Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e39372e36382e302f32342d3234203d3e20323132323338.roa
File: 3231322e39372e36382e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: /SJLy32OOghxtgt5WcKdcp+iMiJfIZKHfKCyaZ9kNPg=
Subject key identifier: 4C:01:FB:5D:94:1A:C5:8C:76:F2:13:DB:28:90:98:13:4E:93:A1:F6
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 133008567D243BC1E2B0CF062B3E85D1BD8E1F56
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e39372e36382e302f32342d3234203d3e20323132323338.roa
Signing time: Thu 30 Jul 2026 09:27:20 +0000
ROA not before: Thu 30 Jul 2026 09:22:20 +0000
ROA not after: Thu 29 Jul 2027 09:27:20 +0000
asID: 212238
IP address blocks: 212.97.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:30:08:56:7d:24:3b:c1:e2:b0:cf:06:2b:3e:85:d1:bd:8e:1f:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 30 09:22:20 2026 GMT
Not After : Jul 29 09:27:20 2027 GMT
Subject: CN=4C01FB5D941AC58C76F213DB289098134E93A1F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c0:92:32:4d:52:5c:84:3a:a2:b7:3c:11:b0:
4d:8c:ad:95:f9:44:ea:5b:89:c0:a0:f4:74:8e:82:
5b:7f:41:95:0a:31:75:6a:d3:9a:9b:56:f8:b3:0a:
5c:cf:53:8b:1c:b4:a8:fc:2f:0a:b9:58:82:bf:7f:
ca:5b:b9:d1:e4:13:97:06:0b:5a:93:83:b1:a5:f8:
6c:85:56:74:6e:fa:a0:b4:c6:0e:3c:b8:dc:e8:bb:
d7:c8:f2:d7:de:e8:aa:28:aa:4d:9d:0f:aa:e7:7c:
26:1e:35:4a:42:f8:0e:82:0e:2f:c5:8f:25:1a:1f:
d3:e7:4f:bd:fb:91:fb:0f:8b:75:ae:a6:f9:1f:99:
b9:ea:8f:0f:76:27:90:fc:65:36:5c:f9:70:e0:4e:
ef:14:7c:e1:4c:92:14:1f:31:59:1c:5f:5e:7f:e8:
25:76:9f:98:86:09:33:1d:9a:f6:79:75:af:6e:36:
69:59:be:8e:69:37:2e:ac:83:5e:a0:38:95:41:fc:
75:d0:12:fc:64:77:1b:b4:ef:9f:7a:8e:d7:6e:aa:
82:5d:37:a1:ab:30:ff:14:04:1d:7b:5a:4c:4d:7e:
fe:76:88:a2:f7:9f:93:c2:2b:d9:23:ba:65:a7:c8:
90:95:e2:c8:c2:ce:c3:c5:75:a6:80:6e:ea:fc:02:
a5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:01:FB:5D:94:1A:C5:8C:76:F2:13:DB:28:90:98:13:4E:93:A1:F6
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e39372e36382e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.97.68.0/24
Signature Algorithm: sha256WithRSAEncryption
14:3a:7a:3a:dd:46:49:45:f0:7b:9f:f8:f0:3c:c1:19:1f:bb:
33:5b:dd:bb:84:6a:eb:26:84:15:0c:e3:6e:9f:70:ca:47:2c:
fd:b4:ac:69:62:fb:96:ff:9b:22:79:3f:87:64:52:af:26:3f:
ee:85:51:91:47:8f:b1:29:1e:4e:5b:2e:8a:73:71:73:7c:73:
aa:25:13:ce:4e:88:bf:00:6a:2b:15:f5:c6:3e:28:1d:1f:06:
76:4b:1f:b4:1e:49:27:93:bb:0e:e2:2f:da:2f:4d:60:47:0d:
64:f2:28:42:06:69:ba:0d:db:21:82:af:6e:63:1e:1e:80:44:
96:34:3c:fa:81:f7:32:65:d5:bf:93:01:1d:25:57:53:04:3a:
f1:ad:77:5d:70:11:e8:06:ad:8b:7a:1c:01:03:5e:f8:c6:fe:
4e:5d:cb:02:e5:14:60:e3:40:94:db:ac:ce:bc:e2:9a:70:0f:
81:c3:9f:c3:be:a4:36:2e:01:7d:1f:d5:bc:67:d1:a0:24:02:
61:fb:a9:4a:20:30:4e:48:f5:24:86:e4:ba:e6:5e:9a:df:5d:
f2:8c:78:7a:69:d3:79:14:ce:fe:db:1e:bd:47:a1:5f:e4:8b:
a0:e1:06:d9:fc:26:c5:6d:21:0b:9a:32:a5:a0:44:09:9a:d1:
e3:90:7c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 07:41:13 2026 by rpki-client