Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38372e302f32342d3234203d3e20313336373837.roa
File: 3231322e33322e38372e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 2JeMNV7vapWH4Jk/5BPBT37dDQfpp62BmIxo2op70ig=
Subject key identifier: 0A:9D:76:DE:E9:38:36:AF:1F:B2:84:78:AD:09:B0:FE:75:DA:2B:81
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 422A84A0B124F2B77586F52FF460A547CE6BA3ED
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38372e302f32342d3234203d3e20313336373837.roa
Signing time: Thu 16 Oct 2025 15:47:55 +0000
ROA not before: Thu 16 Oct 2025 15:42:55 +0000
ROA not after: Thu 15 Oct 2026 15:47:55 +0000
asID: 136787
IP address blocks: 212.32.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:2a:84:a0:b1:24:f2:b7:75:86:f5:2f:f4:60:a5:47:ce:6b:a3:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 16 15:42:55 2025 GMT
Not After : Oct 15 15:47:55 2026 GMT
Subject: CN=0A9D76DEE93836AF1FB28478AD09B0FE75DA2B81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b3:21:75:24:fe:09:4d:5d:5f:7d:3c:60:01:
a1:32:c6:6a:02:41:53:d0:72:48:48:16:c1:ec:2b:
ab:a5:1d:9a:b6:8a:20:d0:3b:68:0f:75:9e:69:8d:
5b:59:5d:f4:1c:99:da:3c:16:0b:62:b5:fe:95:95:
fd:9b:31:18:5c:31:f0:af:a7:a4:68:f6:1d:7f:56:
81:a7:bb:74:45:6e:6a:77:f9:29:94:1a:b6:12:01:
4d:32:3a:c0:a1:bd:9a:27:0e:3f:e4:c2:52:d5:23:
55:0d:31:3d:24:8c:40:38:c3:5e:4c:bf:6f:60:66:
86:bf:4b:be:fb:c7:6c:13:af:b1:08:0d:c7:67:41:
13:ac:07:f9:24:a7:d7:76:e8:e6:9e:05:ae:35:63:
45:89:df:f2:d2:ba:32:c7:50:af:43:1e:1a:55:c9:
e0:f4:14:37:60:7a:dc:52:aa:8a:dd:b7:3d:e6:4b:
70:6c:0e:4b:ab:fe:bf:24:4f:92:28:50:a1:a8:33:
4e:db:19:4f:4f:6e:fa:4f:c7:96:5c:4c:5a:c3:05:
a5:a5:79:83:bf:7f:dd:37:d8:4f:97:81:55:22:5b:
b9:d8:ff:7c:ba:23:72:9b:85:5f:82:3d:92:16:e8:
ae:a1:cd:39:42:b4:67:b2:63:c0:28:6a:1a:9b:3a:
6a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:9D:76:DE:E9:38:36:AF:1F:B2:84:78:AD:09:B0:FE:75:DA:2B:81
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e33322e38372e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.32.87.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:be:f8:39:2e:ba:e4:4d:44:d6:9e:41:fd:49:93:8f:7a:64:
a7:a3:2a:cb:b1:1e:d0:0a:15:6a:8c:e6:b8:d0:69:03:c6:eb:
67:08:99:51:29:3e:0c:72:da:35:cd:6d:75:86:1e:7f:20:3c:
09:c1:3d:3a:d0:4e:2d:4b:c9:46:b5:7b:9a:78:87:fa:41:6e:
4b:c6:ea:c1:6a:82:f1:58:4c:57:bd:ee:ea:e9:65:e9:4d:ff:
92:a4:f9:ad:a2:2e:d7:52:c9:d9:d8:32:f0:e1:06:e7:da:ac:
73:60:f0:38:cf:ea:2b:8a:24:f5:09:02:29:2b:b2:e8:12:3f:
f3:61:5b:94:be:65:d8:14:74:2c:c3:8f:f1:68:f2:cb:8f:aa:
56:e6:8c:eb:08:ee:e7:0f:6e:d4:4f:2b:af:d4:7a:a4:11:73:
3b:a0:90:ed:b5:af:5a:79:00:58:68:f4:84:08:1b:3c:a5:22:
ea:97:72:14:a0:74:20:20:a4:c6:5e:de:83:e4:60:73:94:ff:
ad:b7:b5:f9:f1:84:ba:3f:f1:92:4b:ef:ac:1a:3f:05:a6:75:
82:15:47:48:88:bd:4a:c3:d9:5c:42:c1:67:69:b2:aa:fc:86:
95:c2:0c:51:d3:bd:43:86:13:28:4a:ea:82:87:95:3a:43:94:
30:c6:d9:24
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUQiqEoLEk8rd1hvUv9GClR85ro+0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTEwMTYxNTQyNTVaFw0yNjEwMTUxNTQ3NTVaMDMxMTAvBgNV
BAMTKDBBOUQ3NkRFRTkzODM2QUYxRkIyODQ3OEFEMDlCMEZFNzVEQTJCODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNsyF1JP4JTV1ffTxgAaEyxmoC
QVPQckhIFsHsK6ulHZq2iiDQO2gPdZ5pjVtZXfQcmdo8Fgtitf6Vlf2bMRhcMfCv
p6Ro9h1/VoGnu3RFbmp3+SmUGrYSAU0yOsChvZonDj/kwlLVI1UNMT0kjEA4w15M
v29gZoa/S777x2wTr7EIDcdnQROsB/kkp9d26OaeBa41Y0WJ3/LSujLHUK9DHhpV
yeD0FDdgetxSqordtz3mS3BsDkur/r8kT5IoUKGoM07bGU9PbvpPx5ZcTFrDBaWl
eYO/f9032E+XgVUiW7nY/3y6I3KbhV+CPZIW6K6hzTlCtGeyY8AoahqbOmqvAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUCp123uk4Nq8fsoR4rQmw/nXaK4EwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIzMTMyMmUzMzMyMmUzODM3
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
1CBXMA0GCSqGSIb3DQEBCwUAA4IBAQAtvvg5LrrkTUTWnkH9SZOPemSnoyrLsR7Q
ChVqjOa40GkDxutnCJlRKT4Mcto1zW11hh5/IDwJwT060E4tS8lGtXuaeIf6QW5L
xurBaoLxWExXve7q6WXpTf+SpPmtoi7XUsnZ2DLw4Qbn2qxzYPA4z+oriiT1CQIp
K7LoEj/zYVuUvmXYFHQsw4/xaPLLj6pW5ozrCO7nD27UTyuv1HqkEXM7oJDtta9a
eQBYaPSECBs8pSLql3IUoHQgIKTGXt6D5GBzlP+tt7X58YS6P/GSS++sGj8FpnWC
FUdIiL1Kw9lcQsFnabKq/IaVwgxR071DhhMoSuqCh5U6Q5Qwxtkk
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:31:40 2025 by rpki-client