Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e39302e302f32342d3234203d3e20323132323338.roa
File: 3231322e33322e39302e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: 7qxiy5aun9F7ZdwuGhSC2wDN/uS5OYVcL/kr49QUOZo=
Subject key identifier: C1:84:BE:E1:6F:65:F7:CC:6D:B6:96:39:54:2E:F5:BC:FD:2E:03:52
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 43702228161A86B49BDF4FAB5303003B5A2E7D86
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e39302e302f32342d3234203d3e20323132323338.roa
Signing time: Mon 30 Jun 2025 21:29:19 +0000
ROA not before: Mon 30 Jun 2025 21:24:19 +0000
ROA not after: Mon 29 Jun 2026 21:29:19 +0000
asID: 212238
IP address blocks: 212.32.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:70:22:28:16:1a:86:b4:9b:df:4f:ab:53:03:00:3b:5a:2e:7d:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 30 21:24:19 2025 GMT
Not After : Jun 29 21:29:19 2026 GMT
Subject: CN=C184BEE16F65F7CC6DB69639542EF5BCFD2E0352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:8e:72:3e:d7:45:04:a0:71:e4:c0:59:14:1e:
8b:97:f9:9a:b7:23:37:87:8c:b7:bf:bb:14:06:8f:
ea:61:96:75:fd:ac:0f:c4:12:23:fd:9f:2f:46:28:
ff:e8:60:43:0f:b3:6d:d0:90:72:3e:14:20:ee:fb:
e8:54:60:15:da:32:0e:39:1f:16:5a:e0:2b:95:c1:
9c:0b:ef:bd:f6:7a:5f:27:38:56:e8:8a:2d:aa:a6:
d3:16:65:8b:a3:39:06:9f:4e:e1:9d:f4:10:0d:09:
ba:e3:d5:1a:1b:6b:d8:c6:3f:c6:5a:e7:2d:3b:8a:
9e:48:21:8e:63:07:95:a2:04:03:05:a3:79:27:67:
24:e1:55:8e:ba:c5:5a:f1:1f:21:d4:76:39:02:18:
62:47:15:87:e9:5e:f7:77:60:9a:f7:fb:15:70:73:
b4:b7:8e:de:39:0a:b7:45:fd:7f:23:1d:f7:da:df:
36:ad:27:6e:ba:ca:79:c4:11:94:19:f4:c9:21:76:
99:83:59:2b:03:20:4d:b2:08:09:06:ea:b9:a2:92:
1d:f0:97:c9:ac:b6:9b:ac:f4:25:d7:3e:24:c0:30:
10:2a:c2:84:0d:99:a6:7c:06:24:c3:d2:17:70:77:
91:4a:9b:cd:fb:1a:fa:de:2b:06:69:70:61:30:78:
d4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:84:BE:E1:6F:65:F7:CC:6D:B6:96:39:54:2E:F5:BC:FD:2E:03:52
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e39302e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.32.90.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:52:aa:1e:42:8e:05:3a:ad:64:ae:82:67:63:88:92:d2:75:
91:54:40:72:b2:5b:d3:5c:2f:a0:95:c6:2a:da:a4:fc:d9:bb:
5a:82:97:a3:23:54:98:a2:86:31:b5:af:f2:99:68:94:31:5f:
db:a7:00:e8:eb:80:1a:63:06:11:18:74:cd:b6:16:cb:e1:e3:
4e:51:d7:4e:7a:2a:eb:3c:17:79:a7:a1:ae:f1:49:6d:67:5e:
bb:7b:95:ca:7b:b6:a5:2c:0b:5b:29:42:eb:1f:ce:39:7b:5f:
83:91:1a:b1:75:21:0f:4e:45:b7:61:7e:b2:91:05:90:ae:27:
f9:c2:27:bf:a3:97:21:a6:7e:a3:ed:9a:96:01:26:d3:0e:59:
75:ba:5a:b8:eb:45:23:d7:c8:51:c5:33:c8:22:91:8f:c3:d6:
5b:d5:e2:9b:e8:ed:58:a3:d5:72:bb:9d:83:b7:8e:bd:39:4f:
b1:76:00:51:57:47:85:f6:8f:40:8d:30:60:02:d4:d7:69:6c:
35:ca:90:ab:a7:f7:b8:d8:2b:86:03:f1:ca:bd:51:03:e7:d8:
68:af:ac:9c:32:5d:8a:e0:da:fe:55:c0:b4:36:a7:a2:88:bd:
35:e9:be:fd:cd:5e:2f:26:05:fb:f2:62:c2:db:39:ec:01:c5:
0a:c1:70:28
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUQ3AiKBYahrSb30+rUwMAO1oufYYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA2MzAyMTI0MTlaFw0yNjA2MjkyMTI5MTlaMDMxMTAvBgNV
BAMTKEMxODRCRUUxNkY2NUY3Q0M2REI2OTYzOTU0MkVGNUJDRkQyRTAzNTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkjnI+10UEoHHkwFkUHouX+Zq3
IzeHjLe/uxQGj+phlnX9rA/EEiP9ny9GKP/oYEMPs23QkHI+FCDu++hUYBXaMg45
HxZa4CuVwZwL7732el8nOFboii2qptMWZYujOQafTuGd9BANCbrj1Roba9jGP8Za
5y07ip5IIY5jB5WiBAMFo3knZyThVY66xVrxHyHUdjkCGGJHFYfpXvd3YJr3+xVw
c7S3jt45CrdF/X8jHffa3zatJ266ynnEEZQZ9MkhdpmDWSsDIE2yCAkG6rmikh3w
l8mstpus9CXXPiTAMBAqwoQNmaZ8BiTD0hdwd5FKm837GvreKwZpcGEweNTpAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUwYS+4W9l98xttpY5VC71vP0uA1IwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTMyMmUzMzMyMmUzOTMw
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTMyMzIzMzM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
1CBaMA0GCSqGSIb3DQEBCwUAA4IBAQCgUqoeQo4FOq1kroJnY4iS0nWRVEByslvT
XC+glcYq2qT82btagpejI1SYooYxta/ymWiUMV/bpwDo64AaYwYRGHTNthbL4eNO
UddOeirrPBd5p6Gu8UltZ167e5XKe7alLAtbKULrH845e1+DkRqxdSEPTkW3YX6y
kQWQrif5wie/o5chpn6j7ZqWASbTDll1ulq460Uj18hRxTPIIpGPw9Zb1eKb6O1Y
o9Vyu52Dt469OU+xdgBRV0eF9o9AjTBgAtTXaWw1ypCrp/e42CuGA/HKvVED59ho
r6ycMl2K4Nr+VcC0NqeiiL016b79zV4vJgX78mLC2znsAcUKwXAo
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:56:48 2025 by rpki-client