Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e39352e302f32342d3234203d3e20323132323338.roa
File: 3231322e33322e39352e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: qMdO1k/A4cBQbD+2H9MX1+Xmxy97gHt9aTz9qYKr/1A=
Subject key identifier: BF:23:EC:FB:56:89:75:1D:B8:7D:1C:71:08:3C:77:E2:23:B3:D2:C0
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 54502650EA9D5C9A107BC6234DF17A38103DE5B9
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e39352e302f32342d3234203d3e20323132323338.roa
Signing time: Thu 09 Jul 2026 08:26:09 +0000
ROA not before: Thu 09 Jul 2026 08:21:09 +0000
ROA not after: Thu 08 Jul 2027 08:26:09 +0000
asID: 212238
IP address blocks: 212.32.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:50:26:50:ea:9d:5c:9a:10:7b:c6:23:4d:f1:7a:38:10:3d:e5:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 9 08:21:09 2026 GMT
Not After : Jul 8 08:26:09 2027 GMT
Subject: CN=BF23ECFB5689751DB87D1C71083C77E223B3D2C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:20:42:46:a2:4e:9f:d4:31:68:fa:a1:e6:f4:
93:36:d5:7b:1e:50:ff:ba:10:60:82:57:1e:6e:d9:
c9:c9:5c:20:04:ad:a1:46:ee:5a:cd:8b:e1:a2:b0:
fb:12:2e:7c:be:cd:f7:a5:76:ea:4b:8a:c6:ca:ae:
bc:3d:ce:31:7e:de:83:6e:09:02:0f:17:a3:1d:41:
6e:bf:3e:78:73:6d:e5:e0:be:5f:e9:4f:46:91:da:
2b:84:c3:1e:65:72:ff:a6:1a:a0:1e:3c:22:0c:74:
5c:8f:12:69:1e:ec:76:97:89:9f:86:d1:88:70:92:
b5:19:e2:4a:31:e1:ec:83:65:29:1c:45:0f:d0:84:
3d:18:4a:f6:bd:80:89:5e:f9:4f:62:8e:84:fc:9b:
91:f4:da:c3:7e:2b:fd:ee:43:60:da:b3:28:1e:9f:
80:76:af:3c:fe:a7:0c:e4:97:d0:c9:69:61:64:49:
c5:14:de:09:b2:7b:c4:5c:bf:e7:ab:61:bd:2c:cb:
54:26:65:34:02:b4:a8:ca:2a:42:e8:8c:15:3c:44:
37:10:92:c1:99:51:c2:2c:e2:36:7d:8e:7e:af:42:
a6:6c:d1:1e:0a:99:b1:a4:89:25:35:ef:76:e1:56:
7b:64:a3:ac:af:28:f2:30:b7:85:ba:d2:0d:ca:6c:
e9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:23:EC:FB:56:89:75:1D:B8:7D:1C:71:08:3C:77:E2:23:B3:D2:C0
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e39352e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.32.95.0/24
Signature Algorithm: sha256WithRSAEncryption
38:88:64:67:fb:c6:90:fb:2c:4e:14:e6:57:76:37:b4:f7:9c:
63:b1:8f:10:8e:3c:67:fe:a6:94:1c:48:4d:a3:04:a0:e2:ee:
17:c6:d9:1c:0f:c8:75:97:66:3a:bb:df:9d:1c:11:ba:b3:71:
d7:61:c2:d5:ad:af:01:6e:d6:5f:87:f9:e7:f9:29:a3:22:74:
03:02:54:2a:7e:f4:50:da:bb:e0:1f:8d:1d:f1:6e:da:ca:20:
e9:93:ba:b7:46:a5:b0:af:32:75:65:5e:f7:bc:02:68:c6:81:
f4:0b:3a:46:61:f4:d1:11:16:c7:66:d4:21:0b:b1:90:ad:e3:
67:fa:ea:cd:52:e3:0a:15:48:f6:39:dc:32:98:1c:af:fb:f1:
91:f5:fc:c5:52:f5:68:89:2f:93:e5:b8:c5:f4:88:1f:7c:37:
28:f0:5f:d8:4e:21:49:ba:83:be:f5:da:30:97:52:e9:5b:36:
06:b7:ef:ba:0c:91:82:37:b3:15:7e:ad:d7:0b:34:59:dd:b5:
38:19:64:70:0b:af:8b:d1:42:e4:2c:5d:8e:c8:6e:7c:ef:10:
ca:e0:dd:ca:63:92:ff:3d:f5:b4:bf:4d:98:df:f6:a0:5e:4d:
6b:4d:38:62:0b:f7:d2:ca:c1:ba:33:e7:fb:09:54:a5:2b:f0:
d2:86:f5:fc
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUVFAmUOqdXJoQe8YjTfF6OBA95bkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA3MDkwODIxMDlaFw0yNzA3MDgwODI2MDlaMDMxMTAvBgNV
BAMTKEJGMjNFQ0ZCNTY4OTc1MURCODdEMUM3MTA4M0M3N0UyMjNCM0QyQzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD8IEJGok6f1DFo+qHm9JM21Xse
UP+6EGCCVx5u2cnJXCAEraFG7lrNi+GisPsSLny+zfeldupLisbKrrw9zjF+3oNu
CQIPF6MdQW6/PnhzbeXgvl/pT0aR2iuEwx5lcv+mGqAePCIMdFyPEmke7HaXiZ+G
0YhwkrUZ4kox4eyDZSkcRQ/QhD0YSva9gIle+U9ijoT8m5H02sN+K/3uQ2Dasyge
n4B2rzz+pwzkl9DJaWFkScUU3gmye8Rcv+erYb0sy1QmZTQCtKjKKkLojBU8RDcQ
ksGZUcIs4jZ9jn6vQqZs0R4KmbGkiSU173bhVntko6yvKPIwt4W60g3KbOnLAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUvyPs+1aJdR24fRxxCDx34iOz0sAwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTMyMmUzMzMyMmUzOTM1
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTMyMzIzMzM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
1CBfMA0GCSqGSIb3DQEBCwUAA4IBAQA4iGRn+8aQ+yxOFOZXdje095xjsY8Qjjxn
/qaUHEhNowSg4u4XxtkcD8h1l2Y6u9+dHBG6s3HXYcLVra8BbtZfh/nn+SmjInQD
AlQqfvRQ2rvgH40d8W7ayiDpk7q3RqWwrzJ1ZV73vAJoxoH0CzpGYfTRERbHZtQh
C7GQreNn+urNUuMKFUj2OdwymByv+/GR9fzFUvVoiS+T5bjF9IgffDco8F/YTiFJ
uoO+9dowl1LpWzYGt++6DJGCN7MVfq3XCzRZ3bU4GWRwC6+L0ULkLF2OyG587xDK
4N3KY5L/PfW0v02Y3/agXk1rTThiC/fSysG6M+f7CVSlK/DShvX8
-----END CERTIFICATE-----
Generated at Mon Jul 20 23:56:31 2026 by rpki-client