Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e34372e36342e302f32312d3332203d3e203531313637.roa
File: 3231322e34372e36342e302f32312d3332203d3e203531313637.roa (raw, json)
Hash identifier: +ex5P9biQ9SNDFfPW9DFRubqu23srHJPa/MhREx1tjA=
Subject key identifier: 88:77:E5:43:45:EC:76:79:9E:D8:4C:83:91:C0:EB:A4:85:FD:B4:9D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 29D0346A362A44D838F75AE4394AC268FEFEBB99
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e34372e36342e302f32312d3332203d3e203531313637.roa
Signing time: Tue 26 Aug 2025 08:47:24 +0000
ROA not before: Tue 26 Aug 2025 08:42:24 +0000
ROA not after: Tue 25 Aug 2026 08:47:24 +0000
asID: 51167
IP address blocks: 212.47.64.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Sep 2025 16:59:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:d0:34:6a:36:2a:44:d8:38:f7:5a:e4:39:4a:c2:68:fe:fe:bb:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 26 08:42:24 2025 GMT
Not After : Aug 25 08:47:24 2026 GMT
Subject: CN=8877E54345EC76799ED84C8391C0EBA485FDB49D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:75:28:3a:0f:a4:bf:52:03:45:23:73:fd:ca:
e1:a9:ac:f8:d2:c8:b9:79:d6:1e:7c:44:30:6b:5e:
3f:d3:48:35:82:3a:22:f7:ff:86:d7:0e:66:c1:65:
15:d2:5b:aa:59:56:db:8b:71:3e:51:f0:93:b2:a5:
dd:ca:87:86:8a:81:70:5f:ee:da:90:3f:82:31:ac:
53:9b:60:f7:c6:ff:da:df:d0:ad:3d:33:5f:51:11:
62:c1:1f:bc:b4:a3:82:ab:f0:ef:f8:04:d2:17:d5:
43:02:7a:bc:4c:ae:01:03:a0:f6:a0:83:88:c7:6b:
ec:e3:b9:61:6b:e4:c0:3b:17:1f:07:f0:ae:f9:e5:
ea:c3:b7:02:d1:17:88:07:bc:22:18:79:93:51:f6:
3b:59:0f:c3:07:e9:ed:d8:49:60:c0:c0:a1:dd:55:
4e:2e:c4:e4:cc:4c:0c:51:1f:8e:dc:b2:fe:86:c3:
41:f2:eb:95:0e:22:cb:ad:14:9e:88:1c:de:94:11:
07:e4:f3:b5:4f:b1:3d:52:1f:5f:2e:82:81:f2:67:
a6:b4:34:5d:51:7d:83:ec:d1:26:3c:49:4f:19:1e:
3c:72:9c:b2:f0:fe:18:ec:4d:05:6d:e0:f4:ec:d2:
0f:f4:e1:28:b8:02:34:b0:9c:dd:4e:e9:0b:12:07:
d3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:77:E5:43:45:EC:76:79:9E:D8:4C:83:91:C0:EB:A4:85:FD:B4:9D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e34372e36342e302f32312d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.47.64.0/21
Signature Algorithm: sha256WithRSAEncryption
1f:66:48:75:55:69:d3:6b:2d:18:8d:c6:c0:13:11:65:60:0a:
99:2f:36:06:b9:8a:69:5b:00:33:da:6f:2f:fb:4f:a6:e0:55:
87:92:23:d8:f1:c8:77:66:3d:b1:25:2a:51:41:fb:cd:5d:d5:
de:10:1e:13:cd:87:81:fa:f3:fa:25:65:9f:34:24:ce:ba:83:
1f:06:b0:b6:f4:13:a8:93:4f:2d:a4:0b:3f:36:bb:9e:7e:c0:
b3:5c:32:17:06:c5:8f:a2:7d:cf:67:c6:c9:e5:a9:46:a9:dd:
46:4a:01:cd:6e:05:f0:36:c8:ed:92:8d:06:c4:12:d6:61:32:
c8:2a:7f:93:d6:b1:c6:ab:29:02:0d:9d:9f:db:98:9b:db:bb:
a8:67:51:7f:2c:b1:78:84:30:cc:bc:7e:53:8a:9e:37:fd:72:
41:28:04:09:9a:21:6d:cb:b4:49:28:89:fd:b1:3f:9d:a3:bc:
b4:1a:fb:4e:f9:d3:f6:cc:8c:8e:1f:2e:70:14:ed:3c:f1:fd:
7b:7c:23:fe:bc:ab:0a:09:05:f5:b7:c3:38:dc:ca:d0:aa:05:
85:66:3a:db:2c:33:c4:90:c6:d6:5f:bd:29:f8:62:5c:2b:3e:
d6:4b:f5:2a:b8:31:1c:60:4f:5f:83:9a:ca:c4:f7:78:07:cd:
4d:2f:f4:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 03:29:04 2025 by rpki-client