Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38312e302f32342d3234203d3e20313336373837.roa
File: 3231322e33322e38312e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: G9GO7SZGYKoUPdrP5cCqs3VEoGkadMgcy89FVRStdB8=
Subject key identifier: C0:C3:C4:C5:9E:1D:90:FD:04:76:C8:EC:C2:BD:FF:BF:7C:D5:0C:D5
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 47649109D2CC59808ECC507C0FF1BF6221494FF0
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38312e302f32342d3234203d3e20313336373837.roa
Signing time: Thu 16 Oct 2025 15:47:53 +0000
ROA not before: Thu 16 Oct 2025 15:42:53 +0000
ROA not after: Thu 15 Oct 2026 15:47:53 +0000
asID: 136787
IP address blocks: 212.32.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:64:91:09:d2:cc:59:80:8e:cc:50:7c:0f:f1:bf:62:21:49:4f:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 16 15:42:53 2025 GMT
Not After : Oct 15 15:47:53 2026 GMT
Subject: CN=C0C3C4C59E1D90FD0476C8ECC2BDFFBF7CD50CD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b1:1b:64:d4:b3:0b:ee:8f:8a:4e:04:f0:2a:
e3:97:73:ff:18:9a:7b:92:e9:06:70:be:18:d4:ee:
89:ea:09:66:d5:9a:9d:ac:69:c4:5f:be:1e:18:f9:
b3:4d:fd:c4:5c:9d:dc:46:f4:82:3b:f8:df:d8:35:
7f:ea:02:e4:83:45:b5:31:09:dd:5d:ea:88:b9:63:
5c:24:75:d4:d5:b7:90:17:c2:5a:d2:8e:eb:5e:a7:
1a:4c:63:11:ed:42:5c:f9:fc:d6:b3:ed:2e:ee:61:
b1:32:6b:74:3a:06:eb:2b:56:6e:3e:4c:de:3a:5c:
52:53:4e:fd:a4:05:f3:25:7a:2e:eb:2b:91:0a:04:
37:8b:0d:e6:cc:39:91:2c:7b:72:b8:af:71:8e:8d:
d8:87:41:b0:9d:d8:ee:d5:91:28:ee:ee:6a:94:40:
d0:73:da:08:6e:e1:d4:85:1d:00:e9:f3:65:b1:84:
40:7d:18:70:57:b6:c5:b3:d5:4a:f5:ab:4e:b0:32:
04:ad:2f:ae:1f:06:34:21:b4:33:75:92:68:e0:aa:
0e:00:93:ed:07:2e:c5:4b:3b:04:62:20:c6:ea:06:
63:8a:9e:97:54:b8:15:93:ab:9b:03:02:85:47:c9:
5d:50:1a:de:a3:d1:30:b6:0b:22:77:69:a6:e1:29:
bf:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C3:C4:C5:9E:1D:90:FD:04:76:C8:EC:C2:BD:FF:BF:7C:D5:0C:D5
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38312e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.32.81.0/24
Signature Algorithm: sha256WithRSAEncryption
58:fb:dd:5d:de:7c:0e:45:3b:a3:22:6c:b2:85:7a:c1:ee:e9:
c5:50:78:30:1b:8a:97:23:12:65:40:5b:36:76:df:96:8d:3e:
c5:af:75:c1:00:45:2e:30:40:6e:2b:91:86:00:76:1f:07:18:
d4:8b:cd:23:4a:1a:46:17:5b:ec:b9:81:74:df:7a:34:d3:2d:
bb:56:98:7b:37:0a:3b:c1:28:3a:46:01:76:be:ca:e0:9d:9d:
d7:a9:6b:26:c2:52:d0:ab:79:01:ee:0e:b4:ff:06:fb:45:e5:
1c:32:5d:55:0d:69:e0:a4:04:30:6a:fe:32:9d:d8:3f:66:bf:
31:a4:02:43:2a:17:6f:24:49:60:ce:b5:48:20:88:37:1a:18:
34:fb:d9:80:6a:07:03:3b:ae:f7:d0:0f:56:11:67:15:21:d9:
8f:1a:48:87:3c:6f:6d:bc:0e:0c:af:4e:85:60:5b:27:d8:48:
a6:52:27:7d:64:8c:34:32:7c:bd:18:35:c7:3c:0b:cb:aa:76:
58:49:2e:c6:93:2a:3e:2f:ee:fb:65:6f:53:e2:f3:c9:f6:fe:
4d:ac:87:82:f1:e2:02:14:9e:3a:0b:b2:35:92:f7:8b:d8:c7:
36:19:7c:fb:c5:30:9c:13:6f:68:a5:d3:f3:88:6f:ed:f0:db:
fc:f8:fb:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:52:01 2025 by rpki-client