Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e31352e38362e302f32342d3234203d3e20323132323338.roa
File: 3231322e31352e38362e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: XADdM8bTBvOxmyUSlh0RINUpmguNm19cCQY+Y22Kp9s=
Subject key identifier: 3E:1A:8F:5F:6F:3B:B5:9B:23:1C:E4:CA:28:06:65:25:4F:A0:E1:50
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 159E81B827ED18989456839ED5CFD994A1D40622
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e31352e38362e302f32342d3234203d3e20323132323338.roa
Signing time: Thu 09 Oct 2025 09:07:20 +0000
ROA not before: Thu 09 Oct 2025 09:02:20 +0000
ROA not after: Thu 08 Oct 2026 09:07:20 +0000
asID: 212238
IP address blocks: 212.15.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 00:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:9e:81:b8:27:ed:18:98:94:56:83:9e:d5:cf:d9:94:a1:d4:06:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 9 09:02:20 2025 GMT
Not After : Oct 8 09:07:20 2026 GMT
Subject: CN=3E1A8F5F6F3BB59B231CE4CA280665254FA0E150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:39:03:0c:8d:12:c9:8c:21:0a:bd:31:56:3b:
66:75:e9:e7:d9:45:6b:50:0b:4c:9a:11:51:ac:72:
1f:15:38:5a:f8:f9:0a:31:8f:aa:52:7a:93:05:ff:
a2:34:05:1f:55:e4:4d:8e:f2:55:98:dc:3e:29:eb:
25:a9:9f:9b:b2:eb:f1:0c:7b:18:ee:a0:11:9c:78:
70:4d:59:0a:28:9f:87:43:1e:97:a3:eb:de:dc:a1:
0d:82:1d:21:11:11:27:a8:7e:8a:9c:ad:09:0c:e6:
87:05:38:35:19:b3:6b:6a:0b:f0:ce:31:ff:c9:54:
5e:1e:26:ac:bb:49:28:ae:36:cc:41:8d:5b:85:ef:
0f:27:42:c2:5e:cf:38:9c:4c:6d:50:a2:b4:0d:48:
6e:92:33:17:a5:15:09:64:ea:5b:d9:84:a6:ce:52:
63:62:d9:2f:8f:98:c6:72:51:6b:a1:1c:42:96:2f:
dc:22:47:3f:15:5a:42:f8:26:74:07:43:6f:cc:e2:
07:b9:49:ae:77:61:17:31:48:9c:88:50:ac:67:5b:
81:d5:a7:ef:96:15:15:2f:a5:c1:59:12:d0:e7:88:
ed:80:f0:90:b1:3d:b6:9f:b4:7b:a5:75:99:eb:1f:
58:61:ff:d7:8d:b7:1f:d7:85:21:d6:ba:db:dd:f9:
02:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:1A:8F:5F:6F:3B:B5:9B:23:1C:E4:CA:28:06:65:25:4F:A0:E1:50
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e31352e38362e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.15.86.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:75:8d:6e:89:e2:e0:09:a6:48:7e:d9:93:69:63:0a:30:b3:
19:75:cb:32:b8:b9:de:c4:17:79:72:58:0b:77:b7:db:e8:7f:
c2:7d:53:12:eb:26:2a:88:26:1a:84:d8:41:9e:8f:6d:4f:c1:
7b:82:ba:01:15:26:9d:fe:03:ba:15:c1:c6:a3:36:a2:51:4b:
8a:a5:00:0a:cf:5f:7c:75:70:a5:79:68:70:26:b7:1d:63:23:
7b:a3:47:3d:38:64:b3:89:14:42:35:cf:cd:24:3d:05:d1:0f:
0d:44:4e:91:92:ff:74:ca:c3:18:c5:b3:53:d4:29:2e:88:c2:
c7:24:ae:78:6b:10:93:68:53:3a:62:21:0b:4e:b9:2c:38:9c:
e5:97:83:c9:e2:c4:b0:00:d1:c8:00:27:ed:9c:7d:e8:76:73:
4d:de:27:88:aa:47:41:b8:d7:5c:6b:96:cc:9f:60:ca:3d:11:
c0:ca:20:2b:b1:e9:3e:f6:36:60:43:f0:30:8b:d9:a3:80:a4:
78:58:95:ba:d7:be:6f:0e:3d:dc:34:2c:be:c3:52:d5:43:d3:
34:1b:7e:6b:5e:99:03:24:e6:a8:15:5c:62:63:74:f8:61:c1:
02:42:00:03:b2:03:3a:38:60:14:02:27:2a:97:5a:45:02:76:
b7:d1:b1:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:29:09 2025 by rpki-client