Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e39302e3132322e302f32342d3234203d3e20313336373837.roa
File: 3231322e39302e3132322e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: clrNbsp4UHyiM1s6WofCVlmOHVY62AyaegKfAmfSNxg=
Subject key identifier: 1D:D2:5C:1F:AF:4B:13:84:49:73:03:AB:C7:C3:9C:D4:2B:76:55:B6
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2D449049AFAD2722FC8E67CC3D02393FC01E8BE9
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e39302e3132322e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 18 Oct 2026 19:29:52 +0000
ROA not before: Sun 18 Oct 2026 19:24:52 +0000
ROA not after: Sun 17 Oct 2027 19:29:52 +0000
asID: 136787
IP address blocks: 212.90.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 15:04:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:44:90:49:af:ad:27:22:fc:8e:67:cc:3d:02:39:3f:c0:1e:8b:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 18 19:24:52 2026 GMT
Not After : Oct 17 19:29:52 2027 GMT
Subject: CN=1DD25C1FAF4B1384497303ABC7C39CD42B7655B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1b:e2:12:84:bb:83:06:5c:f7:62:7b:e0:eb:
d1:44:f9:79:c0:5a:83:a7:62:81:e1:ad:7a:9c:a1:
a0:88:27:4b:d7:bd:f9:db:d0:12:c5:cf:e6:c8:c6:
ea:29:26:44:bb:b8:68:b9:ef:89:cf:58:0d:58:de:
e4:1b:f7:40:d3:c0:e4:fe:c2:54:04:02:fe:bb:3c:
52:5f:e9:32:80:9b:18:5a:5e:d1:7f:c6:da:a1:0f:
ca:c8:c4:2c:66:fd:08:25:b1:37:a8:b9:ec:4a:e8:
db:85:84:5d:e0:b8:23:dd:16:82:a0:8c:b5:d8:52:
40:61:3c:c2:28:cb:6c:ea:5d:f3:3a:ae:23:3d:20:
4e:a2:c1:76:50:0e:e7:29:0d:0c:5f:7c:4c:10:eb:
63:c2:4a:cf:dc:bd:0c:57:f2:90:d1:13:31:d5:89:
79:03:bb:27:e4:f6:78:19:be:d6:fa:47:7a:85:39:
91:fe:e0:5b:3e:5a:85:cd:7a:b3:eb:cc:69:20:f5:
d8:b3:0c:ad:c2:0f:58:49:dc:e5:27:45:7f:16:e7:
fe:1f:d5:68:3a:6a:c6:06:94:5f:0a:1b:93:0a:4a:
32:ab:4d:44:d3:3d:b5:3a:84:31:34:eb:15:82:ca:
8f:8c:11:a0:c3:a7:c6:6f:c1:52:54:f4:c5:62:bb:
c2:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D2:5C:1F:AF:4B:13:84:49:73:03:AB:C7:C3:9C:D4:2B:76:55:B6
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e39302e3132322e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.90.122.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:d0:02:b9:85:00:f8:b3:48:8e:40:d4:9e:e4:6c:5f:75:ff:
52:68:8b:c0:2b:77:6d:a8:07:83:95:d4:40:2c:52:fa:65:7b:
1d:15:21:1e:38:ea:96:14:47:b7:3d:27:9f:fb:89:31:7d:6f:
49:44:f4:3c:6b:f8:bc:34:84:13:d8:09:93:12:49:8d:11:ee:
6d:7d:07:d8:a0:64:08:a2:be:07:92:91:46:04:ec:09:3f:6e:
2c:71:f0:e8:6e:ae:9b:b6:f9:65:1e:08:9f:75:41:d4:79:8a:
8c:02:dc:82:31:34:fd:42:a4:7c:9c:57:9e:cb:c5:ec:fe:88:
d7:3a:d7:2a:00:f9:0c:7c:32:60:1b:29:5b:6f:b3:b8:bb:ca:
a0:f8:ac:2d:db:43:33:82:aa:c9:68:20:83:cf:4d:1f:45:af:
3c:25:29:48:60:7b:99:5b:ed:b6:d5:dd:7c:ed:32:05:f1:bb:
99:8c:4a:54:06:de:b0:77:23:b9:65:39:b0:58:0b:97:f9:f0:
eb:f1:19:3e:bc:15:a5:19:c4:8a:2c:c8:3a:81:e2:3e:11:7a:
f5:f4:dc:05:61:bd:2d:78:19:0b:87:6b:45:1e:67:18:4e:81:
b7:36:2d:b7:07:78:f8:98:82:b8:66:f8:8e:2e:8b:61:25:b6:
a6:86:e8:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 07:22:28 2026 by rpki-client