Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e39372e37312e302f32342d3234203d3e20323132323338.roa
File: 3231322e39372e37312e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: WyjAsHa7HQE88UuwNVYmDz/oZEw2E8voPtRM1TR0NUQ=
Subject key identifier: 1B:61:31:36:5C:6E:F7:4C:45:20:40:15:89:94:30:3C:74:83:08:13
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 49D9394567D00B4158621FA678DB3BEA6C667CD4
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e39372e37312e302f32342d3234203d3e20323132323338.roa
Signing time: Thu 30 Jul 2026 21:27:27 +0000
ROA not before: Thu 30 Jul 2026 21:22:27 +0000
ROA not after: Thu 29 Jul 2027 21:27:27 +0000
asID: 212238
IP address blocks: 212.97.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:d9:39:45:67:d0:0b:41:58:62:1f:a6:78:db:3b:ea:6c:66:7c:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 30 21:22:27 2026 GMT
Not After : Jul 29 21:27:27 2027 GMT
Subject: CN=1B6131365C6EF74C452040158994303C74830813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:63:a0:f7:c3:3c:be:64:6c:13:ab:d8:43:56:
06:30:2c:fb:d4:db:27:e8:25:7f:8f:04:32:9e:ef:
74:b2:57:e6:5c:54:e7:c7:0e:d6:78:74:ba:d1:37:
a0:01:88:6e:ab:00:97:42:f7:c6:87:15:66:a6:50:
4f:b6:50:de:12:9f:f1:42:65:1d:69:c8:23:ec:88:
ee:80:d5:48:5d:17:bb:77:3a:ab:2c:2f:ed:c6:41:
d0:da:f3:7d:a7:28:91:69:8b:84:87:c2:5d:fa:e6:
7b:72:e1:25:59:34:a4:f2:0e:11:ce:bc:72:38:6f:
65:54:6e:c7:33:00:99:a6:1c:e1:4a:0a:c6:c8:76:
8e:a8:36:88:b5:7c:ef:37:66:be:27:e2:17:3a:d5:
28:5e:62:35:c3:15:46:6a:40:f9:65:a6:93:df:8f:
3e:c9:18:85:7a:72:9e:b4:47:b4:02:6e:5b:b0:7d:
a5:f2:b6:84:a1:3b:60:a0:b5:1f:4a:c1:c2:c4:e2:
2a:4b:18:8c:19:60:79:39:a8:80:57:1a:e0:b8:ed:
b6:a2:2c:eb:fd:ac:ae:44:b3:8a:f1:8e:74:35:94:
b2:3b:50:aa:ce:f9:c7:ef:29:2c:bb:71:3c:c8:db:
46:e0:86:01:39:c0:65:17:7e:ee:f2:29:9f:36:24:
3c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:61:31:36:5C:6E:F7:4C:45:20:40:15:89:94:30:3C:74:83:08:13
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e39372e37312e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.97.71.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:83:d7:aa:49:bf:13:92:2e:4f:7d:25:a7:39:e1:50:b7:b8:
58:1b:48:cc:a2:13:1f:af:1b:c5:75:1e:98:0e:6f:a2:0a:f9:
a2:df:bc:d1:b5:d8:95:39:5f:f9:9d:18:d3:f3:30:2f:ba:21:
94:46:84:cc:6b:bb:6d:09:45:5b:ff:06:81:55:6e:84:2d:75:
a0:ae:90:b5:9f:5d:e4:0e:98:81:db:46:5d:19:61:86:31:94:
ee:eb:0d:39:82:00:47:56:79:0b:de:da:fa:6e:68:4f:16:77:
39:2e:b9:f5:ca:11:c6:83:95:e6:45:26:30:02:b8:79:a6:36:
1a:17:4a:92:31:c9:a8:36:0e:74:9b:a2:15:c5:2b:12:8f:08:
44:64:d5:bf:8d:5c:d9:76:0d:1e:24:34:7c:47:4c:9c:0f:43:
53:9f:ca:c1:6f:5a:1f:5d:eb:50:18:10:47:5f:73:44:77:5f:
ba:b3:61:38:ff:6e:62:bb:2c:d9:16:89:66:74:02:ec:cb:cf:
20:6e:c0:9e:29:ef:97:46:96:82:45:bd:f4:02:25:46:f2:ac:
94:c7:a0:c5:94:28:d4:56:1e:81:79:83:2d:6c:a2:90:e9:63:
05:d5:63:7d:be:71:12:07:91:fd:37:79:ad:a3:4c:78:cc:5a:
99:fb:be:f8
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUSdk5RWfQC0FYYh+meNs76mxmfNQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA3MzAyMTIyMjdaFw0yNzA3MjkyMTI3MjdaMDMxMTAvBgNV
BAMTKDFCNjEzMTM2NUM2RUY3NEM0NTIwNDAxNTg5OTQzMDNDNzQ4MzA4MTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFY6D3wzy+ZGwTq9hDVgYwLPvU
2yfoJX+PBDKe73SyV+ZcVOfHDtZ4dLrRN6ABiG6rAJdC98aHFWamUE+2UN4Sn/FC
ZR1pyCPsiO6A1UhdF7t3OqssL+3GQdDa832nKJFpi4SHwl365nty4SVZNKTyDhHO
vHI4b2VUbsczAJmmHOFKCsbIdo6oNoi1fO83Zr4n4hc61SheYjXDFUZqQPllppPf
jz7JGIV6cp60R7QCbluwfaXytoShO2CgtR9KwcLE4ipLGIwZYHk5qIBXGuC47bai
LOv9rK5Es4rxjnQ1lLI7UKrO+cfvKSy7cTzI20bghgE5wGUXfu7yKZ82JDz/AgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUG2ExNlxu90xFIEAViZQwPHSDCBMwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTMyMmUzOTM3MmUzNzMx
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTMyMzIzMzM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
1GFHMA0GCSqGSIb3DQEBCwUAA4IBAQA+g9eqSb8Tki5PfSWnOeFQt7hYG0jMohMf
rxvFdR6YDm+iCvmi37zRtdiVOV/5nRjT8zAvuiGURoTMa7ttCUVb/waBVW6ELXWg
rpC1n13kDpiB20ZdGWGGMZTu6w05ggBHVnkL3tr6bmhPFnc5Lrn1yhHGg5XmRSYw
Arh5pjYaF0qSMcmoNg50m6IVxSsSjwhEZNW/jVzZdg0eJDR8R0ycD0NTn8rBb1of
XetQGBBHX3NEd1+6s2E4/25iuyzZFolmdALsy88gbsCeKe+XRpaCRb30AiVG8qyU
x6DFlCjUVh6BeYMtbKKQ6WMF1WN9vnESB5H9N3mto0x4zFqZ+774
-----END CERTIFICATE-----
Generated at Fri Sep 18 19:01:01 2026 by rpki-client