Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38342e302f32342d3234203d3e20313336373837.roa
File: 3231322e33322e38342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: GRNZjyFVJODIKWyelp8PQGFu/b5vq8Bi67yw+qt35Po=
Subject key identifier: 5F:8A:08:97:A7:A3:EF:95:09:FE:C0:FC:A0:07:BE:8A:F9:CE:1C:8B
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6A86B286573782B1E2B731BF52BA1E6BFAAC6309
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38342e302f32342d3234203d3e20313336373837.roa
Signing time: Thu 16 Oct 2025 15:47:55 +0000
ROA not before: Thu 16 Oct 2025 15:42:55 +0000
ROA not after: Thu 15 Oct 2026 15:47:55 +0000
asID: 136787
IP address blocks: 212.32.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 17:43:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:86:b2:86:57:37:82:b1:e2:b7:31:bf:52:ba:1e:6b:fa:ac:63:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 16 15:42:55 2025 GMT
Not After : Oct 15 15:47:55 2026 GMT
Subject: CN=5F8A0897A7A3EF9509FEC0FCA007BE8AF9CE1C8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a6:77:29:96:3e:85:6f:43:30:41:41:d6:9a:
d0:50:8b:52:ea:22:43:6f:cc:8e:4d:4e:5c:05:22:
c9:e4:50:f3:95:96:f2:e4:f5:88:8a:9e:c2:6b:36:
1e:db:4e:9f:26:56:7e:0e:28:e3:42:33:5d:46:c4:
36:8f:5e:9f:79:55:d4:63:27:c0:27:d4:4d:a2:54:
45:43:38:da:78:d8:f4:32:96:43:49:78:4f:18:ad:
e9:83:f1:84:6b:b2:2c:d2:16:f8:80:14:7e:72:e6:
41:f3:76:e4:e2:54:16:8d:05:51:f0:6b:6e:28:02:
8d:ee:61:ad:ef:98:e6:23:77:61:80:26:76:42:c0:
60:24:6f:fb:4d:2d:4d:a9:5b:04:83:2c:e0:5d:b0:
11:2a:47:41:aa:eb:57:24:32:10:25:08:08:b3:c2:
02:eb:05:fe:9e:e8:7c:07:34:86:90:d7:de:c1:7f:
22:5b:fe:b3:18:f1:74:60:fa:43:87:8b:d0:5f:97:
d9:fd:04:9f:5a:39:16:83:bc:16:79:e0:d1:77:6f:
49:09:32:a9:b1:8c:dd:8b:37:0c:06:95:76:a3:cf:
e5:aa:bc:31:88:4b:bc:26:bf:5b:75:f6:66:d0:07:
82:52:3e:f8:09:0a:34:d7:3e:9f:c9:1c:ed:b8:f4:
32:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:8A:08:97:A7:A3:EF:95:09:FE:C0:FC:A0:07:BE:8A:F9:CE:1C:8B
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38342e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.32.84.0/24
Signature Algorithm: sha256WithRSAEncryption
56:f3:f7:96:76:9b:b3:69:7f:c3:12:0c:11:d3:65:d7:24:9f:
8a:d1:a1:40:a9:4c:fb:dd:ea:34:c3:e6:bb:e4:23:8d:0a:e2:
97:09:8c:00:8a:9e:53:49:0e:72:78:b8:ba:ba:ba:53:48:2f:
68:7a:7d:fb:d7:31:07:4c:12:03:58:83:70:a5:df:3f:43:61:
62:41:2c:a6:f3:7b:6e:1a:36:e8:3f:eb:7b:5a:f6:87:e0:bd:
8d:b7:a2:0a:4b:c7:4d:b3:e1:4c:fa:5d:b5:96:c4:0e:be:21:
6a:83:79:22:f4:c4:aa:eb:c4:b3:5a:7a:df:1e:1e:e9:25:f5:
fa:10:bf:cf:2d:77:18:4e:7c:ce:8d:0b:eb:b2:72:e7:46:ff:
aa:ab:3e:52:0c:51:c6:ed:3d:bd:8b:84:17:29:43:1e:db:fe:
3c:89:14:af:ae:51:72:41:aa:35:09:97:bd:b2:54:2a:f7:c4:
b8:a8:85:10:62:0e:a2:28:22:31:56:96:35:92:fb:5a:08:8b:
72:58:92:33:4a:09:b1:d3:01:f8:06:ba:84:66:a7:9f:5a:e9:
f3:ad:21:2d:03:70:71:0c:84:0a:2b:10:16:e5:d0:bf:18:44:
ae:fb:c0:d8:04:8d:56:93:d3:9a:06:ea:e0:37:1e:aa:5f:0b:
77:8e:d1:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:14:38 2025 by rpki-client