Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e32382e3138342e302f32312d3332203d3e203430303231.roa
File: 3231322e32382e3138342e302f32312d3332203d3e203430303231.roa (raw, json)
Hash identifier: /p3MHQ0600yLtHH8T5ba9uhL0l5QbdFMAFe33vU0uTM=
Subject key identifier: 11:02:79:5E:E2:A3:10:20:FC:F7:77:9A:AE:C0:9A:7F:B7:DC:F9:B7
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 606C7AF37F3D6C9BF9F1F13AE836B0EC822E0707
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e32382e3138342e302f32312d3332203d3e203430303231.roa
Signing time: Wed 15 Oct 2025 19:47:52 +0000
ROA not before: Wed 15 Oct 2025 19:42:52 +0000
ROA not after: Wed 14 Oct 2026 19:47:52 +0000
asID: 40021
IP address blocks: 212.28.184.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:6c:7a:f3:7f:3d:6c:9b:f9:f1:f1:3a:e8:36:b0:ec:82:2e:07:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 15 19:42:52 2025 GMT
Not After : Oct 14 19:47:52 2026 GMT
Subject: CN=1102795EE2A31020FCF7779AAEC09A7FB7DCF9B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:44:3f:0d:9f:16:b7:47:b5:b0:a1:2d:d7:25:
86:62:e5:c6:3e:ca:ec:00:15:d7:fb:23:c8:95:c4:
bb:42:7e:bd:6c:be:98:a6:dc:45:81:73:9f:30:99:
7b:ab:53:52:69:11:4f:c4:70:1d:2e:4c:e2:4b:12:
8f:e9:32:3a:14:6d:5e:18:81:78:e0:48:83:43:55:
ef:b5:01:5f:61:f9:0d:75:26:70:c1:00:34:57:f8:
da:f6:4b:bb:c4:c1:3e:c2:95:dd:26:cc:df:84:a3:
22:2e:ad:d9:a0:0f:84:d9:86:e3:06:ce:59:ec:bc:
e4:bf:51:be:4b:b3:84:49:e3:bd:e2:b7:e9:4c:1e:
d3:ff:ab:0b:52:67:ac:29:4c:a9:f2:53:4e:ea:da:
f4:1d:cc:40:bf:96:4f:70:a4:3a:48:0f:3d:0a:e0:
1f:58:69:fc:8f:3d:e8:fb:9e:8f:0d:db:5a:0b:7c:
b2:8f:22:46:96:c7:f0:c0:56:38:e8:a3:c8:f7:3a:
ac:13:eb:3f:ff:80:c7:6c:4b:08:8e:d7:3a:9a:b2:
92:fc:8f:ea:db:36:8a:6a:f7:10:8a:aa:88:0a:09:
b5:d0:5c:9a:a9:57:4a:bf:2c:32:74:4e:08:a0:f1:
d1:23:72:9a:c2:38:3b:aa:2e:cd:65:9e:68:c0:8e:
78:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:02:79:5E:E2:A3:10:20:FC:F7:77:9A:AE:C0:9A:7F:B7:DC:F9:B7
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e32382e3138342e302f32312d3332203d3e203430303231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.28.184.0/21
Signature Algorithm: sha256WithRSAEncryption
5d:f4:0d:56:8f:04:47:f2:72:8e:cc:ac:82:d4:03:88:de:3b:
7b:fd:c0:6e:77:a6:21:ec:be:d7:86:6f:e3:2d:5b:c8:e7:1d:
09:3c:53:57:e2:6e:64:71:f3:96:b1:f9:ec:e1:27:c1:c0:4d:
bc:3d:42:6d:34:b7:3d:0f:32:92:9a:e9:58:1e:2f:12:b3:b9:
a2:bb:76:73:50:d5:92:ba:a3:5f:c5:b5:1f:37:5f:a8:de:8e:
32:c4:d6:09:20:ac:6f:a3:f9:a7:22:54:ba:fc:57:9f:b5:02:
3d:41:e4:22:ba:7b:c4:f3:bb:36:0f:be:92:6d:3d:c0:c7:d9:
f4:0e:44:d5:f8:3d:87:5a:83:c4:a5:5a:88:86:9b:c6:99:d3:
3c:bf:58:db:1d:54:75:0c:25:8f:dc:fd:d4:8b:40:ef:4e:b0:
80:20:be:3b:16:01:df:42:a6:d8:13:b7:c9:79:46:1b:cb:71:
5b:fd:82:c9:0d:0d:67:ce:71:8d:6e:48:ac:53:dd:79:7e:ed:
35:f3:8e:8d:55:59:b9:e8:82:b7:88:26:de:f2:ab:59:f0:57:
66:ca:7a:43:c9:11:0b:62:71:61:39:33:2a:37:56:73:5c:00:
1b:f9:30:8e:a0:b0:40:46:fc:a9:aa:3a:1a:57:4f:55:90:1a:
56:1d:5b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:04:32 2025 by rpki-client