Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38352e302f32342d3234203d3e20313336373837.roa
File: 3231322e33322e38352e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: MpsNOoiKe2aTdiXftu6ejkQFHhjm/2kWdgnSIZ0hPS4=
Subject key identifier: A6:6A:0D:B3:3E:AA:C8:46:8B:A7:3B:6F:ED:ED:CA:2A:D4:48:4F:AA
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 17DC010642B15EC19657FDE70A8FACD3749407BE
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38352e302f32342d3234203d3e20313336373837.roa
Signing time: Thu 16 Oct 2025 15:47:54 +0000
ROA not before: Thu 16 Oct 2025 15:42:54 +0000
ROA not after: Thu 15 Oct 2026 15:47:54 +0000
asID: 136787
IP address blocks: 212.32.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:dc:01:06:42:b1:5e:c1:96:57:fd:e7:0a:8f:ac:d3:74:94:07:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 16 15:42:54 2025 GMT
Not After : Oct 15 15:47:54 2026 GMT
Subject: CN=A66A0DB33EAAC8468BA73B6FEDEDCA2AD4484FAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:7a:24:4d:a3:c4:f1:fc:e2:f0:d3:28:e2:60:
06:4d:4f:4d:e0:18:5a:d2:81:a8:bf:12:ab:ad:22:
37:a5:78:15:2a:b3:7a:ae:8e:b8:bb:f9:2d:02:a2:
9c:a2:07:ed:a3:39:fa:5f:27:41:65:1b:9d:12:0c:
90:5f:f2:c5:dd:d0:4d:f4:97:85:e5:bd:75:1f:a0:
8b:4e:af:75:5c:83:c9:a1:24:b9:89:8e:a2:df:15:
01:14:5c:25:7a:3c:33:73:19:2a:97:c4:c4:f0:b3:
f2:d5:9b:16:59:ff:cd:15:fa:0b:33:42:d8:20:5d:
e7:3d:b4:8a:68:98:cd:d8:ea:3d:08:46:5f:82:7b:
ad:b4:24:c8:f0:51:ce:f6:c2:c0:3c:75:3b:bd:46:
6d:e6:1f:ee:2c:5c:92:63:35:1a:5b:c8:f9:c6:af:
7f:49:5c:c4:59:e4:b5:3d:16:e6:e0:79:30:a0:19:
cd:ae:0a:29:75:f0:a6:fa:7f:8d:f5:6c:16:70:17:
3e:cb:45:f0:a1:cc:50:d6:aa:40:bc:ac:5b:b9:d3:
c7:ab:39:7f:ef:8d:e8:13:85:b0:73:75:2c:f6:9f:
41:26:6d:f7:bd:bb:e9:b3:f6:37:07:6c:e2:be:63:
93:f9:98:9e:0b:f9:10:f9:af:10:1b:d5:e5:f2:a0:
41:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:6A:0D:B3:3E:AA:C8:46:8B:A7:3B:6F:ED:ED:CA:2A:D4:48:4F:AA
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38352e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.32.85.0/24
Signature Algorithm: sha256WithRSAEncryption
88:a8:5b:c3:6a:90:83:c3:ee:2d:b9:77:dd:a0:f2:73:00:aa:
61:45:8e:99:10:e3:ca:13:58:1a:34:d8:fd:2c:e3:97:ef:ca:
00:31:21:d4:e3:d6:23:3c:45:c5:df:ec:82:41:1d:5f:b4:96:
6a:6b:7c:cd:7b:da:40:bf:f6:ea:4f:e9:13:5e:cd:dd:3b:1e:
19:b8:8f:d4:31:5e:41:af:c8:e1:03:3b:47:bf:3d:a1:0c:5a:
52:1c:b6:2c:76:c7:ee:06:88:52:83:ab:73:81:85:18:3a:8c:
2f:22:c7:95:a5:41:53:db:0c:09:44:95:d3:e3:75:eb:e6:4a:
df:e6:d6:e0:84:e5:1a:73:68:9d:38:2a:7f:ec:06:d1:a2:a5:
dd:2b:e9:0e:e7:38:11:6f:71:a4:8f:2d:a5:85:53:5b:52:6e:
1d:46:a0:60:d8:75:1c:e5:65:54:53:2c:77:0b:98:69:2f:48:
e0:82:91:9f:b7:66:8a:9b:a1:35:53:72:87:de:70:81:f2:32:
05:72:e9:02:48:41:b9:6e:8b:82:34:d9:7f:52:0a:7a:19:bf:
ff:99:ec:7c:9e:51:b9:a2:9b:91:dc:e3:54:c2:e6:8d:4e:f1:
31:45:d0:d0:dc:ee:8f:95:36:8e:72:55:c2:93:19:68:d3:a3:
f9:8c:7e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:31:25 2025 by rpki-client