Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e32382e3137362e302f32312d3332203d3e203430303231.roa
File: 3231322e32382e3137362e302f32312d3332203d3e203430303231.roa (raw, json)
Hash identifier: CDnkUvvlK2X5PW1kIs164OTYFlBqUdFRMmIqKIb3CNY=
Subject key identifier: 4E:8A:88:E2:B7:4E:01:BE:F1:3E:59:29:01:A0:34:CF:C7:C3:D1:9F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5FFF7BF1998D358B7A8A184D29EA4602E00628AF
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e32382e3137362e302f32312d3332203d3e203430303231.roa
Signing time: Wed 15 Oct 2025 19:47:52 +0000
ROA not before: Wed 15 Oct 2025 19:42:52 +0000
ROA not after: Wed 14 Oct 2026 19:47:52 +0000
asID: 40021
IP address blocks: 212.28.176.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:ff:7b:f1:99:8d:35:8b:7a:8a:18:4d:29:ea:46:02:e0:06:28:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 15 19:42:52 2025 GMT
Not After : Oct 14 19:47:52 2026 GMT
Subject: CN=4E8A88E2B74E01BEF13E592901A034CFC7C3D19F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:58:d9:d0:33:25:42:20:07:6e:b1:cf:39:ec:
26:01:5e:5c:6d:96:68:bb:1e:52:f3:a3:87:bb:41:
4d:44:38:57:f1:ba:82:46:13:3e:38:f9:7b:c3:ba:
f4:a0:0e:5d:f3:20:ef:9b:21:60:ff:21:a0:95:3f:
7e:a6:5c:34:eb:0a:e9:e6:c4:ac:41:91:df:c4:7a:
08:9b:4b:43:97:41:87:fb:ae:0a:25:7f:48:40:1d:
bb:0e:09:47:45:d8:1b:3f:d6:11:6f:53:3b:2e:5c:
11:c3:b0:37:37:0f:6b:f6:7e:05:2f:2b:12:95:74:
41:e5:86:b4:62:d8:14:26:90:b0:8b:00:6c:40:64:
02:09:0f:e3:8a:d5:c7:56:18:85:f4:a5:db:82:d7:
e1:b7:ef:eb:21:04:0a:9c:d5:76:6a:86:90:7a:cd:
1d:62:89:5d:b8:8d:f6:e8:38:ab:e5:b3:22:f8:a3:
99:25:7a:da:c2:b7:91:c6:d0:04:75:8d:e7:c2:00:
01:3e:6e:ed:49:e0:4c:a2:b0:f6:0d:f1:98:0c:29:
69:e1:1e:c8:5e:e3:59:db:11:34:ee:92:40:3d:3e:
3c:bc:32:b1:3f:a4:37:fc:b7:83:4c:eb:9f:7d:e4:
69:8e:37:f0:d6:b5:af:0d:a4:f1:69:43:4a:d8:dd:
1c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:8A:88:E2:B7:4E:01:BE:F1:3E:59:29:01:A0:34:CF:C7:C3:D1:9F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e32382e3137362e302f32312d3332203d3e203430303231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.28.176.0/21
Signature Algorithm: sha256WithRSAEncryption
04:86:70:08:e7:4d:cd:9c:56:59:f4:11:9c:38:03:68:ee:3a:
59:b2:3a:b6:55:45:d0:a8:03:10:ac:8b:27:5c:6a:0f:08:78:
ca:34:18:bb:2a:aa:64:4a:15:47:50:29:44:ca:20:b4:48:2c:
0b:fc:b0:f9:b3:ea:77:77:a2:54:ff:b0:9a:21:af:6b:53:05:
2d:3d:20:93:d8:5e:d0:99:28:98:e1:87:ff:f7:6a:5b:f4:b1:
f5:86:90:74:68:ff:2f:3a:72:3a:25:c6:28:54:c1:f3:a5:d7:
c4:d3:b6:2d:06:f8:4e:4e:02:0d:1b:59:42:0a:30:63:4b:3e:
75:f5:08:23:e8:47:eb:35:7a:26:2a:b1:ef:bc:59:4f:46:df:
9c:08:72:55:cd:b7:15:9f:87:be:b2:d3:a9:15:c4:f2:3d:32:
44:0d:c6:ad:fc:6f:ff:d7:e3:7a:fb:d0:5e:b2:62:2b:86:3f:
48:13:fa:b2:c0:c5:db:b8:fd:98:2a:75:5a:92:8d:b1:fe:9f:
6b:e6:0a:a6:18:a0:97:a3:97:6c:fa:71:20:8c:c4:35:af:f6:
4c:c5:3a:c9:dd:97:3a:31:34:e6:7c:dd:43:0f:72:fe:d3:40:
57:f7:86:d2:5f:df:17:c0:63:ce:89:9d:2e:7a:ca:c2:dc:56:
37:9a:28:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:29:58 2025 by rpki-client