Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e31352e38362e302f32342d3234203d3e20323132323338.roa
File: 3231322e31352e38362e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: bryLBtZ/0EbWiMNQY+YYdfju04dMwV6WWlnYbIvzneA=
Subject key identifier: 0B:85:1A:E2:63:12:34:69:50:BC:7E:B2:FC:D9:F4:CA:D7:31:90:01
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0420A14E528D620C4685B03BFEE9B9DE8E846451
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e31352e38362e302f32342d3234203d3e20323132323338.roa
Signing time: Thu 10 Sep 2026 09:28:44 +0000
ROA not before: Thu 10 Sep 2026 09:23:44 +0000
ROA not after: Thu 09 Sep 2027 09:28:44 +0000
asID: 212238
IP address blocks: 212.15.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:20:a1:4e:52:8d:62:0c:46:85:b0:3b:fe:e9:b9:de:8e:84:64:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 10 09:23:44 2026 GMT
Not After : Sep 9 09:28:44 2027 GMT
Subject: CN=0B851AE26312346950BC7EB2FCD9F4CAD7319001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5b:d7:83:20:c1:70:36:eb:d3:61:bd:33:b1:
7b:63:d3:89:f5:4e:9f:d4:89:36:88:b3:d7:6a:73:
3d:c3:6d:f7:5d:d9:bd:92:03:1c:5f:a1:df:0b:7f:
96:8e:2b:6a:d8:cd:33:9e:69:34:90:a1:ad:f8:a5:
aa:c5:30:65:15:4b:d2:de:d0:28:bd:97:b1:1a:a7:
33:e5:b7:4b:02:ff:b1:97:79:2d:e0:a4:5d:34:bc:
4e:ed:09:37:b2:2d:5c:75:f6:37:d4:47:d2:41:54:
77:87:68:b8:17:0e:35:63:b0:e3:9f:0b:c7:f5:c4:
13:0b:0f:13:32:80:37:28:5d:6a:38:33:2c:e5:49:
54:5f:3f:05:62:11:d5:78:6d:13:5a:83:78:85:9a:
f6:30:99:2d:32:60:f2:8f:99:33:f4:5f:98:17:0f:
6f:2c:e4:63:47:0f:67:f9:b4:8a:bf:ef:b9:cd:25:
5f:be:fe:d2:bb:07:26:36:9f:5d:68:d5:8a:17:69:
2b:dc:91:cb:09:45:eb:c3:68:6f:9a:bb:d4:4b:b5:
4e:91:f8:d5:71:09:37:dd:21:59:c3:c0:46:db:87:
d2:4f:11:e5:e9:1b:47:55:15:90:a7:2f:50:ac:00:
21:0c:5f:d9:a2:e7:5c:da:c8:b7:97:3f:bd:0f:b9:
1b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:85:1A:E2:63:12:34:69:50:BC:7E:B2:FC:D9:F4:CA:D7:31:90:01
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e31352e38362e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.15.86.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:8e:d4:75:f6:6a:f5:ee:44:15:d5:42:3a:db:e1:9d:8b:11:
f2:2c:77:33:dd:15:7f:2a:ea:8c:13:90:99:cc:0e:09:58:e2:
35:34:cc:99:b1:bf:71:7c:09:0c:bf:6a:5c:63:3d:b5:85:f6:
97:ee:71:bd:c0:9c:5c:90:f2:11:02:68:c7:9a:3f:aa:5e:3f:
d1:30:3a:64:ff:96:58:72:74:19:d3:ff:71:e7:22:68:04:44:
fa:52:2c:ab:b8:1a:0c:78:78:7e:3d:2a:97:21:02:c5:5d:38:
f7:f5:c4:48:07:98:fb:8d:11:33:bd:c2:5a:5e:59:bc:25:c3:
6e:61:7d:95:44:86:af:1e:82:fc:7e:ce:0f:9c:60:91:0b:47:
37:02:0a:8b:b3:ec:8a:b2:dd:55:78:c7:2d:5b:3a:65:31:f7:
96:f4:8a:14:88:5c:c4:8f:b5:c7:d2:1b:02:f4:2d:32:a6:01:
d8:80:33:4c:62:df:d2:ca:ab:d3:9d:d7:72:6d:ce:24:8e:39:
16:ea:af:9e:41:e4:ae:cc:f9:20:98:85:67:65:7d:d6:8a:55:
0e:1b:3f:72:bb:2b:c9:08:26:53:93:42:7b:73:87:55:3e:20:
ab:dc:ae:e8:62:ae:da:55:35:d7:68:44:10:5f:0f:93:3f:41:
76:bd:0a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 19:05:40 2026 by rpki-client