Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38382e302f32342d3234203d3e20323132323338.roa
File: 3231322e33322e38382e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: 3W6rrGSPTYHuQGAHPMGSn7oIcnUd5mIAczppm2T7YzI=
Subject key identifier: 1C:2F:48:59:8E:06:25:B1:59:F3:E5:CE:22:34:4A:71:B4:2D:39:FC
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6690893C8C0AE7A5B1B8E39D5ADAA1D8C414C5D3
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38382e302f32342d3234203d3e20323132323338.roa
Signing time: Thu 09 Oct 2025 09:07:29 +0000
ROA not before: Thu 09 Oct 2025 09:02:29 +0000
ROA not after: Thu 08 Oct 2026 09:07:29 +0000
asID: 212238
IP address blocks: 212.32.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 00:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:90:89:3c:8c:0a:e7:a5:b1:b8:e3:9d:5a:da:a1:d8:c4:14:c5:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 9 09:02:29 2025 GMT
Not After : Oct 8 09:07:29 2026 GMT
Subject: CN=1C2F48598E0625B159F3E5CE22344A71B42D39FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6a:9b:dc:d7:39:7f:e4:a7:1c:a5:21:a4:6b:
f6:d2:3f:94:8e:56:d7:f4:f9:50:7b:bf:e8:92:81:
33:60:af:06:6f:07:67:9f:ba:0b:a5:9a:11:97:40:
a1:b2:29:de:75:37:b7:9b:12:41:0c:13:ea:c1:95:
c7:c2:60:ba:4e:93:10:bb:bf:bc:50:6b:86:11:4d:
02:c8:de:3e:19:6c:0d:c7:77:aa:2d:e0:83:94:a9:
78:8a:6f:bf:f0:4f:26:7a:cd:57:7e:db:20:16:90:
82:a0:ae:d2:07:98:a2:5b:6a:af:94:8b:7b:27:57:
7e:50:cd:7c:fe:0d:dc:8f:da:7c:55:d3:2f:09:45:
f7:54:23:2c:c1:52:ef:58:41:c4:a8:39:01:f5:60:
88:34:05:a9:eb:5d:69:9f:c6:b7:39:ca:df:4e:28:
d7:bb:a7:93:04:b9:60:34:f7:cd:a5:82:43:30:c2:
ed:97:d9:35:3c:1d:5a:ad:c0:1e:6e:5c:5d:e6:50:
51:0f:e7:9d:f1:57:32:55:8f:42:50:2c:68:96:5b:
0f:8e:16:aa:e0:4a:02:e5:3f:6b:26:d7:20:a9:8d:
47:61:61:24:78:e1:6c:44:bc:4c:73:b3:83:a6:07:
53:f2:e6:b3:3c:b5:89:03:ed:4e:9f:b2:70:a1:00:
8b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:2F:48:59:8E:06:25:B1:59:F3:E5:CE:22:34:4A:71:B4:2D:39:FC
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38382e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.32.88.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:56:7d:31:47:1f:78:f2:2e:fa:04:d1:3b:da:4f:e3:9a:a3:
67:59:83:1f:2d:3b:f4:d6:21:a1:b1:de:b2:0b:d2:6c:09:e7:
20:bc:c1:50:cf:f4:24:23:5d:ee:5a:e7:0f:28:db:6e:6e:0a:
3a:5f:f5:ed:f3:73:4d:25:59:0c:b2:9d:77:c6:5a:c7:c0:08:
b8:07:0b:fa:92:ea:fb:34:9c:76:e3:26:01:07:c6:03:a5:51:
03:6c:a5:45:db:39:f8:78:02:6f:32:2c:31:87:d2:bb:be:5d:
c9:73:6e:32:e5:88:e7:d2:c5:bf:77:da:39:17:fe:81:b8:85:
76:d3:e1:3a:a6:65:d8:5e:4e:ba:ec:4f:dc:e9:9b:57:37:d0:
33:ef:4c:9d:6c:d9:37:1e:ad:36:bf:4f:b1:c0:02:cb:65:07:
04:5f:4c:c8:3b:e5:3f:00:9c:6b:f1:59:c8:72:b3:5a:17:52:
ec:93:34:8c:12:73:1a:0f:e8:65:5b:47:35:4d:28:38:13:1b:
e6:37:c4:7d:a0:de:bd:89:50:c9:9a:c9:3b:b9:6d:90:12:3d:
cb:a8:02:78:96:53:e3:be:43:58:17:b2:0b:91:05:76:27:0a:
f1:d2:eb:4f:bd:4f:ed:98:1a:88:26:e7:75:13:02:22:d6:7e:
a0:22:a7:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:29:08 2025 by rpki-client