Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38362e302f32342d3234203d3e20313336373837.roa
File: 3231322e33322e38362e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: esp79EfGCII9/u+7zhlkYKl3Eu6HGr/hKgTyXFjrOLo=
Subject key identifier: CC:CC:BD:FB:EB:37:18:4B:EF:87:46:FB:42:55:5F:F2:4D:AF:14:FD
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0A0484E21123A6ED9E10714A1B57412AF0F37F70
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38362e302f32342d3234203d3e20313336373837.roa
Signing time: Thu 16 Oct 2025 15:47:55 +0000
ROA not before: Thu 16 Oct 2025 15:42:55 +0000
ROA not after: Thu 15 Oct 2026 15:47:55 +0000
asID: 136787
IP address blocks: 212.32.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:04:84:e2:11:23:a6:ed:9e:10:71:4a:1b:57:41:2a:f0:f3:7f:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 16 15:42:55 2025 GMT
Not After : Oct 15 15:47:55 2026 GMT
Subject: CN=CCCCBDFBEB37184BEF8746FB42555FF24DAF14FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9d:06:e2:88:54:be:0d:f5:a7:03:a2:6c:70:
14:57:ee:e9:28:95:33:5a:a6:f4:9e:7c:c7:44:bf:
1e:40:9d:80:ac:2e:b6:b8:ba:66:6b:7b:97:5e:6b:
54:9d:de:e4:1b:15:1f:da:b2:dc:c7:58:52:f4:a4:
26:a3:86:03:2a:bf:a7:e8:fb:81:1d:a3:7e:fd:b6:
57:e2:71:7b:81:39:14:62:a8:c0:fb:3c:7c:ba:b7:
57:9b:33:39:53:b4:e3:3e:23:d8:f8:9c:6b:0a:c1:
8d:2b:21:26:1e:d9:03:56:cd:77:79:88:36:06:67:
c9:5d:00:cc:30:39:41:7d:1e:67:3c:76:bc:5a:98:
60:51:ab:0f:77:45:85:a9:ef:3f:9a:09:28:4b:28:
26:be:f7:3b:5a:1b:56:e3:47:2c:6b:0e:fc:f1:33:
6f:b3:92:3b:42:b4:96:a3:59:73:fd:85:7b:1e:d5:
0e:2d:9c:84:f5:e3:d4:3f:2e:d0:33:0d:10:39:69:
27:85:71:07:97:59:12:dc:f4:3f:f3:9c:3b:43:3e:
ed:4e:d2:c8:31:bf:94:d9:e2:33:52:43:a3:8a:c2:
14:ac:95:ac:c8:f8:a8:d6:59:d6:20:d7:40:0c:81:
18:bd:2d:df:2c:9a:ef:5e:fe:6d:f2:46:8d:75:e6:
7d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:CC:BD:FB:EB:37:18:4B:EF:87:46:FB:42:55:5F:F2:4D:AF:14:FD
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38362e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.32.86.0/24
Signature Algorithm: sha256WithRSAEncryption
53:d8:7b:be:fd:94:b9:19:a6:4a:bc:c2:49:e7:24:90:4e:40:
67:4e:7c:3a:f6:80:8e:73:b1:c2:64:05:96:14:fd:1b:8e:ba:
08:69:2a:33:7c:fc:85:8b:78:bb:9f:13:38:37:d2:a8:a1:c3:
95:57:7d:62:bf:40:65:e0:b5:de:62:56:12:0c:59:d5:b2:9f:
ab:4e:b7:d6:de:ce:05:a1:45:15:7c:74:0a:31:f4:ab:65:ff:
2a:ca:00:c3:e4:7f:68:b4:b0:25:a9:6b:65:46:3b:cd:5d:91:
7e:bc:f0:85:13:cd:83:69:5f:5a:88:28:dd:ba:ec:2c:96:e3:
f2:98:99:ff:a4:5e:16:03:1a:d8:08:16:4c:73:ad:f2:d3:0f:
e6:8b:39:f2:70:cf:d6:5b:8e:cc:c7:73:8e:8d:b0:83:51:62:
c6:fc:67:df:be:f0:5a:05:7f:dd:0c:f4:f7:75:15:6b:a0:65:
35:38:05:f5:ce:9b:d8:8a:12:51:78:ce:57:57:bb:73:32:cf:
e0:ed:ba:ba:e2:ed:f7:c9:b3:93:35:fe:35:21:c4:80:20:a9:
77:ad:37:69:8d:f0:de:8a:ee:fa:47:12:2d:73:21:ce:63:76:
a0:7d:89:d3:89:b5:18:4b:b8:6a:3f:bc:7c:af:a1:8d:6e:ee:
37:de:a2:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:53:43 2025 by rpki-client