:46:e8:95:06:66:8f:dd:b7:1b:8a:1b:b7:12:b2:c4:e2:
6a:10:75:f3:b2:14:01:b2:02:7e:10:f5:a3:e5:25:71:19:86:
fc:ec:05:65:bc:74:4e:65:88:1f:22:81:2d:b5:8d:04:95:c2:
8b:b0:c8:8c:24:c2:e7:92:82:ce:19:d2:b6:24:f4:1c:35:ea:
3e:b2:2b:95:5a:16:65:03:3b:8c:28:c8:12:a9:f6:f6:58:1a:
39:16:31:c7:27:fe:7f:d9:cf:3d:c7:ab:b7:c2:d1:bb:dd:b2:
e6:05:3f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:44:34 2026 by rpki-client