Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38322e302f32342d3234203d3e20323132323338.roa
File: 3231322e33322e38322e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: 2BcuBnXoVgXWmn7imsOutIZwqOCe4CRmHUhQovu0xcI=
Subject key identifier: 23:9E:C5:14:32:20:50:2A:B2:F5:A4:53:D9:35:E8:41:A5:22:32:E0
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 551277D408C6659787C17E9882B1EDF30B4B2A8F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38322e302f32342d3234203d3e20323132323338.roa
Signing time: Thu 10 Sep 2026 09:28:43 +0000
ROA not before: Thu 10 Sep 2026 09:23:43 +0000
ROA not after: Thu 09 Sep 2027 09:28:43 +0000
asID: 212238
IP address blocks: 212.32.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:12:77:d4:08:c6:65:97:87:c1:7e:98:82:b1:ed:f3:0b:4b:2a:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 10 09:23:43 2026 GMT
Not After : Sep 9 09:28:43 2027 GMT
Subject: CN=239EC5143220502AB2F5A453D935E841A52232E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:42:a5:e7:0c:ff:37:0a:cd:e3:39:f8:36:5d:
f3:a1:45:41:b0:9e:89:f2:58:70:83:1c:f7:39:52:
3d:35:93:06:6e:d8:f0:14:99:cb:6b:44:ca:36:ff:
3c:d2:87:e4:bc:7b:ef:e7:3c:f4:a6:d2:0c:c6:68:
27:59:b6:4e:3c:35:d2:41:1d:1d:28:e3:d3:d1:c9:
36:77:6c:44:6e:a2:b2:cf:7a:94:ca:9f:aa:9d:77:
c7:1f:e6:ff:a3:38:e1:d3:1c:08:85:0b:38:6f:5d:
dd:f9:31:67:8a:be:bb:61:22:81:02:fa:c7:c8:f9:
63:b4:3e:33:ca:62:cd:f9:75:2f:76:ca:eb:b3:33:
f3:72:f8:8f:4c:7e:00:a1:49:f6:03:1b:d7:59:3a:
7d:66:ca:a1:80:67:20:09:e8:f5:00:13:00:1b:06:
80:84:d6:59:e2:24:32:e8:ca:05:28:f9:e3:b3:de:
2f:61:9d:6e:32:f7:66:14:7b:20:ae:56:6d:eb:c4:
d1:fd:50:77:4a:25:03:93:b6:c8:df:77:34:e2:d6:
3f:87:94:25:c3:84:34:0f:28:66:cf:45:0a:3c:0e:
b9:31:9d:85:d9:e4:f1:93:c2:dd:f3:40:27:f5:13:
b3:b4:78:32:62:90:8d:3c:29:88:5a:89:c0:3d:97:
85:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:9E:C5:14:32:20:50:2A:B2:F5:A4:53:D9:35:E8:41:A5:22:32:E0
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38322e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.32.82.0/24
Signature Algorithm: sha256WithRSAEncryption
28:3b:aa:6f:d0:bc:23:04:8e:c5:e9:7c:78:34:aa:21:f6:17:
3c:1c:f3:a0:ef:a2:6b:1c:d2:e0:e4:90:9d:2a:ee:ac:9a:27:
05:81:50:2a:d1:36:32:af:25:f0:d9:3c:d6:fb:f2:3a:a0:be:
73:e9:32:57:c7:70:1a:27:96:d2:9f:e8:6b:97:2d:f5:f0:62:
ef:87:63:80:94:1e:ec:7a:ea:17:b8:c6:4c:9f:15:57:d4:98:
d9:e3:c3:e5:f7:be:71:e4:dc:1a:63:90:9d:73:c8:3e:cf:e6:
51:ea:8f:c5:dd:ff:0a:43:61:b8:ab:f3:50:67:04:f9:9b:ba:
58:b9:27:0a:3b:e7:8e:22:61:f3:02:85:67:ab:db:ec:72:77:
65:31:ca:a8:6d:ac:a9:07:f5:03:fd:35:2b:5c:b8:4e:8a:de:
26:80:e2:8a:e5:5e:01:cc:a2:bc:e0:a3:01:fa:47:3e:0f:5d:
7c:c1:c9:8b:68:25:c5:fd:fe:d1:52:1f:7a:a4:71:33:93:77:
3d:86:d0:ae:4e:24:6c:95:1f:f9:be:96:3c:58:c3:50:b9:98:
71:32:cf:00:04:7a:44:4d:be:e4:ab:62:9e:f0:55:df:93:d2:
ff:52:f9:d8:45:99:3f:2e:ef:ea:76:7b:82:5b:5e:8b:d0:af:
86:38:bd:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 18:08:52 2026 by rpki-client