Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e39372e37302e302f32342d3234203d3e20323132323338.roa
File: 3231322e39372e37302e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: 6iDUnvb8MYWG40t2esQj8djDA+MkexuOJTwubzn8SvQ=
Subject key identifier: AB:BA:6D:60:DE:65:FC:E2:88:F7:EE:09:C3:62:27:5D:A6:BC:40:97
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4BAA09EF6F42865EBBFFBCD3A2700B13792D307C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e39372e37302e302f32342d3234203d3e20323132323338.roa
Signing time: Thu 30 Jul 2026 09:27:22 +0000
ROA not before: Thu 30 Jul 2026 09:22:22 +0000
ROA not after: Thu 29 Jul 2027 09:27:22 +0000
asID: 212238
IP address blocks: 212.97.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:aa:09:ef:6f:42:86:5e:bb:ff:bc:d3:a2:70:0b:13:79:2d:30:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 30 09:22:22 2026 GMT
Not After : Jul 29 09:27:22 2027 GMT
Subject: CN=ABBA6D60DE65FCE288F7EE09C362275DA6BC4097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:09:3b:1a:00:06:44:3b:ae:9c:73:7b:66:9f:
14:a2:58:a2:05:6d:0e:49:a8:98:1a:a5:6e:f0:3b:
99:82:0c:30:90:fb:5d:ff:dd:0e:e3:be:bd:95:e8:
ff:10:9a:9d:6c:ce:b7:ac:b3:31:10:60:91:f1:5c:
e1:27:d2:c6:d2:7a:ac:f2:66:a6:90:6e:f6:24:b2:
84:4e:95:03:dc:05:f2:dd:ae:63:fc:08:79:78:32:
e1:a7:57:e6:d5:aa:60:a1:d6:bb:60:b7:28:bd:13:
b6:94:89:d5:50:d4:74:de:c6:b1:20:a6:51:65:4d:
37:cc:83:5b:ce:a9:14:6a:95:35:b9:43:81:58:19:
c7:bd:64:47:c7:bf:d6:f6:a0:47:42:0f:4d:e0:66:
75:26:40:d6:72:d2:37:6f:63:d1:ab:4d:af:74:a4:
4e:49:20:77:a6:90:46:7b:f7:cd:1a:23:eb:5f:46:
ca:39:de:97:02:73:ae:05:5b:13:ef:a6:5b:d3:3f:
4d:f8:45:7c:3b:e4:4a:04:86:1c:87:32:db:15:82:
55:84:56:84:24:89:d9:18:54:d2:31:f8:d3:a1:f4:
d7:53:9f:4c:f5:1f:c9:a8:bd:cd:93:a8:e4:b3:bb:
19:1e:04:94:7d:32:dd:ed:eb:04:d0:e2:c3:02:b2:
02:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:BA:6D:60:DE:65:FC:E2:88:F7:EE:09:C3:62:27:5D:A6:BC:40:97
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e39372e37302e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.97.70.0/24
Signature Algorithm: sha256WithRSAEncryption
11:1a:aa:13:f7:14:c1:4d:b6:df:97:89:83:1e:5e:a4:09:46:
23:46:cc:e8:31:09:56:10:f5:a2:d0:0d:eb:94:1a:02:68:27:
ee:8f:7c:49:2c:b1:4c:83:0b:5d:c1:43:ce:93:7d:14:ee:fc:
84:1d:5a:31:69:99:a4:1d:49:3d:6f:0a:ac:17:8b:81:98:58:
42:7a:8c:59:47:2e:db:84:70:46:f2:81:a6:f6:0d:aa:42:3e:
2e:34:76:fd:6b:1f:b7:e0:c8:61:70:23:93:ee:81:9c:c6:92:
ec:e9:ec:0f:8f:4e:49:57:19:6e:0c:ca:10:a5:73:a1:82:5a:
51:b5:a7:31:3a:19:1c:03:d2:03:87:5e:6e:58:69:bd:56:a8:
64:d6:71:50:21:b0:21:ec:54:aa:52:36:9d:82:ba:cb:1f:f4:
57:40:ce:1b:4d:fb:aa:d0:fe:3d:49:51:ed:14:b2:f3:36:11:
1d:d4:74:c9:dc:38:ec:40:b1:7c:40:98:fe:7b:28:82:46:54:
0a:d8:82:3b:07:7a:04:2e:d1:cd:f6:ce:2b:17:4a:0d:ab:63:
d4:0a:b1:57:3a:9b:ea:db:55:7a:61:ff:c6:b6:cb:74:ac:41:
5b:a4:ef:76:d1:cd:6b:55:cd:15:45:ad:dc:02:77:4f:ff:6f:
59:51:7d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 19:00:07 2026 by rpki-client