Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38362e302f32342d3234203d3e20323132323338.roa
File: 3231322e33322e38362e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: 0XoRUUB6B3kZG3cm/U096a3UvvlxlXbLxkOGtwnDqPQ=
Subject key identifier: 17:40:CC:52:CC:93:78:DD:C2:EE:92:6D:00:F3:E1:C9:F2:31:67:6C
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5B5A2B8FD169B3A28BD45DD56EFA9140A83F7CAE
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38362e302f32342d3234203d3e20323132323338.roa
Signing time: Tue 22 Sep 2026 13:29:09 +0000
ROA not before: Tue 22 Sep 2026 13:24:09 +0000
ROA not after: Tue 21 Sep 2027 13:29:09 +0000
asID: 212238
IP address blocks: 212.32.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:5a:2b:8f:d1:69:b3:a2:8b:d4:5d:d5:6e:fa:91:40:a8:3f:7c:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 22 13:24:09 2026 GMT
Not After : Sep 21 13:29:09 2027 GMT
Subject: CN=1740CC52CC9378DDC2EE926D00F3E1C9F231676C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:86:ab:b7:1b:59:7f:54:a3:4f:0b:14:05:89:
e1:9a:0a:f7:f9:03:6c:1b:88:c2:4e:b3:40:87:bc:
fe:78:01:ca:41:72:7d:13:30:b5:4e:0b:8e:e4:0a:
fc:1c:2a:ea:9b:85:bf:bd:c4:05:b6:6b:92:79:8d:
c4:a6:45:2d:cd:09:31:95:9e:c8:7a:db:18:2c:89:
8f:b0:5d:ac:9f:16:9f:8e:4d:43:47:c2:ce:dc:1a:
fd:72:fd:25:a7:7a:31:01:3f:37:98:55:80:25:5c:
7c:a1:0a:3d:23:cf:58:c7:2f:5f:c9:66:c9:20:88:
a5:63:20:16:c2:ff:7b:7d:37:f0:cf:51:d8:92:13:
8c:cc:b7:15:64:48:d7:47:47:7d:06:7d:4c:9d:c6:
7a:0e:3d:31:f4:0b:e0:49:1a:f0:ea:12:d0:e9:b1:
fc:0b:10:41:43:1f:72:83:d8:1a:3a:4d:9b:23:85:
91:13:27:0e:ec:66:60:2f:2c:b0:e5:76:fc:a2:f8:
19:5d:50:52:62:5c:12:e7:cd:22:b4:7f:a0:2c:f5:
b6:a5:78:77:49:f9:0b:c7:27:a6:38:df:f8:c1:dd:
a9:7a:f5:2f:77:47:0f:ea:ae:3f:8d:e6:b5:a4:d4:
d0:18:d5:23:10:7e:a6:f5:f7:3f:73:47:0c:27:b3:
ba:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:40:CC:52:CC:93:78:DD:C2:EE:92:6D:00:F3:E1:C9:F2:31:67:6C
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38362e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.32.86.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:78:9c:b0:14:8b:89:b5:46:78:56:82:9f:96:15:d2:1b:fb:
27:e8:38:d3:e2:4b:19:43:f5:a1:82:45:ef:c7:60:b9:cb:44:
ee:0d:55:fc:b4:3c:4c:3f:14:d5:42:0b:9c:a7:5d:10:08:ac:
c7:bb:c7:ee:84:d4:ce:b2:77:1f:62:b7:ee:7e:98:be:f1:9a:
08:69:e5:0b:f2:9b:25:63:1a:d8:45:d2:75:2b:a9:c8:cc:77:
a9:62:44:d0:92:f1:9c:db:60:56:47:7f:71:7e:d1:d5:0e:8f:
61:79:82:e9:97:d7:73:5d:34:1d:76:b1:1d:e6:ac:05:10:bf:
ca:d0:b2:2e:11:6c:c9:3d:22:da:6b:94:c1:8e:bb:a3:f7:1c:
8c:89:9d:1c:eb:ee:a6:3d:24:52:e9:0d:ba:38:92:09:ca:6c:
3f:f8:a1:a3:c4:4e:5f:e8:a9:e5:bc:35:1a:85:de:74:84:ba:
09:df:7e:ae:3e:bc:1c:a2:4e:b1:3b:19:e4:30:b9:52:dd:57:
50:47:b5:91:0d:c0:fc:de:03:18:c9:50:01:b9:d2:01:17:a3:
1d:54:dc:40:84:96:09:09:89:6d:5e:91:b3:c5:62:3f:78:e2:
1d:e5:b9:23:73:ec:d0:1d:86:f0:f1:07:e4:40:81:c2:dc:ef:
83:24:f2:fb
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUW1orj9Fps6KL1F3VbvqRQKg/fK4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA5MjIxMzI0MDlaFw0yNzA5MjExMzI5MDlaMDMxMTAvBgNV
BAMTKDE3NDBDQzUyQ0M5Mzc4RERDMkVFOTI2RDAwRjNFMUM5RjIzMTY3NkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkhqu3G1l/VKNPCxQFieGaCvf5
A2wbiMJOs0CHvP54AcpBcn0TMLVOC47kCvwcKuqbhb+9xAW2a5J5jcSmRS3NCTGV
nsh62xgsiY+wXayfFp+OTUNHws7cGv1y/SWnejEBPzeYVYAlXHyhCj0jz1jHL1/J
ZskgiKVjIBbC/3t9N/DPUdiSE4zMtxVkSNdHR30GfUydxnoOPTH0C+BJGvDqEtDp
sfwLEEFDH3KD2Bo6TZsjhZETJw7sZmAvLLDldvyi+BldUFJiXBLnzSK0f6As9bal
eHdJ+QvHJ6Y43/jB3al69S93Rw/qrj+N5rWk1NAY1SMQfqb19z9zRwwns7qBAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUF0DMUsyTeN3C7pJtAPPhyfIxZ2wwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTMyMmUzMzMyMmUzODM2
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTMyMzIzMzM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
1CBWMA0GCSqGSIb3DQEBCwUAA4IBAQB9eJywFIuJtUZ4VoKflhXSG/sn6DjT4ksZ
Q/WhgkXvx2C5y0TuDVX8tDxMPxTVQgucp10QCKzHu8fuhNTOsncfYrfufpi+8ZoI
aeUL8pslYxrYRdJ1K6nIzHepYkTQkvGc22BWR39xftHVDo9heYLpl9dzXTQddrEd
5qwFEL/K0LIuEWzJPSLaa5TBjruj9xyMiZ0c6+6mPSRS6Q26OJIJymw/+KGjxE5f
6KnlvDUahd50hLoJ336uPrwcok6xOxnkMLlS3VdQR7WRDcD83gMYyVABudIBF6Md
VNxAhJYJCYltXpGzxWI/eOId5bkjc+zQHYbw8QfkQIHC3O+DJPL7
-----END CERTIFICATE-----
Generated at Sat Sep 26 15:05:10 2026 by rpki-client