Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38302e302f32342d3234203d3e20323132323338.roa
File: 3231322e33322e38302e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: G/jxXH6A9MUEb29HJBIMVmNyUayaXH+24Yjkyg6i3nQ=
Subject key identifier: CB:E6:C5:4C:6D:E1:8F:81:E7:06:EF:08:91:00:2E:09:7F:67:75:F0
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 473D3295C541E8EFC131C31E68E05FC0443E4205
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38302e302f32342d3234203d3e20323132323338.roa
Signing time: Thu 10 Sep 2026 09:28:40 +0000
ROA not before: Thu 10 Sep 2026 09:23:40 +0000
ROA not after: Thu 09 Sep 2027 09:28:40 +0000
asID: 212238
IP address blocks: 212.32.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:3d:32:95:c5:41:e8:ef:c1:31:c3:1e:68:e0:5f:c0:44:3e:42:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 10 09:23:40 2026 GMT
Not After : Sep 9 09:28:40 2027 GMT
Subject: CN=CBE6C54C6DE18F81E706EF0891002E097F6775F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:81:3a:bc:7b:53:16:29:e4:cc:b3:ad:c7:17:
83:28:a4:71:97:d9:df:81:38:cd:3b:0e:04:0a:ec:
ac:28:de:86:38:b3:3d:37:46:ab:f3:f6:43:b4:0a:
a9:41:3d:e4:89:02:00:7e:8c:2b:a5:09:75:68:49:
44:da:e1:40:b6:5d:87:73:fa:3f:a7:87:07:7d:78:
2c:85:9f:78:fd:0a:c4:57:9b:f7:f7:19:86:18:57:
ec:3b:c5:20:f2:95:d2:62:2d:7e:d5:5a:98:35:30:
45:9d:2d:f9:d9:bf:e7:bc:bd:63:b2:f4:cd:2f:7c:
05:2f:82:4f:72:26:d0:22:4b:ab:be:b3:47:6a:af:
61:d6:31:c3:29:66:48:54:13:38:5f:af:e4:61:60:
87:60:3c:ce:8f:66:3c:66:f2:5e:1f:fe:56:b1:b0:
94:84:2e:40:84:b8:58:4e:f9:c3:8e:d9:6f:32:5a:
65:df:27:09:fb:02:99:e1:dc:fd:9d:01:b4:5f:24:
8c:2f:da:8a:12:39:cd:24:f4:d1:0a:d1:a6:60:07:
44:c2:d0:39:96:e6:06:46:c6:6f:34:93:0d:97:19:
33:ed:72:da:62:16:f1:71:73:5a:3c:a9:f5:fa:36:
e6:16:58:3f:e6:f0:0e:02:21:80:cf:39:aa:a3:75:
aa:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E6:C5:4C:6D:E1:8F:81:E7:06:EF:08:91:00:2E:09:7F:67:75:F0
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38302e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.32.80.0/24
Signature Algorithm: sha256WithRSAEncryption
43:f5:73:0b:1d:81:8c:d4:0c:f5:97:ce:72:ca:a2:d6:bf:b1:
57:87:dd:a1:9b:f9:11:27:4d:02:47:9b:c1:19:76:61:c6:56:
96:aa:6a:72:d2:5b:d7:a6:e9:1d:6d:e2:c8:92:ad:f9:45:a5:
84:90:ea:d3:5a:56:17:d0:23:97:1c:35:b0:b3:b3:7d:05:c8:
79:6d:34:e2:d1:31:a7:e4:c0:1d:cc:07:ad:05:34:78:3a:64:
10:3d:8f:29:7a:01:1e:d6:63:53:71:10:69:11:ef:25:ed:95:
5d:17:40:97:4f:26:19:1a:ce:f6:41:78:2a:04:35:7e:bc:16:
8f:34:79:50:12:4e:a7:71:3d:63:db:d6:66:ca:ff:bd:e1:b5:
f3:a3:9a:b9:bb:01:c6:fb:18:ba:45:da:5d:7f:db:fb:d8:b2:
0b:fb:1d:50:56:bc:58:ea:28:9d:a2:9e:36:c9:2e:cc:62:33:
74:c8:37:47:3e:f7:25:29:24:bc:c1:8c:d8:17:49:f4:24:94:
ca:27:da:35:78:1d:00:d8:5d:70:5c:8a:99:3a:b0:27:69:b1:
03:00:e6:b9:cb:07:68:36:b8:34:ff:71:d2:bc:bd:c8:72:a5:
b1:ed:22:1f:3b:a7:25:b6:b9:c5:b0:fc:bd:ea:73:e2:b2:84:
46:9a:d5:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 15:15:58 2026 by rpki-client