Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e34372e37322e302f32312d3332203d3e203531313637.roa
File: 3231322e34372e37322e302f32312d3332203d3e203531313637.roa (raw, json)
Hash identifier: CABeVga8eOoYlAaDz5INUcmiImGfOoPt04xriqXRL7o=
Subject key identifier: DE:45:74:13:47:F8:FC:81:0A:0D:40:08:29:B9:91:0A:D9:2B:6D:52
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 391075D1D9DFBAC009F6844C4048C202BA36FD05
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e34372e37322e302f32312d3332203d3e203531313637.roa
Signing time: Tue 26 Aug 2025 08:47:24 +0000
ROA not before: Tue 26 Aug 2025 08:42:24 +0000
ROA not after: Tue 25 Aug 2026 08:47:24 +0000
asID: 51167
IP address blocks: 212.47.72.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Sep 2025 16:59:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:10:75:d1:d9:df:ba:c0:09:f6:84:4c:40:48:c2:02:ba:36:fd:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 26 08:42:24 2025 GMT
Not After : Aug 25 08:47:24 2026 GMT
Subject: CN=DE45741347F8FC810A0D400829B9910AD92B6D52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b2:ec:8c:65:2b:aa:a8:55:1e:b9:50:9e:7b:
11:ea:97:fc:23:00:06:3f:0b:ac:15:f3:43:0a:fa:
b5:e9:7f:b6:d3:09:55:52:9a:02:07:82:e3:1d:db:
ce:d2:89:df:7e:07:50:87:9d:05:f8:b0:ad:77:37:
cf:85:d3:66:f0:f1:e1:ab:8c:d9:9f:21:4b:87:79:
b6:36:6e:3c:7c:a1:a6:07:4f:31:95:ad:a3:7a:36:
d9:0f:96:67:00:74:4a:e7:26:2f:87:f2:0f:6b:23:
17:16:2e:c2:f1:cd:cd:54:8e:f5:81:e5:32:06:77:
3c:44:35:85:3c:f2:bf:75:81:8e:6d:2f:e8:98:0c:
80:97:cb:ab:c6:4f:5c:5b:ae:3a:28:38:37:e9:f0:
0c:9a:13:d0:38:54:e6:35:82:b6:19:e4:93:88:3e:
48:4e:0c:b2:3f:88:f2:b1:54:0c:8d:e8:82:83:1f:
de:1a:32:1a:ce:7d:46:ab:03:2c:ff:b6:68:f1:67:
83:f8:4b:b7:47:02:47:c8:d1:96:3e:5c:4b:16:31:
07:08:8f:28:c6:21:89:06:0a:23:91:ba:fd:58:12:
6e:df:b5:f8:9f:d2:b2:36:60:42:44:6b:e1:61:e7:
2d:7f:f2:26:90:1d:e6:ff:4f:64:c7:64:0e:c3:2a:
77:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:45:74:13:47:F8:FC:81:0A:0D:40:08:29:B9:91:0A:D9:2B:6D:52
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e34372e37322e302f32312d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.47.72.0/21
Signature Algorithm: sha256WithRSAEncryption
5b:aa:82:6d:1b:4a:4a:aa:bb:ee:e3:62:c8:5d:79:be:b1:88:
5a:37:2c:d9:d4:17:46:26:bd:a1:33:3c:0b:2b:df:5f:e3:90:
4b:67:75:33:6e:9b:82:0e:3c:ee:d1:66:ab:e7:f0:b9:af:f9:
c6:44:fc:bf:76:7c:b9:33:cc:97:1e:c5:93:48:18:06:0b:a0:
c7:7d:99:e1:c8:56:59:55:59:f9:db:09:8e:e3:ac:f9:c0:28:
fd:66:00:a3:58:be:2c:80:aa:14:b2:e8:d6:3c:65:d8:62:3e:
d3:f1:9e:62:43:26:01:88:22:2a:57:71:f1:28:0a:e9:cd:a0:
5b:33:a1:92:a5:02:78:97:0e:cb:aa:41:11:b0:41:cc:1d:41:
30:99:6e:ad:ed:34:a3:a2:21:8e:34:55:f5:08:e5:8b:70:c3:
b5:56:e8:1e:83:d6:a2:9f:2c:fe:bf:da:91:03:eb:00:28:28:
2a:79:f1:0b:d7:b3:a2:5a:95:a0:24:e6:ad:f0:61:c1:24:6d:
a4:98:8c:34:8f:69:83:ab:8b:ce:ba:5a:50:36:98:78:81:65:
da:71:2b:21:a4:52:1d:d0:5d:3e:e3:3a:e8:b3:55:48:98:3c:
3a:6b:73:07:05:be:92:43:39:92:e2:8e:6b:6d:11:d8:29:de:
19:fc:5d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 03:30:12 2025 by rpki-client