Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e39312e302f32342d3234203d3e20323132323338.roa
File: 3231322e33322e39312e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: JRcGZgCEYjvg4UvGE2SWS0wfxXmKx+nMIYKQ+V9CiKM=
Subject key identifier: C3:B2:76:B4:5C:42:0D:69:70:52:F7:D2:A0:CA:23:3D:45:4C:8E:85
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 38E4D468D225D26BE93C80A5F8759AD8C0AA1857
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e39312e302f32342d3234203d3e20323132323338.roa
Signing time: Thu 10 Sep 2026 09:28:43 +0000
ROA not before: Thu 10 Sep 2026 09:23:43 +0000
ROA not after: Thu 09 Sep 2027 09:28:43 +0000
asID: 212238
IP address blocks: 212.32.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:e4:d4:68:d2:25:d2:6b:e9:3c:80:a5:f8:75:9a:d8:c0:aa:18:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 10 09:23:43 2026 GMT
Not After : Sep 9 09:28:43 2027 GMT
Subject: CN=C3B276B45C420D697052F7D2A0CA233D454C8E85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:93:22:3d:94:14:d0:5a:1b:30:be:75:92:a7:
be:e7:ec:51:bc:11:68:07:e8:7f:29:8a:8f:1e:17:
05:4c:1e:60:58:51:e4:5b:83:cc:a0:50:b7:ee:c1:
e2:0a:d5:5d:53:1d:44:44:32:9e:17:1a:ef:e1:ca:
cb:cf:7b:17:14:15:62:0c:42:1c:86:c8:93:f1:0d:
3a:a2:b3:9a:a3:88:bb:29:9f:92:6a:0d:5e:d5:6d:
d9:85:30:7e:a8:db:86:d1:ae:66:f8:b3:06:29:b7:
41:c6:57:bc:b4:4b:82:df:dd:2b:2a:b9:f8:64:bc:
85:17:b8:85:f1:da:6f:db:b1:9b:0c:64:d2:a0:c8:
4b:6e:d1:44:79:99:8b:f1:44:b6:57:33:b4:62:6d:
21:12:07:90:5c:86:a7:06:ba:e9:1a:d4:7e:d2:34:
96:b7:b7:ed:a0:bf:fd:ed:c3:10:98:c9:f7:45:3e:
b1:96:c8:e5:b1:c1:d5:9e:31:fe:3c:dd:19:e5:9e:
b1:97:4c:71:dd:e0:5d:64:93:02:cc:be:2d:38:fc:
5a:7d:11:e0:8a:ae:dd:61:89:13:e2:49:1e:73:dd:
8c:ca:55:e2:e0:32:1d:c6:6e:a9:e8:4c:07:32:85:
e8:56:e6:2a:61:45:73:88:18:72:bd:c1:0a:01:f3:
8f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:B2:76:B4:5C:42:0D:69:70:52:F7:D2:A0:CA:23:3D:45:4C:8E:85
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e39312e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.32.91.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:1d:c9:27:69:c6:6b:39:04:04:b7:c7:25:95:08:18:95:31:
6a:6e:54:6c:75:23:48:40:fc:3a:6d:42:a9:a3:95:b6:5d:96:
92:9c:29:e0:f6:33:a1:1e:1a:b9:63:51:2e:ab:1d:01:21:35:
91:f7:4a:19:cc:87:8a:01:a8:2d:2e:dd:1f:98:46:b7:0c:7f:
5b:a2:58:bf:f5:bd:5b:af:0f:7d:87:54:38:21:49:1f:f6:90:
9d:21:db:1a:6f:e0:10:f6:ee:27:b8:6d:09:d3:85:a9:89:c3:
d8:2f:2a:5b:d9:4b:4f:12:2d:df:f0:fb:ed:6d:07:83:88:4b:
0e:a0:23:88:79:3e:90:36:c9:58:f3:0d:99:4a:a5:57:ce:f7:
30:26:3f:ab:d3:8b:1b:0d:2b:eb:90:af:14:83:b9:59:3c:f4:
e5:4a:4b:e4:aa:84:3c:48:da:e3:20:61:0a:1a:59:ae:33:63:
63:4e:28:54:f1:b3:3a:1c:ec:7c:6c:0a:73:19:b0:8e:2a:60:
bc:ac:6d:61:9f:c3:b5:ad:70:f1:f9:65:d5:5c:e8:bb:fd:ac:
b8:bd:c4:63:61:80:de:72:15:88:bf:0f:07:af:f2:a7:9f:f9:
b3:07:e2:96:a5:11:10:4a:7e:75:be:f6:9c:ef:80:58:ad:5d:
c5:30:95:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 19:06:09 2026 by rpki-client