Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38362e302f32342d3234203d3e20313336373837.roa
File: 3231322e33322e38362e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: uvdq965TvB5K86ymoxWWKjkWbVlkMsRoH3zoSe5ZV4g=
Subject key identifier: A1:5F:89:44:21:DE:8D:4C:FF:9F:8D:51:9A:31:EE:B5:9C:D0:7E:41
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 08EC7BD23C4C89C3F4B87C0E78A55E645871B86F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38362e302f32342d3234203d3e20313336373837.roa
Signing time: Thu 17 Sep 2026 16:29:01 +0000
ROA not before: Thu 17 Sep 2026 16:24:01 +0000
ROA not after: Thu 16 Sep 2027 16:29:01 +0000
asID: 136787
IP address blocks: 212.32.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:ec:7b:d2:3c:4c:89:c3:f4:b8:7c:0e:78:a5:5e:64:58:71:b8:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 17 16:24:01 2026 GMT
Not After : Sep 16 16:29:01 2027 GMT
Subject: CN=A15F894421DE8D4CFF9F8D519A31EEB59CD07E41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c3:16:2e:0c:be:f1:94:ee:53:de:a0:63:8b:
4e:ad:28:2f:e5:9c:38:8c:0c:43:95:4c:ce:63:2c:
ee:81:2b:92:d9:df:95:8b:6e:2d:27:4e:cc:f7:c5:
81:51:f7:3f:6b:32:84:4f:19:be:00:62:67:31:30:
5c:1e:48:fc:b3:76:eb:dc:7f:67:d1:1a:44:bb:29:
17:43:c1:b2:1a:36:41:42:80:56:34:22:f3:eb:19:
69:e4:0e:74:1c:35:38:5c:4c:dc:9e:8a:1a:0f:d2:
f7:d7:59:83:89:7d:b2:8b:95:f0:78:42:04:29:3f:
59:5a:8c:3d:73:87:14:95:17:de:19:17:95:6b:db:
33:ef:8c:64:fd:ac:79:ca:4c:e9:33:ff:97:b5:8b:
b7:92:d7:4a:03:a4:42:a7:cd:a8:b8:1e:2c:20:43:
41:d4:4a:b3:1e:cf:cc:15:56:f1:36:a5:65:a2:1f:
a8:d4:c7:e1:ce:5c:54:29:b6:63:7e:e5:01:39:c6:
8d:be:1a:b9:c5:e3:85:12:c4:60:ab:40:45:6f:d4:
43:78:e8:72:08:c5:77:d4:c0:b7:bc:ce:30:7a:f2:
9b:77:b9:5f:df:d9:3e:3d:16:ca:bf:f5:85:a3:68:
fb:00:a4:24:76:99:29:10:03:1a:83:60:cf:95:f6:
c2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:5F:89:44:21:DE:8D:4C:FF:9F:8D:51:9A:31:EE:B5:9C:D0:7E:41
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38362e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.32.86.0/24
Signature Algorithm: sha256WithRSAEncryption
89:8f:2d:9b:c7:ec:fe:5e:63:f8:cb:61:6d:6f:6d:96:80:a5:
a2:5e:b4:ff:1d:95:95:69:55:69:6b:9a:1f:06:02:6e:36:3c:
0c:da:ba:db:e4:e3:69:a4:17:00:74:31:d7:47:b6:25:8c:2e:
3a:c3:b4:0f:01:c3:3c:e0:aa:5b:eb:b4:35:af:e4:c0:b7:1c:
57:29:b8:62:fe:dd:3a:ae:57:e0:8f:4c:13:fc:78:5e:09:af:
36:a2:d3:36:ac:9d:e7:58:9e:55:f3:67:cb:cb:d8:1c:b6:68:
ea:24:9d:ef:a9:45:f2:44:30:11:1e:bf:5b:c9:0c:d6:80:b5:
55:73:50:19:c1:20:f2:62:c6:ac:44:8d:9b:0e:40:01:e6:5c:
21:80:d4:ec:70:12:2e:eb:d2:8f:97:4d:21:ae:ac:e8:05:44:
3e:22:61:5a:ed:0a:5c:36:73:06:dc:0b:3c:8d:92:11:a2:8a:
f1:49:b1:6f:42:28:2e:11:27:1d:4b:d7:6f:45:d1:2c:84:9d:
3b:f7:d7:92:5f:a8:c6:1f:fe:f5:2c:01:5d:b2:6b:31:ce:52:
8b:8b:a3:8c:cd:98:01:7e:d6:d9:ff:67:0c:9b:11:56:59:54:
af:4a:e8:98:ab:62:d6:95:4e:d4:a2:87:a7:b6:c1:7b:70:36:
86:9b:39:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:52:47 2026 by rpki-client