Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e39372e36362e302f32342d3234203d3e20323132323338.roa
File: 3231322e39372e36362e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: yX4SeonWUGvYWSVe5G3843/soanXTAYc8EFD0VAldbY=
Subject key identifier: F8:0D:22:96:D7:4E:8C:47:BF:85:C8:D7:27:22:34:9C:1C:E4:BF:44
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4F72E3FC7F3498C1C0F01B75E011CB103896A872
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e39372e36362e302f32342d3234203d3e20323132323338.roa
Signing time: Thu 30 Jul 2026 09:27:20 +0000
ROA not before: Thu 30 Jul 2026 09:22:20 +0000
ROA not after: Thu 29 Jul 2027 09:27:20 +0000
asID: 212238
IP address blocks: 212.97.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:72:e3:fc:7f:34:98:c1:c0:f0:1b:75:e0:11:cb:10:38:96:a8:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 30 09:22:20 2026 GMT
Not After : Jul 29 09:27:20 2027 GMT
Subject: CN=F80D2296D74E8C47BF85C8D72722349C1CE4BF44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:55:5b:e3:60:76:10:ff:ab:38:93:8b:a7:e9:
1f:61:1f:92:01:ca:0c:1f:d7:2f:b6:d3:17:3b:eb:
b5:b0:29:37:27:42:3f:d7:e3:73:b9:25:3b:6d:48:
da:8f:e0:21:82:2b:23:eb:ab:fb:a1:da:44:5e:0c:
38:da:2a:83:0e:cf:49:88:7b:95:81:e5:c7:53:78:
83:8e:1e:00:50:9b:cf:92:c5:e4:d2:22:d5:71:3f:
03:e2:55:b5:ee:13:48:1e:34:a1:be:ed:47:eb:c7:
f0:9f:52:aa:a9:bf:cf:46:2d:00:ad:98:70:a0:c2:
93:da:62:0e:45:42:0c:a9:6c:0b:cc:0e:22:aa:34:
e1:89:fd:a3:85:7b:6e:d6:4e:ad:39:3a:09:39:7c:
69:b6:9a:d5:b4:b0:ac:12:7e:20:4f:54:43:70:63:
69:59:44:c9:18:7e:d7:92:7b:16:73:41:ff:19:da:
6f:a8:b8:31:dc:ae:3d:3c:66:f7:83:ed:8e:a3:96:
23:06:60:37:6e:cd:8f:78:cb:e5:7f:9b:61:76:a0:
ca:9e:78:3c:27:a2:42:5e:71:f4:78:b2:c0:94:43:
9d:79:74:01:57:92:e8:d4:e3:98:0b:79:c1:be:85:
6e:42:44:9c:5e:36:a5:b1:c1:50:df:7e:6f:05:4f:
6a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:0D:22:96:D7:4E:8C:47:BF:85:C8:D7:27:22:34:9C:1C:E4:BF:44
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e39372e36362e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.97.66.0/24
Signature Algorithm: sha256WithRSAEncryption
42:16:bb:08:15:df:d6:8f:74:8b:a4:08:05:d7:a8:2e:64:26:
83:4d:b6:1c:e3:31:6e:94:5f:35:8f:2b:73:68:54:b7:2c:c5:
b7:50:41:6c:fe:a9:43:66:1b:62:f2:5f:6e:3b:17:bd:da:0b:
ef:1f:24:6c:fc:56:6b:a0:c2:c9:e6:3f:eb:71:b8:06:60:04:
69:91:cc:6a:74:89:c5:31:ae:76:e2:b9:2e:07:19:bb:72:ed:
45:71:1f:6a:c2:94:0a:71:85:a5:69:83:e6:ef:cf:a4:1b:6f:
77:1f:ac:67:ae:a1:c8:22:58:92:38:0a:7d:80:b3:2d:77:d2:
22:9f:5b:1b:85:e0:56:b8:8c:9f:60:29:47:81:59:5e:ba:26:
98:9e:47:38:16:ca:be:ed:dc:ae:ae:af:4c:e3:7a:f2:35:78:
78:eb:0a:59:ed:e5:cf:8e:3d:c2:9a:09:a5:d3:76:d8:f3:7b:
7c:d9:b5:7f:73:5b:d0:fc:93:97:c4:f9:19:6a:02:cf:91:90:
4f:11:b7:a0:f2:46:cb:eb:bb:ec:99:e2:4d:4d:ed:7d:11:ba:
0c:a3:92:f6:5c:92:93:2d:90:b8:75:e5:7a:a5:b4:36:37:4b:
98:ed:53:dc:7a:a8:5d:66:84:32:56:08:90:b8:79:70:07:b6:
c9:0f:7f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 19:00:55 2026 by rpki-client