Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e3130322e3130322e302f32342d3234203d3e20383334.roa
File: 3231322e3130322e3130322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: X0nPApiJHcUF30NqPbAHOjtPGFxTV+wjrKt2b/YvZc8=
Subject key identifier: BF:B7:7D:19:D8:96:59:08:E2:01:00:DC:93:64:45:B7:C2:2A:1A:EB
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5E66E1AA8BB4A07F2C9B522C9D0087849DAC4C03
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e3130322e3130322e302f32342d3234203d3e20383334.roa
Signing time: Thu 18 Jun 2026 09:25:22 +0000
ROA not before: Thu 18 Jun 2026 09:20:22 +0000
ROA not after: Thu 17 Jun 2027 09:25:22 +0000
asID: 834
IP address blocks: 212.102.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:66:e1:aa:8b:b4:a0:7f:2c:9b:52:2c:9d:00:87:84:9d:ac:4c:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 18 09:20:22 2026 GMT
Not After : Jun 17 09:25:22 2027 GMT
Subject: CN=BFB77D19D8965908E20100DC936445B7C22A1AEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:61:9c:9c:a5:16:4e:e5:b5:f3:81:b2:f5:10:
ec:1f:a6:84:60:da:e9:2e:a5:0e:b7:ad:26:26:60:
5c:d7:a6:40:6e:ca:b2:a8:1b:fc:ba:73:9a:c2:db:
db:38:37:83:54:99:f8:3a:7f:c7:fa:3d:61:3d:9a:
56:62:de:9d:c4:5f:f1:90:bc:24:23:a1:71:40:df:
67:16:c7:ae:0e:fe:51:07:c3:0e:28:5b:9f:da:de:
f8:68:e5:87:78:6f:44:36:8e:d8:b7:30:de:f4:23:
20:8a:1d:cc:23:a7:59:25:25:70:3f:e8:c3:e9:15:
40:35:d2:03:ca:5e:e0:a1:7e:50:f7:1e:7e:05:76:
52:ae:f8:36:5a:75:bf:8a:73:35:3c:d5:8a:3d:ea:
23:0e:26:63:45:95:11:71:31:31:c7:0f:a6:0c:99:
cb:f8:64:eb:5d:df:2f:1f:6f:e9:f6:1a:67:c3:7d:
7b:de:2e:69:e1:62:27:79:0d:98:17:45:fd:12:02:
b7:5d:4c:5a:19:d8:b4:64:9f:9b:b6:cf:12:5c:e2:
6c:0d:bd:c8:21:a4:b0:5f:fe:66:ae:df:9f:72:9f:
2b:21:e8:c3:3d:26:f5:5b:08:32:1b:39:a7:72:98:
8b:91:bc:a7:1a:02:be:e9:2e:82:14:a3:83:9e:29:
86:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B7:7D:19:D8:96:59:08:E2:01:00:DC:93:64:45:B7:C2:2A:1A:EB
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e3130322e3130322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.102.102.0/24
Signature Algorithm: sha256WithRSAEncryption
37:10:21:6f:b5:d8:98:84:df:ec:e1:38:1c:23:a9:b7:fc:55:
50:2d:8d:26:ab:6c:75:d2:92:ae:a0:1e:c7:80:bf:99:66:5c:
a8:f5:f7:90:99:fc:85:13:89:d6:dd:18:bd:85:03:f4:12:05:
21:4c:a6:44:e0:e7:3e:25:fe:6e:ff:ed:66:5d:43:49:5d:9b:
78:ad:56:ca:6b:d8:ce:77:a5:9c:80:6f:62:8d:4a:5b:fb:8b:
53:7d:94:25:a0:71:2e:63:8d:ae:f3:2e:b9:e8:81:35:ff:28:
01:3d:d8:e6:7c:ae:be:5e:36:ad:ee:6d:57:1f:99:11:cf:90:
4f:f3:42:ff:d2:54:31:14:dd:ca:ae:ea:7c:b2:5a:2c:77:1a:
64:84:8c:43:71:29:9c:b8:38:00:78:bf:78:e4:17:4c:f9:d0:
a9:0f:f5:bd:fd:f1:cc:03:4b:72:b0:11:18:aa:9c:26:fb:e9:
d2:18:31:4c:99:c1:3f:1a:e9:47:37:db:42:56:b6:d8:52:d8:
d9:11:7f:c8:be:2e:1b:e3:c1:dd:8f:3a:7c:97:34:5c:f7:85:
f2:15:9e:9a:3f:f4:0e:a2:33:ae:57:d0:5d:ac:ed:19:bc:e8:
9f:68:f1:cb:8a:ff:d6:31:d7:31:77:c4:1f:5a:00:ba:4c:ca:
3d:76:2c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:56:12 2026 by rpki-client