Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e39372e37302e302f32342d3234203d3e20323132323338.roa
File: 3231322e39372e37302e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: 99P6LYrmx/Hl4l9DNOR/p+/W1aZIUplETXdkdVQLteg=
Subject key identifier: 31:BD:B3:F4:C6:9C:1C:DD:58:99:79:DA:D7:0E:CA:EC:09:FA:84:EF
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 12ADCBB67D0FBB28C2AF18023C4B15E0BF34BF02
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e39372e37302e302f32342d3234203d3e20323132323338.roa
Signing time: Thu 28 Aug 2025 08:51:33 +0000
ROA not before: Thu 28 Aug 2025 08:46:33 +0000
ROA not after: Thu 27 Aug 2026 08:51:33 +0000
asID: 212238
IP address blocks: 212.97.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:ad:cb:b6:7d:0f:bb:28:c2:af:18:02:3c:4b:15:e0:bf:34:bf:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 28 08:46:33 2025 GMT
Not After : Aug 27 08:51:33 2026 GMT
Subject: CN=31BDB3F4C69C1CDD589979DAD70ECAEC09FA84EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:eb:f3:96:83:9d:88:94:78:bb:da:0a:51:27:
e0:3c:9d:f1:77:55:df:5f:d2:fc:dd:58:fa:13:86:
b2:a1:b9:be:23:6e:b4:f6:e2:3f:32:b8:f2:2d:94:
43:8b:cd:fd:d9:64:7f:85:8a:1a:09:67:26:e5:07:
82:8d:6b:44:d7:17:16:7b:2b:8a:aa:dd:3b:b3:4d:
e1:7c:d3:fe:c4:d2:2b:6d:ee:ef:6a:ab:a0:28:31:
2f:e8:2d:41:34:38:67:f1:84:96:c3:a6:71:27:46:
5e:02:34:9f:6a:ff:3d:25:f2:78:7b:87:49:9a:c3:
88:93:fc:68:03:6c:ba:31:5e:06:5e:65:3e:86:00:
83:06:4d:47:5b:81:30:f6:87:e3:bd:f8:4a:9e:b5:
db:fa:83:49:b8:06:d5:35:da:61:a8:ee:ac:af:7c:
95:a6:2e:0d:79:19:a8:77:f0:83:f7:3a:ca:4b:d2:
f7:3a:6f:70:7e:e3:16:4b:0e:d7:67:67:5d:9c:00:
0c:04:fd:95:f6:38:2a:17:0a:46:0c:a9:cf:c5:df:
e2:c3:67:62:08:b7:e6:14:a3:eb:4e:49:ab:ed:1c:
24:de:33:d8:e9:a0:01:13:ac:c5:d7:e1:5c:eb:69:
d9:27:fb:7e:8d:8e:29:e1:00:27:ba:7d:a6:87:d6:
54:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:BD:B3:F4:C6:9C:1C:DD:58:99:79:DA:D7:0E:CA:EC:09:FA:84:EF
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e39372e37302e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.97.70.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:bb:5b:06:78:12:54:e6:98:a4:4f:e7:68:1e:8d:40:f3:7d:
25:c5:6c:5b:4c:3b:4d:1b:19:c7:73:b1:a8:3b:5f:4f:a0:35:
34:d3:2b:0a:22:d4:3d:34:24:88:8c:4f:fd:f2:de:ed:78:fc:
9b:48:80:8f:55:3a:39:33:7e:6f:4a:be:d1:35:50:b4:f1:eb:
52:7e:d6:34:31:aa:e5:d2:4c:86:2c:da:6b:ce:f8:fa:8a:e2:
fb:df:9d:9d:d4:51:7e:65:20:b9:63:51:5b:a0:4d:8b:7a:16:
01:a0:f7:1b:43:a8:49:df:2d:15:49:50:1a:66:8b:0b:d8:d4:
cc:70:e1:e7:75:13:48:fa:4a:68:82:6a:ac:a8:92:64:c8:44:
cb:04:95:cc:6b:c9:34:d2:d9:b7:32:5c:b4:fe:c2:a4:2d:fb:
22:67:3c:ec:9c:b5:27:f6:9a:31:67:5e:96:e0:04:f1:da:e3:
e6:61:8a:8e:5f:eb:86:0e:05:2f:a9:29:a2:8d:7a:e7:55:24:
91:0f:84:67:ff:3a:e5:b4:4a:c4:05:91:a1:ba:e5:d9:c9:6c:
a4:0e:02:61:31:7d:26:95:ea:a9:39:47:cc:55:1d:d8:94:54:
e4:62:7d:40:ad:1b:2f:54:dd:8a:22:19:c9:5c:7f:a6:b0:fc:
40:53:0a:81
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUEq3Ltn0PuyjCrxgCPEsV4L80vwIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA4MjgwODQ2MzNaFw0yNjA4MjcwODUxMzNaMDMxMTAvBgNV
BAMTKDMxQkRCM0Y0QzY5QzFDREQ1ODk5NzlEQUQ3MEVDQUVDMDlGQTg0RUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDo6/OWg52IlHi72gpRJ+A8nfF3
Vd9f0vzdWPoThrKhub4jbrT24j8yuPItlEOLzf3ZZH+FihoJZyblB4KNa0TXFxZ7
K4qq3TuzTeF80/7E0itt7u9qq6AoMS/oLUE0OGfxhJbDpnEnRl4CNJ9q/z0l8nh7
h0maw4iT/GgDbLoxXgZeZT6GAIMGTUdbgTD2h+O9+Eqetdv6g0m4BtU12mGo7qyv
fJWmLg15Gah38IP3OspL0vc6b3B+4xZLDtdnZ12cAAwE/ZX2OCoXCkYMqc/F3+LD
Z2IIt+YUo+tOSavtHCTeM9jpoAETrMXX4Vzradkn+36NjinhACe6faaH1lT7AgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUMb2z9MacHN1YmXna1w7K7An6hO8wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTMyMmUzOTM3MmUzNzMw
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTMyMzIzMzM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
1GFGMA0GCSqGSIb3DQEBCwUAA4IBAQBqu1sGeBJU5pikT+doHo1A830lxWxbTDtN
GxnHc7GoO19PoDU00ysKItQ9NCSIjE/98t7tePybSICPVTo5M35vSr7RNVC08etS
ftY0Marl0kyGLNprzvj6iuL7352d1FF+ZSC5Y1FboE2LehYBoPcbQ6hJ3y0VSVAa
ZosL2NTMcOHndRNI+kpogmqsqJJkyETLBJXMa8k00tm3Mly0/sKkLfsiZzzsnLUn
9poxZ16W4ATx2uPmYYqOX+uGDgUvqSmijXrnVSSRD4Rn/zrltErEBZGhuuXZyWyk
DgJhMX0mleqpOUfMVR3YlFTkYn1ArRsvVN2KIhnJXH+msPxAUwqB
-----END CERTIFICATE-----
Generated at Fri Sep 5 07:52:58 2025 by rpki-client